Privacy Policy

---

1. Introduction

Pusaka Counsel ("we", "us", "our") is a legal practice registered in Malaysia, with its principal office at Suite 22-A, Menara Maxis, Jalan Ampang, 50450 Kuala Lumpur. We act as the data controller for personal information collected through our website and in the course of delivering our services.

This policy applies to all personal data collected via our website at pusakacen.live, through our enquiry and contact forms, and in connection with our estate planning, probate administration, and trust establishment services. It should be read alongside our Cookie Policy and Terms & Conditions.

We comply with the Personal Data Protection Act 2010 (PDPA) of Malaysia and applicable Malaysian data protection regulations. If you have any questions about this policy, please contact us at [email protected].

---

2. Data We Collect

We collect personal data in the following circumstances:

2.1 Information You Provide Directly

• Name, email address, and telephone number submitted through our website contact forms
• The nature of your enquiry or the matter you describe
• Any additional information you choose to share in correspondence

2.2 Information Collected Automatically

• Technical data including your IP address, browser type, and operating system
• Pages visited, time spent on each page, and referral source
• Cookie identifiers, where you have consented to their use (see our Cookie Policy)

2.3 Information Collected in the Course of a Matter

Where you engage Pusaka Counsel for legal services, we collect additional personal and financial information as required to deliver those services. That information is governed by the terms of our engagement letter and applicable professional obligations, and falls outside the scope of this website privacy policy.

---

3. How We Use Personal Data

We use the personal data we collect for the following purposes:

• Responding to enquiries and initial consultations submitted through our website
• Assessing whether and how we may assist with a matter
• Administering our website and maintaining its security and functionality
• Fulfilling legal and regulatory obligations under Malaysian law
• Conducting internal analysis to understand how our website is used and where it may be improved

3.1 Legal Basis for Processing

• Consent: Where you have given clear consent, for example by accepting optional cookies or submitting an enquiry form
• Legitimate Interests: For website analytics and security, where our interests do not override your rights
• Legal Obligation: Where processing is necessary to comply with Malaysian law, including the PDPA 2010, the Legal Profession Act 1976, and anti-money-laundering regulations
• Contract: Where processing is necessary to carry out services you have engaged us for

3.2 Marketing Communications

We do not send unsolicited marketing communications. Any updates or newsletter correspondence from Pusaka Counsel will be sent only with your prior consent, and you may withdraw that consent at any time by contacting us at [email protected].

---

4. Data Sharing and Third Parties

We do not sell personal data. We may share information with third parties in the following limited circumstances:

• Service Providers: Hosting providers and analytics services that process data on our behalf under contractual data protection obligations
• Professional Advisers: Foreign counsel, correspondents, or other professionals where required for the delivery of cross-border estate or probate matters, with your knowledge
• Regulatory Authorities: Where we are required to disclose information under Malaysian law, a court order, or applicable professional regulations

Where data is shared with overseas parties in connection with a matter involving foreign assets, we take reasonable steps to ensure appropriate safeguards are in place, consistent with the PDPA 2010.

---

5. Data Retention

We retain personal data only for as long as is necessary for the purposes for which it was collected:

• Website enquiry data: Retained for 24 months from the date of enquiry, or longer if an engagement follows
• Analytics data: Aggregated data retained for up to 26 months; individual session data is not retained beyond the session
• Matter-related data: Retained in accordance with our professional obligations under the Legal Profession Act 1976 and related regulations, typically for a minimum of 7 years following conclusion of the matter

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised.

---

6. Data Protection Measures

We apply appropriate technical and organisational measures to protect personal data against unauthorised access, disclosure, alteration, or destruction:

• Our website is served over HTTPS with current TLS encryption
• Access to client data within our systems is restricted to personnel with a need to know
• We review our data security practices periodically
• Our hosting infrastructure is maintained by reputable providers with appropriate security certifications

In the event of a personal data breach that poses a risk to individuals, we will notify the relevant parties in accordance with our obligations under the PDPA 2010 and applicable guidance from the Personal Data Protection Commissioner of Malaysia.

---

7. Cookies

Our website uses cookies to maintain basic functionality and, where you have consented, to collect analytics data. Essential cookies cannot be disabled as they are required for the site to operate. Optional analytics and preference cookies are only activated following your consent.

Full details of the cookies we use, their purpose, and how to manage your preferences are set out in our Cookie Policy.

---

8. Your Rights

Under the Personal Data Protection Act 2010 (Malaysia), you have the following rights in relation to your personal data:

• Right of Access: To request a copy of the personal data we hold about you
• Right of Correction: To request that inaccurate or incomplete data be corrected
• Right to Withdraw Consent: To withdraw consent to processing at any time, without affecting the lawfulness of earlier processing
• Right to Limit Processing: To request that we limit how we use your data in certain circumstances
• Right to Object: To object to processing carried out on the basis of legitimate interests

To exercise any of these rights, please write to us at [email protected] or at our registered address. We will respond within 21 days of receiving a valid request. We may ask you to verify your identity before proceeding.

If you consider that your rights under the PDPA have not been respected, you may lodge a complaint with the Personal Data Protection Commissioner of Malaysia.

---

9. Third-Party Links

Our website may contain links to external websites, including those of regulatory bodies, courts, or professional organisations. We are not responsible for the privacy practices of those websites and encourage you to read their respective policies. A link from our site does not constitute an endorsement of the linked organisation's data practices.

---

10. Children and Minors

Our services are intended for adults who have the legal capacity to enter into contracts and seek legal advice. We do not knowingly collect personal data from individuals under the age of 18. If we become aware that we have inadvertently collected data from a minor, we will delete it promptly. Please contact us at [email protected] if you have concerns about this.

---

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. Where changes are material, we will update the "Last Updated" date at the top of this page. Continued use of our website following any update constitutes acceptance of the revised policy. We encourage you to review this page periodically.

---

12. Contact for Data Enquiries

For questions, correction requests, or data-related complaints, please contact us at: