Privacy Policy

1. Introduction

Perisai Legal (referred to in this policy as "we", "us", or "our") is committed to protecting the personal data of individuals who interact with us. This Privacy Policy sets out how we collect, use, store, and protect personal data in connection with our insurance law advisory and dispute services, and in connection with the use of our website at perisail.sbs.

This policy is issued in accordance with the Personal Data Protection Act 2010 (PDPA) of Malaysia. By submitting your information through our website or engaging with Perisai Legal, you acknowledge that you have read and understood this policy.

If you have questions about how we handle your personal data, please contact us at: [email protected]

2. Data We Collect

We collect personal data in the following circumstances:

Information You Provide

• Name, email address, and phone number submitted via our contact form
• Information provided in correspondence, including descriptions of your insurance matter
• Documents you share with us in connection with an advisory or dispute engagement

Information Collected Automatically

• Browser type, IP address, and pages visited — collected via analytics cookies if you have consented
• Device and session information for website functionality purposes

Information from Third Parties

We do not purchase or otherwise acquire personal data from third-party data brokers.

3. How We Use Your Data

We use the personal data we collect for the following purposes:

• To respond to enquiries submitted through our website
• To deliver the legal advisory or dispute services you have engaged us for
• To communicate with you regarding the progress of your engagement
• To comply with our legal and professional obligations as practising solicitors
• To improve our website and understand how visitors use it (with analytics consent)

We do not use your personal data for unsolicited marketing communications.

4. Legal Basis for Processing

We process personal data on the following legal bases under the PDPA 2010:

• Consent — where you have voluntarily provided information through our website contact form
• Contractual necessity — where processing is necessary to deliver the legal services you have engaged us for
• Legal obligation — where we are required to retain records by law or professional regulation
• Legitimate interests — for website analytics and security, where your interests do not override ours

5. Data Retention

We retain personal data for the following periods:

• Enquiry data (not resulting in engagement): 12 months from submission
• Engagement records (client files, correspondence): 7 years from completion of engagement, in accordance with professional obligations under the Malaysian Bar Council guidelines
• Analytics data: aggregated and de-identified after 26 months

Following the applicable retention period, personal data is securely deleted or anonymised.

6. Data Protection Measures

We implement appropriate technical and organisational measures to protect personal data against unauthorised access, loss, or disclosure, including:

• Encrypted transmission of data via HTTPS
• Access controls limiting data access to authorised personnel only
• Secure document storage for client engagement files
• Regular review of our data handling procedures

In the event of a personal data breach that poses a risk to the rights and freedoms of individuals, we will take appropriate steps to contain and notify as required under applicable law.

7. Cookies

Our website uses cookies. Essential cookies are necessary for the website to function and are always active. Analytics and preference cookies are only placed with your consent. For full information on the cookies we use and how to manage your preferences, please see our Cookie Policy.

8. Sharing of Personal Data

We do not sell personal data to third parties. We may share personal data in the following limited circumstances:

• With opposing parties, courts, or arbitral bodies where required in the course of legal proceedings you have engaged us for
• With regulatory bodies such as the Malaysian Bar Council where required by our professional obligations
• With service providers who assist with website hosting and analytics, under contractual data processing terms

9. Your Rights

Under the Personal Data Protection Act 2010, you have the following rights in relation to your personal data held by us:

• Right of access — to request a copy of personal data we hold about you
• Right of correction — to request correction of inaccurate or incomplete data
• Right to withdraw consent — to withdraw consent to processing, where processing is based on consent
• Right to limit processing — to request that we restrict how we use your data in certain circumstances

To exercise any of these rights, please contact us at [email protected]. We will respond within 21 days of receiving your request. We may need to verify your identity before processing the request.

10. Third-Party Links

Our website may contain links to external websites. We are not responsible for the privacy practices of those sites and this policy does not apply to them. We encourage you to review the privacy policy of any external website before submitting personal data to it.

11. Children's Privacy

Our services are directed at individuals who are 18 years of age or older. We do not knowingly collect personal data from minors. If you believe we have inadvertently collected personal data from a minor, please contact us so that we can delete it.

12. Jurisdiction

This policy is governed by the laws of Malaysia. The supervisory authority responsible for personal data protection in Malaysia is the Department of Personal Data Protection (Jabatan Perlindungan Data Peribadi). If you have unresolved concerns about our data handling, you may contact that authority.

13. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, the "Last Updated" date at the top of this document will be revised. Where changes are material, we will provide notice through our website. Continued use of our website following any changes constitutes your acknowledgement of the updated policy.

14. Contact Information

For any privacy-related enquiries, please contact us:

• Email: [email protected]
• Post: Perisai Legal, No. 17, Jalan Tun H. S. Lee, 50000 Kuala Lumpur, Malaysia
• Phone: +60 3-2074 6138