Legal Document
Privacy Policy
Last Updated: 14 April 2025
Introduction
Lindung Legal (referred to in this policy as "we", "us", or "the firm") is a legal practice registered in Malaysia, operating from 54, Jalan Light, 10200 George Town, Penang. We are committed to handling personal data responsibly and in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA 2010).
This policy explains what personal data we collect through this website and through our professional engagements, how we use it, and the choices available to you. If you have questions, please contact us at [email protected].
Data We Collect
When you submit an enquiry through the website's contact form, we collect the information you provide: your name, email address, telephone number (if supplied), and the description of your matter. We do not collect any data beyond what you voluntarily submit through the form.
We may also collect standard technical data through website analytics tools — including general geographic location, browser type, and pages visited — but this data is not linked to your identity unless you have submitted an enquiry.
We do not collect sensitive personal data as defined under PDPA 2010 through the website. Information shared as part of a legal engagement is handled under our professional confidentiality obligations as advocates and solicitors.
How We Use Your Data
- To respond to your enquiry with an initial written view on your matter
- To communicate with you for the purposes of a legal engagement, if one proceeds
- To maintain our conflict-check records as required under professional rules
- To comply with legal obligations applicable to the practice
- For internal website analytics to improve user experience
We do not use your data for marketing purposes or share it with third parties for advertising. We do not send unsolicited communications.
Legal Basis for Processing
Under PDPA 2010, we process personal data on the following bases:
- Consent — when you submit an enquiry through the website form
- Contract — when processing is necessary for a legal engagement you have instructed
- Legal obligation — where required by the Legal Profession Act 1976 or other applicable law
- Legitimate interest — for conflict-checking and matter management within the firm
Data Retention
Enquiry data from the website contact form is retained for a period of twelve months from the date of submission if no engagement follows, after which it is deleted.
Data associated with a legal engagement is retained for seven years from the close of the matter, in line with standard Malaysian legal practice requirements and applicable limitation periods.
Data Protection Measures
We use standard website security measures including HTTPS encryption for data submitted through the website. Access to matter files within the firm is restricted to practitioners and support staff directly involved in the relevant engagement.
In the event of a data breach that may affect your interests, we will notify you as required under applicable law. We conduct periodic reviews of our data handling practices.
Cookies
This website uses cookies for basic functionality and, where you have consented, for analytics purposes. For a detailed explanation of the cookies used, please see our Cookie Policy.
Third-Party Services
This website may use third-party analytics services (such as Google Analytics) to help us understand how visitors use the site. These services collect anonymised data in accordance with their own privacy policies. We do not share identifiable personal data with third-party analytics providers.
We do not use advertising networks or social media tracking pixels that collect personal data from website visitors without their consent.
Your Rights Under PDPA 2010
Under Malaysia's Personal Data Protection Act 2010, you have the following rights in respect of the personal data we hold about you:
- Right of access — to request a copy of your personal data
- Right of correction — to request correction of inaccurate or incomplete data
- Right to withdraw consent — for processing based on consent
- Right to limit processing — in circumstances defined under PDPA 2010
- Right to complain — to the Personal Data Protection Commissioner of Malaysia if you believe your rights have not been observed
To exercise any of these rights, please write to us at [email protected]. We will respond within 21 days of receiving your request.
Third-Party Links
This website may contain links to external websites, including court portals, regulatory bodies, and professional associations. We are not responsible for the privacy practices of those websites. We recommend reading the privacy notices of any external sites you visit.
Children
This website is directed at adults seeking professional legal services. We do not knowingly collect personal data from individuals under 18 years of age. If you believe a minor has submitted data through this website, please contact us and we will delete the data promptly.
Changes to This Policy
We may update this policy from time to time to reflect changes in law or our practices. The current version will always be available on this page, with the Last Updated date shown at the top. Continued use of the website after any change constitutes acceptance of the revised policy.
Contact
For any question or request regarding this policy or your personal data:
Lindung Legal
54, Jalan Light, 10200 George Town, Penang, Malaysia