Privacy Policy

1. Introduction

Suluh Mahligai ("the firm", "we", "us") is committed to protecting the personal data of those who contact us, instruct us, and interact with our website. This Privacy Policy explains what personal data we collect, how we use it, and the rights available to you under Malaysian law.

This policy applies to personal data collected through our website at suluhmahad.pro, through direct communications (telephone, email, and in-person consultations), and through the delivery of our legal services. Our principal place of business is Suite 27, Jalan Telawi, 59100 Bangsar Baru, Kuala Lumpur, Malaysia.

2. Data We Collect

We may collect and process the following personal data:

• Identity data: Your name and relationship to the matter.
• Contact data: Email address, telephone number, and postal address.
• Matter data: Information you share with us about your family situation, which may include sensitive personal data relating to family relationships, finances, and children.
• Communications data: Records of correspondence between us, including emails, letters, and notes from telephone calls.
• Technical data: IP address, browser type, pages visited, and session duration, collected via cookies when you visit our website. See our Cookie Policy for details.

We collect only data that is necessary for the purposes described in this policy. We do not collect sensitive data beyond what is shared voluntarily in the context of our legal services.

3. How We Use Your Data

We use personal data for the following purposes:

• To respond to enquiries and schedule appointments.
• To provide legal services and carry out the instructions of clients.
• To prepare, file, and correspond in connection with legal proceedings or documentation.
• To maintain records of client matters as required by law and professional conduct obligations.
• To send service-related communications (appointment reminders, updates on your matter).
• To understand how our website is used, so that we may improve it.
• To comply with legal and regulatory obligations applicable to legal practitioners in Malaysia.

We do not use client data for marketing purposes without consent, and we do not sell personal data to any third party.

4. Legal Basis for Processing

We process personal data on the following grounds under the Personal Data Protection Act 2010 (Malaysia):

• Consent: Where you have provided information voluntarily through our contact form or in the course of an initial consultation.
• Contractual necessity: Where processing is necessary to perform our legal services agreement with you.
• Legal obligation: Where we are required to retain or process data by law or by the rules of the Malaysian Bar.
• Legitimate interests: For the purposes of maintaining our business records, improving our website, and administering our practice.

5. Data Sharing

We do not share personal data with third parties except in the following circumstances:

• With family mediators, barristers, or other legal professionals engaged in connection with your matter, where necessary and with your knowledge.
• With courts and relevant government bodies, as required in the conduct of legal proceedings.
• With our professional indemnity insurers, if required in relation to a claim.
• With regulatory authorities if required by law or professional conduct obligations.
• With technical service providers who host our website and email, under data processing agreements that require them to protect your data.

6. Data Security

We take appropriate technical and organisational measures to protect personal data from unauthorised access, loss, or disclosure. These measures include:

• Password-protected file management systems with access limited to those working on the relevant matter.
• Encrypted email communications where applicable.
• Physical security measures for paper files held at our offices.
• Regular review of our data handling procedures.

In the event of a data breach that is likely to affect your rights or interests, we will notify you as soon as reasonably practicable.

7. Cookies

Our website uses cookies to understand how it is used and to improve the experience for visitors. For detailed information about the cookies we use and how to manage your preferences, please see our Cookie Policy.

8. Data Retention

We retain client matter files for a minimum of seven years following the conclusion of the engagement, in accordance with Malaysian professional conduct requirements. Website technical data is retained for up to twelve months. Data submitted through the contact form that does not result in an engagement is deleted after ninety days.

We review our retention practices periodically and will delete data that is no longer required.

9. Your Rights

Under the Personal Data Protection Act 2010, you have the following rights regarding your personal data:

• Right of access: To request a copy of the personal data we hold about you.
• Right to correct: To request correction of inaccurate or incomplete data.
• Right to withdraw consent: To withdraw consent to processing, where consent was the basis for processing.
• Right to limit processing: To request that we limit how we use your data in certain circumstances.
• Right to complain: To lodge a complaint with the Personal Data Protection Commissioner of Malaysia.

To exercise any of these rights, please contact us at [email protected]. We will respond within thirty days.

10. Third-Party Links

Our website may contain links to external websites. We are not responsible for the privacy practices of those sites and recommend that you review their privacy policies before providing any personal data.

11. Children

Our services are directed at adults aged eighteen and above. Where personal data relating to children is shared with us in the context of family law proceedings, it is handled with the same care and confidentiality as all other client data, and is used solely for the purposes of the matter concerned.

12. Changes to This Policy

We may update this Privacy Policy from time to time. Where changes are material, we will take reasonable steps to draw them to the attention of existing clients. The date at the top of this page reflects when the policy was last revised.