Privacy Policy

1. Introduction

Amanah Legal ("we", "us", "our") takes the protection of your personal information seriously. This policy explains what personal data we collect when you use our website or engage our legal services, how we use it, and what rights you have in relation to it.

This policy applies to all individuals who visit our website at amanahhlees.biz or who make contact with our practice. We process personal data in accordance with the Personal Data Protection Act 2010 (Malaysia) ("PDPA").

If you have questions about this policy, please contact us at [email protected].

2. Data We Collect

We may collect the following types of personal data:

• Contact information — your name, email address, and phone number when you submit our contact form or reach out directly.
• Enquiry details — the information you share with us about your situation when requesting our legal services.
• Technical data — IP address, browser type, and pages visited, collected automatically when you use our website.
• Cookie data — preferences and analytics information collected via cookies. See our Cookie Policy for details.

Legal basis for processing: We process your personal data on the basis of your consent (where given), the performance of a legal services contract, and our legitimate interest in operating a legal practice and maintaining the security of our website.

Retention: Client file data is retained for seven years after the conclusion of a matter, in line with professional obligations. Website enquiry data not resulting in an engagement is deleted after twelve months.

3. How We Use Your Data

• To respond to your enquiries and provide the legal services you have requested.
• To communicate with you about your matter, including sending documents and updates.
• To comply with our professional obligations under Malaysian law, including record-keeping requirements.
• To analyse how our website is used so we can improve it (using aggregated, anonymised data).
• We do not use your personal data for unsolicited marketing. If you have provided consent to receive updates from us, you may withdraw that consent at any time.

4. Data Sharing

We do not sell or share your personal data with third parties for marketing purposes. We may share data in the following limited circumstances:

• Service providers — parties who assist with website hosting and email delivery, who are bound by data processing agreements.
• Legal and regulatory requirements — where disclosure is required by law, by a court order, or by our professional regulatory obligations.
• Your explicit instruction — when you ask us to correspond with or disclose information to a pension authority or other party on your behalf.

5. Data Protection Measures

• Our website uses HTTPS encryption for all data transmitted between your browser and our servers.
• Client files are held in secure systems with access restricted to members of our practice who require it for legitimate work purposes.
• We review our data handling arrangements periodically and update them where necessary.
• In the event of a data breach that is likely to affect your rights, we will notify you and the relevant authority as required under the PDPA.

6. Cookies

Our website uses cookies to support basic functionality, analyse site usage, and remember your preferences. Essential cookies are required for the site to work. Other cookies are optional and activated only with your consent. For full details and to manage your cookie preferences, please see our Cookie Policy.

7. Your Rights

Under the PDPA and applicable Malaysian law, you have the following rights in relation to your personal data:

• Right of access — to request a copy of the personal data we hold about you.
• Right of correction — to request that inaccurate data be corrected.
• Right to withdraw consent — where processing is based on your consent, you may withdraw it at any time. This does not affect the lawfulness of processing before withdrawal.
• Right to limit processing — to request that we restrict how we use your data in certain circumstances.
• Right to complain — you may lodge a complaint with the Department of Personal Data Protection Malaysia (JPDP) if you believe we have handled your data unlawfully.

To exercise any of these rights, contact us at [email protected]. We will respond within 21 days.

8. Third-Party Links

Our website may contain links to external sites, including government pension authority portals and regulatory bodies. We are not responsible for the privacy practices of those sites and recommend that you review their own privacy policies before submitting any personal data.

9. Children's Privacy

Our services are directed at adults aged 18 and above. We do not knowingly collect personal data from individuals under the age of 18. If you believe we have inadvertently received such data, please contact us so we can delete it.

10. Policy Updates

We may update this policy from time to time to reflect changes in law or our practices. The date at the top of this page indicates when it was last revised. We encourage you to check this page periodically. Continued use of our website after an update constitutes acceptance of the revised policy.

11. Contact Us