Legal
Privacy Policy
Last Updated: 28 April 2025 · Sinaran Legal, Petaling Jaya, Selangor, Malaysia
1. Introduction
Sinaran Legal ("we", "us", "our") is a legal practice based in Petaling Jaya, Selangor, Malaysia. This Privacy Policy sets out how we collect, use, store and protect personal information provided to us through our website at sinaran.sbs and through our client engagements. We take the handling of personal information seriously and apply the standards required under the Personal Data Protection Act 2010 (Malaysia) ("PDPA").
This policy applies to all personal data processed by Sinaran Legal. If you have questions, please contact us at [email protected].
2. Data We Collect
Information you provide directly
- Contact details: name, email address, phone number (collected via our website enquiry form)
- Matter details: information about your pension or employment situation shared during an initial message or consultation
- Documents: pension statements, employment records, and correspondence you share with us in the course of a legal engagement
Information collected automatically
- Browser type, device type, and IP address when you visit our website
- Pages visited and time spent on pages (via analytics cookies, where consent has been given)
Legal basis for processing
- Contract: processing necessary to provide the legal services you have requested
- Legitimate interests: responding to enquiries, maintaining records, improving our website
- Consent: analytics cookies and optional communications (you may withdraw consent at any time)
3. How We Use Your Information
- To respond to enquiries made through our website contact form
- To schedule and conduct consultations and legal services
- To prepare and deliver written summaries, findings, and formal representations
- To maintain records required for professional compliance under the Legal Profession Act 1976
- To improve our website based on aggregated, anonymised analytics data
- We do not use your personal data for direct marketing without your explicit consent
4. Data Sharing
We do not sell, rent or trade personal data. We may share information in the following limited circumstances:
- Service delivery: where formal representations or tribunal documents are submitted to third-party bodies (EPF, Public Service Department, Industrial Court) on your behalf, and only with your instruction
- Legal obligation: where disclosure is required by a court order or Malaysian law
- Professional advisers: barristers or co-counsel engaged in the same matter, under confidentiality obligations
- Technology providers: our website hosting and analytics providers may process limited technical data; they are contractually prohibited from using it for their own purposes
5. Data Protection & Security
- Client documents and personal data are stored on access-controlled systems with encryption at rest
- Website enquiries are transmitted over HTTPS
- Access to personal data within our practice is limited to staff with a need to know
- In the event of a data breach affecting your rights, we will notify you as required under the PDPA
6. Retention Periods
- Website enquiry data (if no engagement follows): deleted after 12 months
- Client matter files: retained for 7 years from the close of the matter, in accordance with professional practice requirements
- Analytics data: retained in anonymised form; identifiable data deleted after 24 months
7. Cookies
We use essential cookies for site operation and, with your consent, analytics cookies to understand how the site is used. You may manage your preferences through our cookie banner or at any time via our Cookie Policy page.
8. Your Rights under the PDPA
Under the Personal Data Protection Act 2010 (Malaysia), you have the right to:
- Access personal data we hold about you
- Correct inaccurate or incomplete data
- Withdraw consent for processing based on consent
- Request deletion of data no longer needed for the purposes stated (subject to professional retention obligations)
- Object to certain uses of your data
To exercise any of these rights, write to us at [email protected]. We will respond within 21 days.
9. Third-Party Links
Our website may contain links to external websites (for example, regulatory bodies or government agencies). We are not responsible for the privacy practices of those sites and encourage you to read their privacy policies.
10. Children's Privacy
Our services are directed at adults. We do not knowingly collect personal information from anyone under the age of 18. If we become aware of such data having been submitted, we will delete it promptly.
11. Changes to This Policy
We may update this policy from time to time. The updated date at the top of this page will reflect any changes. Continued use of our website after an update constitutes acceptance of the revised policy.
12. Contact
For privacy-related enquiries:
- Email: [email protected]
- Address: Sinaran Legal, 12 Jalan SS21/35, Damansara Utama, 47400 Petaling Jaya, Selangor
The supervisory authority for personal data protection in Malaysia is the Department of Personal Data Protection (JPDP), Ministry of Communications and Digital.