Privacy Policy

1. Introduction

Padu Legal ("we", "us", "our") is a legal services practice based in Penang, Malaysia, registered and operating under the Legal Profession Act 1976. We are committed to handling personal information responsibly and in accordance with the Personal Data Protection Act 2010 (PDPA) of Malaysia.

This Privacy Policy explains what personal data we collect when you visit our website or enquire about our services, how that data is used, and what rights you have in relation to it. If you have questions about any aspect of this policy, please contact us using the details at the end of this document.

2. Personal Data We Collect

Information You Provide Directly

When you submit our contact form or enquire about our services, we collect:

• Your name
• Your email address
• Your phone number (if provided)
• The content of your message or enquiry

Information Collected Automatically

When you visit our website, certain technical information may be recorded automatically, including your IP address, browser type, pages visited, and the date and time of your visit. This information is used for website administration and analytics purposes only.

Cookies

We use cookies to remember your preferences and to understand how our website is used. Please see our Cookie Policy for full details.

3. How We Use Your Personal Data

We use the personal data you provide for the following purposes:

• To respond to your enquiry and provide information about our services
• To communicate with you regarding an engagement or ongoing matter
• To assess whether we are in a position to assist you (including conflict of interest checks)
• To comply with our obligations as legal practitioners under Malaysian law
• To maintain records of client communications as required by professional standards

Legal Basis for Processing

Under the PDPA 2010, we process your data on the following grounds: with your consent (where applicable), to perform or consider entering into a contract for legal services, and to comply with our legal and professional obligations.

We do not use your personal data for automated decision-making or profiling.

4. Data Sharing and Third Parties

We do not sell or rent your personal data to third parties. We may share your information in the following circumstances:

• Professional experts: Where your matter requires input from external quantity surveyors or delay analysts, relevant information may be shared with those parties, with your prior consent.
• Legal and regulatory requirements: Where we are required by law, court order, or professional regulation to disclose information.
• Service providers: Our website may use third-party services such as analytics tools. These providers operate under their own privacy policies and are not granted access to the content of your legal enquiry.

International Transfers

Our primary data processing activities take place within Malaysia. Where any third-party tools process data outside of Malaysia, we take reasonable steps to ensure appropriate safeguards are in place.

5. Data Retention

We retain personal data for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable law and professional regulations.

• Enquiries that do not result in an engagement: retained for up to 12 months
• Client matter files: retained for a minimum of 7 years following matter closure, in accordance with Bar Council Malaysia guidelines
• Website analytics data: retained in anonymised form for up to 26 months

Following the applicable retention period, personal data is securely deleted or anonymised.

6. Data Protection and Security

We take reasonable and appropriate measures to protect your personal data from unauthorised access, loss, or disclosure. These measures include:

• Secure HTTPS transmission for all web-based communications
• Access controls limiting data access to authorised personnel only
• Regular review of our data handling practices

While we take care to safeguard your information, no method of transmission over the internet is entirely without risk. We encourage you to contact us directly by phone if you need to share particularly sensitive information.

Data Breach Notification

In the event of a data breach that affects your personal data, we will take prompt steps to contain the breach and, where required, notify affected individuals and the relevant authority in accordance with applicable law.

7. Cookies and Analytics

Our website uses cookies to distinguish you from other visitors and to improve your browsing experience. We may also use analytics tools that collect anonymised data about how our site is accessed and used. For full information on what cookies we use and how to manage them, please refer to our Cookie Policy.

8. Your Rights Under the PDPA 2010

Under the Personal Data Protection Act 2010, you have the following rights in relation to your personal data held by us:

• Right of access: You may request a copy of the personal data we hold about you.
• Right of correction: You may request that we correct any inaccurate or incomplete personal data.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw it at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.
• Right to limit processing: In certain circumstances, you may request that we restrict how we use your personal data.
• Right to lodge a complaint: You have the right to lodge a complaint with the Department of Personal Data Protection Malaysia (JPDP) if you believe your data rights have been infringed.

To exercise any of these rights, please write to us at [email protected]. We will respond within the timeframe required under applicable law.

9. Third-Party Links

Our website may contain links to external sites operated by third parties. We are not responsible for the privacy practices of those sites, and this policy does not apply to them. We encourage you to review the privacy policies of any external websites you visit.

10. Children's Privacy

Our services are directed at adults engaged in commercial and construction activities. We do not knowingly collect personal data from individuals under the age of 18. If you believe we have inadvertently received data from a minor, please contact us and we will arrange for its deletion promptly.

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. Any material changes will be posted on this page with a revised "Last Updated" date. We encourage you to review this page periodically.

Your continued use of our website following any posted changes constitutes your acknowledgment of those changes.

12. Contact Information

If you have any questions, concerns, or requests relating to this Privacy Policy or your personal data, please contact us:

• Email: [email protected]
• Phone: +60 4-6438 2917
• Address: No. 8, Persiaran Bayan Indah, 11900 Bayan Lepas, Penang, Malaysia

We will make every effort to address your concerns in a timely and respectful manner.