Privacy Policy

Introduction

Tepak Sirih ("the Firm", "we", "us") is committed to protecting the personal information of everyone who contacts or engages with us. This policy explains what information we collect, how it is used, how we protect it, and what rights you have in relation to it.

This policy applies to information collected through our website at tepaksired.world, through our contact form, by telephone, and in the course of legal engagements. If you have questions about anything in this policy, you may write to us at [email protected].

Information We Collect

We may collect the following personal information from you:

• Name and contact details (telephone number, email address)
• The content of messages submitted through our contact form
• Information about the legal matter you are seeking assistance with
• Documents you provide in the course of an engagement
• Technical information collected automatically through cookies (see Cookie section below)

We collect only what is necessary for the purpose for which it is collected. We do not ask for information we do not need.

How We Use Your Information

We use the personal information we collect for the following purposes:

• To respond to your enquiry and assess whether we can assist you
• To provide legal services where an engagement is agreed
• To communicate with you about your matter, including sending written updates
• To comply with our obligations under Malaysian law and Bar Council regulations
• To improve our website through anonymised analytics data

We do not use your personal information for marketing purposes without your consent, and we do not sell or share your information with third parties for commercial purposes.

Legal Basis for Processing

We process your personal information on the following legal bases:

• Consent — where you have submitted a contact form or provided information voluntarily
• Contract — where processing is necessary to carry out an agreed engagement
• Legal obligation — where we are required to retain or disclose information under applicable law
• Legitimate interests — where processing is necessary for the ordinary operation of the Firm, where this does not override your rights

Data Retention

We retain personal information for as long as is necessary for the purposes set out in this policy and to comply with our legal obligations. In general:

• Enquiry correspondence not resulting in an engagement: up to 12 months
• Client files and related documents: 7 years from the conclusion of the matter, in accordance with Bar Council guidance
• Website analytics data: up to 26 months in anonymised form

Data Protection and Security

We take reasonable technical and organisational measures to protect personal information from unauthorised access, disclosure, or loss. These include:

• Secure storage of physical client files within our office premises
• Password-protected access controls for digital records
• Encryption of email communications where practicable
• Restriction of access to personal data to staff with a legitimate need

In the event of a data breach that may affect your rights, we will notify you in accordance with applicable Malaysian law (Personal Data Protection Act 2010).

Cookies

Our website uses cookies to improve your experience. Essential cookies are necessary for the site to function. Optional analytics and preference cookies are used only with your consent. You can manage your cookie preferences at any time through our Cookie Policy page.

Third-Party Links

Our website may contain links to external sites. We are not responsible for the privacy practices of those sites and encourage you to review their policies before providing any personal information to them.

Your Rights

Under the Personal Data Protection Act 2010 (Malaysia), you have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate or incomplete data
• Withdraw consent to processing (where consent is the legal basis)
• Request that we limit or cease processing in certain circumstances
• Lodge a complaint with the Department of Personal Data Protection Malaysia

To exercise any of these rights, write to us at [email protected]. We will respond within 21 days.

Children's Privacy

Our services are directed at adults aged 18 and above. We do not knowingly collect personal information from individuals under the age of 18 through this website.

Changes to This Policy

We may update this policy from time to time. Any changes will be noted with a revised "Last Updated" date at the top of this page. Continued use of our website following a change constitutes acceptance of the revised policy.