Privacy Policy

Amanah — Inheritance Law Counsel · 18 Jalan Anson, 10400 George Town, Penang · [email protected]

This Privacy Policy sets out how Amanah collects, uses, discloses, and safeguards personal information provided to us in the course of our legal services and through our website at amanahn.world. We handle your information with the same care and discretion we bring to every matter entrusted to us.

By engaging our services or using our website, you acknowledge that you have read and understood this policy.

1. Information We Collect

We collect personal information when it is necessary for the lawful conduct of our practice. This includes:

• Contact details — your full name, email address, telephone number, and postal address.
• Matter-related information — details of your estate, trust arrangements, family circumstances, and related legal matters shared in the course of an engagement.
• Identity documents — copies of identification documents where required by law or for verification purposes.
• Correspondence — records of written communications, including emails, letters, and notes from consultations.
• Website usage data — technical information such as IP address, browser type, pages visited, and session duration, collected through standard web analytics tools.

We collect only the information that is reasonably necessary for the purpose for which it is sought.

2. How We Use Your Information

Personal information collected by Amanah is used for the following purposes:

• To provide legal counsel and carry out the services you have engaged us for.
• To communicate with you about your matter, including updates, requests for additional information, and fee invoices.
• To comply with our obligations under Malaysian law, including the Legal Profession Act 1976, the Personal Data Protection Act 2010 (PDPA), and anti-money laundering regulations.
• To maintain accurate records of our client relationships and work carried out.
• To respond to enquiries submitted through our website contact form.
• To improve the quality and delivery of our services.

We do not use your personal information for unsolicited marketing, and we will not sell or rent your information to any third party.

3. Legal Basis for Processing

Under the Personal Data Protection Act 2010 (Malaysia), we process your personal data on the following grounds:

• Consent — where you have expressly provided your consent, including by submitting our contact form or engaging our services.
• Contractual necessity — where processing is required to carry out the legal services you have requested.
• Legal obligation — where we are required by law to collect, retain, or disclose certain information.
• Legitimate interests — where necessary for the proper administration of our practice, provided your interests are not overridden.

4. Disclosure of Your Information

Amanah does not sell, trade, or otherwise transfer your personal information to unrelated third parties. We may share information in the following limited circumstances:

• Professional advisers — where your matter requires engagement with other lawyers, barristers, valuers, or accountants, and only to the extent necessary.
• Courts and tribunals — where required by court order, legal proceedings, or applicable law.
• Regulatory bodies — where disclosure is required by the Bar Council of Malaysia or other competent authority.
• Service providers — reputable third-party providers who assist in the operation of our website or office systems, under strict confidentiality obligations.

All disclosures are made with appropriate care and, where possible, with your prior knowledge.

5. Confidentiality and Legal Privilege

Information you share with us in the context of seeking or receiving legal advice is protected by legal professional privilege under Malaysian law. This means that such communications are confidential and cannot ordinarily be disclosed without your consent, even to courts or regulators. We take this obligation seriously and have internal procedures in place to preserve it.

6. Data Retention

We retain personal information for as long as is necessary for the purposes for which it was collected, and in accordance with our professional obligations. In general:

• Client matter files are retained for a minimum of seven years after the conclusion of the matter, as is standard practice for legal firms in Malaysia.
• Website enquiry records are retained for up to two years unless the enquiry resulted in an engagement, in which case the matter file retention period applies.
• Financial and billing records are retained in accordance with applicable tax and company law requirements.

When data is no longer required, it is disposed of securely.

7. Security Measures

We maintain reasonable technical and organisational measures to protect your personal information from unauthorised access, loss, misuse, or alteration. These include:

• Password-protected systems and encrypted file storage for client documents.
• Restricted access to client files on a need-to-know basis within the firm.
• Secure transmission protocols (HTTPS) for our website.
• Regular review of our data handling procedures.

No method of transmission over the internet or electronic storage is entirely free from risk. If you have concerns about transmitting sensitive information electronically, please contact us to discuss alternative arrangements.

8. Cookies and Website Analytics

Our website uses cookies — small text files placed on your device — to improve the functionality of the site and understand how visitors use it. These include:

• Essential cookies — necessary for the site to function correctly, including your cookie consent preference.
• Analytics cookies — used to gather aggregate, anonymised data about site usage, if you have provided consent.

You may manage your cookie preferences through our cookie consent banner, which appears on your first visit to the site. You can also manage cookies through your browser settings. For full details, please refer to our Cookie Policy.

9. Your Rights Under Malaysian Law

Under the Personal Data Protection Act 2010 (Malaysia), you have the following rights in relation to your personal data:

• Right of access — to request a copy of the personal data we hold about you.
• Right of correction — to request that inaccurate or incomplete data be corrected.
• Right to withdraw consent — where processing is based on consent, you may withdraw it at any time (though this will not affect prior processing).
• Right to limit processing — to request that we restrict the use of your data in certain circumstances.

To exercise any of these rights, please contact us in writing at the details below. We will respond within a reasonable time and in accordance with our legal obligations.

10. Third-Party Links

Our website may contain links to external websites operated by third parties. These links are provided for your convenience only. We have no control over, and are not responsible for, the content or privacy practices of those sites. We encourage you to read the privacy policies of any external site you visit.

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. When we do, we will revise the "last updated" date at the top of this page. We encourage you to review this policy periodically. Continued use of our website or services after any changes constitutes your acknowledgment of the updated policy.

12. Contact and Enquiries

If you have any questions about this Privacy Policy, or wish to exercise your rights, please contact us:

This policy is governed by the laws of Malaysia. Any dispute arising from or in connection with this policy shall be subject to the jurisdiction of the courts of Malaysia.

Document version: April 2025 · Amanah Legal Services