Privacy Policy

Benih Wasiat ("we", "us", "our") is committed to protecting the personal data of individuals who engage our legal services or interact with our website. This Privacy Policy explains what data we collect, how we use it, and the rights you have regarding your personal information. We operate from Jalan Tuanku Abdul Rahman, 88300 Kota Kinabalu, Sabah, Malaysia, and this policy is governed by the Personal Data Protection Act 2010 (PDPA) of Malaysia.

1. Data We Collect

We may collect the following categories of personal data:

• Contact information: Name, email address, telephone number, postal address.
• Identity documents: Identity card or passport number, where required for legal work.
• Financial and asset information: Information about assets, beneficiaries, and estate-related matters shared during the course of our legal services.
• Website interaction data: IP address, browser type, pages visited, time of visit, collected through cookies and analytics tools.
• Communications: Emails, letters, and notes from our meetings with you.

2. How We Collect Data

• Directly from you through our website enquiry form, telephone calls, or in-person consultations.
• From third parties where relevant and permitted (for example, during estate administration, from other parties to a matter).
• Automatically through website cookies and analytics tools when you visit our site.

3. Legal Basis for Processing

• Contract performance: Where we are providing legal services to you.
• Legitimate interest: To respond to enquiries and improve our services.
• Consent: Where you have given explicit consent, such as for marketing communications or optional cookies.
• Legal obligation: Where we are required by law to process your data.

4. How We Use Your Data

• To respond to enquiries and arrange consultations.
• To provide legal services, including preparing and executing estate documents.
• To communicate progress updates in ongoing legal matters.
• To store and retrieve client files securely.
• To comply with legal and regulatory obligations, including those under the Legal Profession Act 1976 and Anti-Money Laundering laws.
• To improve our website and understand how it is used, using anonymised analytics data.

5. Data Retention

We retain personal data for as long as is necessary for the purpose for which it was collected, and in accordance with applicable legal obligations. Client files are typically retained for a minimum of seven years following the conclusion of a matter. Website contact form data is retained for two years. Analytics data is retained for twelve months.

6. Data Sharing

We do not sell or rent your personal data to third parties. We may share your data with:

• Relevant government authorities or courts where required by law or in the course of legal proceedings.
• Other professional advisers (such as valuers or accountants) where you have instructed us to engage them as part of your matter.
• Secure cloud storage and IT service providers, subject to data processing agreements.
• Google Analytics for anonymous website usage data, where analytics cookies are accepted.

7. Data Protection Measures

• Client files are stored in a secure, access-controlled environment.
• Electronic communications are transmitted over encrypted connections where possible.
• Access to client data within our office is restricted to the lawyers working on the relevant matter.
• Physical documents are stored in locked filing systems within our office premises.
• In the event of a data breach that is likely to result in risk to your rights, we will notify you and relevant authorities as required by applicable law.

8. Cookies

Our website uses cookies. Please refer to our Cookie Policy for full details on the types of cookies we use and how to manage your preferences.

9. Your Rights Under the PDPA (Malaysia)

Under the Personal Data Protection Act 2010, you have the following rights:

• Right of access: You may request a copy of the personal data we hold about you.
• Right of correction: You may request that we correct inaccurate or incomplete data.
• Right to withdraw consent: Where processing is based on consent, you may withdraw that consent at any time. This will not affect the lawfulness of processing before the withdrawal.
• Right to prevent processing for marketing purposes: You may request that we stop using your data for direct marketing at any time.

To exercise any of these rights, please contact us at [email protected]. We will respond within 21 days of receiving your request.

10. Third-Party Links

Our website may contain links to external websites. We are not responsible for the privacy practices of those sites. We recommend that you review the privacy policy of any third-party site you visit.

11. Children's Privacy

Our services are intended for individuals aged 18 and above. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data without parental consent, please contact us immediately.

12. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the "Last Updated" date at the top of this page. Continued use of our website or services after such changes constitutes your acknowledgment of the updated policy.

13. Contact for Data Enquiries

If you have questions about this policy or wish to exercise your data rights, please contact: