Privacy Policy

1. Data Controller

The data controller responsible for your personal information is Insan Counsel, registered in Malaysia, with offices at Unit 7-1, Menara Mara, 232 Jalan Tuanku Abdul Rahman, 50100 Kuala Lumpur. For data-related questions, contact us at [email protected].

2. Personal Data We Collect

We may collect the following categories of personal data:

• Contact information: name, email address, telephone number
• Enquiry content: details you include in messages or consultation requests
• Client matter data: estate and family information provided in the course of a legal engagement
• Website usage data: browser type, pages visited, session duration (via analytics cookies, with consent)

We do not collect sensitive personal data beyond what is necessary for estate and inheritance legal work, and we do so only with your knowledge and in accordance with the purposes described below.

3. How We Collect Data

• Through the enquiry form on this website
• Through direct contact by email, telephone, or in-person consultation
• Through documents you provide in the course of an engagement
• Through cookies on this website (see Section 6 and our Cookie Policy)

4. Legal Basis for Processing

Under the PDPA 2010, we process personal data on the following grounds:

• Consent: where you have submitted an enquiry or agreed to our terms
• Contract: where processing is necessary to perform legal services you have engaged us for
• Legitimate interest: for the proper administration of our practice and compliance with professional obligations
• Legal obligation: where we are required by law to retain or disclose information

5. How We Use Your Data

• To respond to enquiries and schedule consultations
• To deliver the legal services you have engaged us for
• To maintain accurate client records for the duration of an engagement and the required retention period thereafter
• To comply with our obligations under the Legal Profession Act 1976 and related professional rules
• To improve this website using aggregated, anonymised analytics data

We do not use your personal data for unsolicited marketing communications without your explicit consent. We do not sell personal data to third parties.

6. Data Retention

Enquiry data from website submissions is retained for up to 12 months. Client matter data is retained for a minimum of 7 years following conclusion of the matter, in accordance with the requirements of the Malaysian Bar and applicable professional conduct rules. After the applicable retention period, data is securely deleted or anonymised.

7. Data Security

We implement appropriate technical and organisational measures to protect personal data against unauthorised access, loss, or disclosure. Digital records are held on encrypted systems. Physical client files are stored in secured premises with restricted access. In the event of a data breach that poses a risk to individuals, we will take prompt remedial action and notify affected parties as required by law.

8. Cookies

This website uses cookies for essential functionality and, with your consent, for analytics purposes. Full details are provided in our Cookie Policy. You may manage your cookie preferences at any time through that page.

9. Third-Party Sharing

We do not share personal data with third parties except as follows:

• With courts, regulatory bodies, or government agencies as required by law or court order
• With professional service providers assisting in your matter (e.g. valuers, other counsel) — subject to confidentiality obligations
• With our website analytics provider (anonymised data, no personal identifiers shared)

All third parties to whom we disclose data are required to handle it in accordance with applicable data protection law.

10. Your Rights Under Malaysian Law

Under the PDPA 2010, you have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate or incomplete data
• Withdraw consent to processing (where processing is consent-based)
• Request that we cease processing your data for direct marketing purposes

To exercise any of these rights, contact us at [email protected]. We will respond within a reasonable period. Please note that legal obligations may limit our ability to fully comply with some requests (for example, during an active engagement or within mandatory retention periods).

If you have a concern about how your data has been handled, you may refer the matter to the Department of Personal Data Protection Malaysia (www.pdp.gov.my).

11. Third-Party Links

This website may contain links to external websites. Insan Counsel is not responsible for the privacy practices of those sites. We encourage you to review the privacy policy of any external site you visit.

12. Children's Privacy

Our services are intended for adults. We do not knowingly collect personal data from individuals under 18 years of age. If you believe a minor has submitted data through this website, please contact us promptly and we will arrange for its deletion.

13. Changes to This Policy

We may update this privacy policy from time to time. Changes will be posted on this page with an updated effective date. Continued use of this website following any update constitutes acceptance of the revised policy.

14. Contact for Privacy Matters

For all data privacy enquiries, corrections, or requests, contact: