Privacy Policy

1. Introduction

clarimundi ("we", "our", "us") is committed to protecting the privacy of individuals who interact with our legal practice. This Privacy Policy describes how we collect, use, store, and protect personal data in connection with our services and this website.

This policy applies to all personal data collected through our website, contact forms, email correspondence, phone enquiries, and in-person consultations. By using our services or submitting information through our website, you acknowledge that you have read and understood this policy.

For questions about this policy or your personal data, please contact us at [email protected].

2. Data We Collect

We may collect the following categories of personal data:

Contact information: Name, email address, phone number, and mailing address provided through our contact form, email, or in person.

Case-related information: Details of legal matters shared during consultations, including documents, financial information, and correspondence relevant to your engagement with us.

Website usage data: Information collected through cookies and analytics tools, such as pages visited, time spent on site, browser type, and referring URL.

Communication records: Records of emails, messages, and phone communications between you and our practice.

3. How We Use Your Data

We use personal data for the following purposes:

Providing legal services: To assess your enquiry, prepare legal documentation, and deliver the services you have engaged us for.

Communication: To respond to your enquiries, provide updates on your matter, and send administrative communications related to your engagement.

Legal compliance: To meet our obligations under Malaysian law, including anti-money laundering requirements, professional conduct rules, and tax regulations.

Website improvement: To analyse how visitors use our website and improve its content and functionality.

4. Legal Basis for Processing

We process personal data on the following legal bases under the Personal Data Protection Act 2010 (PDPA):

Consent: Where you have provided your consent to the processing of your data, such as when submitting a contact form.

Contractual necessity: Where processing is necessary for the performance of a legal services engagement.

Legal obligation: Where processing is required to comply with applicable Malaysian laws and regulations.

5. Data Sharing

We do not sell or rent personal data to third parties. We may share data in the following limited circumstances:

Regulatory bodies: Where required by law, such as the Malaysian Bar Council, Land Office, courts, or government authorities.

Service providers: Third parties who assist us in operating our website or providing services (e.g., hosting providers, analytics services), subject to appropriate data protection arrangements.

With your consent: Where you have specifically authorised the sharing of your data with a named party.

6. Data Protection Measures

We take appropriate technical and organisational measures to protect personal data against unauthorised access, alteration, disclosure, or destruction. These measures include secure data storage, access controls limited to authorised personnel, encryption of sensitive communications, and regular reviews of our data handling procedures.

In the event of a data breach that poses a significant risk to your rights, we will notify you and the relevant authorities as required under Malaysian law.

7. Data Retention

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected. For client engagement records, we follow the retention periods required by the Malaysian Bar Council and applicable legislation, which typically require retention of client files for a minimum of seven years after the conclusion of a matter.

Website analytics data is retained for a period of 26 months, after which it is anonymised or deleted.

8. Cookies

Our website uses cookies to improve functionality and analyse usage. For detailed information on the types of cookies we use and how to manage your preferences, please refer to our Cookie Policy.

9. Your Rights

Under the Personal Data Protection Act 2010, you have the following rights:

Right of access: You may request access to the personal data we hold about you.

Right of correction: You may request that inaccurate or incomplete data be corrected.

Right to withdraw consent: Where processing is based on consent, you may withdraw that consent at any time.

To exercise any of these rights, please contact us at [email protected]. We will respond to requests within 21 days as required by the PDPA.

10. Third-Party Links

Our website may contain links to external websites. We are not responsible for the privacy practices or content of those third-party sites. We encourage you to review the privacy policies of any external sites you visit.

11. Children's Privacy

Our services are not directed at individuals under the age of 18. We do not knowingly collect personal data from minors. If we become aware that we have collected data from a person under 18 without appropriate consent, we will take steps to delete that information.

12. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. The updated version will be posted on this page with a revised "Last Updated" date. We encourage you to review this policy periodically.

13. Contact Us

Data Controller: clarimundi

Address: 36 Jalan Ampang, 50450 Kuala Lumpur, Malaysia

Email: [email protected]

Supervisory Authority: Department of Personal Data Protection (JPDP), Malaysia