Privacy Policy

1. Who We Are

Sejahtera Counsel is a legal practice registered in Malaysia, with its principal office at Suite 14-2, Menara Hap Seng, Jalan P. Ramlee, 50250 Kuala Lumpur, Federal Territory of Kuala Lumpur. The firm is the data controller in respect of personal data processed in connection with its services and this website.

Questions or requests relating to this policy may be directed to [email protected].

---

2. Personal Data We Collect

The firm may collect and hold the following categories of personal data:

Through this website

• Name and contact details submitted via the enquiry form
• The content of any message you send to the firm
• Technical data such as browser type, device type, and pages visited (via analytics tools)
• Cookie preference choices stored locally on your device

In the course of providing legal services

• Identity documents required for client verification under the Anti-Money Laundering, Anti-Terrorism Financing and Proceeds of Unlawful Activities Act 2001 (AMLA)
• Employment history, pension scheme membership details, and related financial records necessary to advise on or represent your matter
• Correspondence and documents you provide for the purposes of your instructions

---

3. How and Why We Use Your Data

Personal data is used only for the purposes for which it was provided or for which the firm has a legitimate basis to process it. The primary purposes are:

• Responding to enquiries made through this website
• Conducting client identity verification in accordance with legal obligations
• Providing legal advice and representation as instructed
• Maintaining records of the work undertaken in any matter
• Complying with regulatory requirements applicable to legal practitioners in Malaysia
• Improving the usability and content of this website, using aggregated and anonymised analytics data

The firm does not use personal data for unsolicited marketing. Any communications sent in connection with a matter are limited to updates relevant to that matter or to administrative notices.

---

4. Legal Basis for Processing

The processing of personal data by Sejahtera Counsel is conducted in accordance with the Personal Data Protection Act 2010 (PDPA) of Malaysia. The applicable basis for processing will be one or more of the following:

• Consent — where you have voluntarily submitted an enquiry or agreed to the use of non-essential cookies
• Contract — where processing is necessary to carry out the services you have instructed the firm to provide
• Legal obligation — where processing is required by Malaysian law, including AMLA, Legal Profession Act 1976, and related regulations
• Legitimate interests — where processing is reasonably necessary for the proper administration of the firm, provided those interests do not override your rights

---

5. Data Retention

Personal data is retained only for as long as is necessary for the purpose for which it was collected, or for as long as is required by law or professional obligation.

• Enquiry data from the website contact form: up to 12 months from the date of last contact, or the conclusion of any resulting matter
• Client matter files: a minimum of seven years from the conclusion of a matter, in accordance with the firm's professional obligations
• Identity verification documents: as required under AMLA and related guidelines issued by the Bar Council of Malaysia
• Website analytics data: retained in anonymised and aggregated form for up to 24 months

At the end of the applicable retention period, personal data is securely disposed of or anonymised.

---

6. Sharing Your Data

Sejahtera Counsel does not sell personal data or share it with third parties for commercial purposes. Data may be shared in the following limited circumstances:

• With the Employees Provident Fund (EPF), relevant government ministries, tribunals, or courts, where necessary to conduct your matter
• With professional advisers engaged by the firm — for example, counsel engaged for advocacy in hearing proceedings
• With the firm's IT and hosting service providers, under contractual data processing arrangements and confidentiality obligations
• Where required by law, court order, or the directions of a competent regulatory authority

Where data is shared with service providers, those providers are contractually bound to process it only as directed by the firm and to maintain appropriate security measures.

---

7. Data Security

The firm takes reasonable steps to protect personal data from unauthorised access, disclosure, alteration, or loss. Measures in place include:

• Encrypted transmission of data over this website (TLS/HTTPS)
• Access controls limiting data access to relevant members of the firm
• Secure storage of physical files within the firm's premises
• Regular review of data handling practices

In the event of a personal data breach that is likely to result in significant harm, the firm will take steps to address the breach and will notify affected individuals as appropriate in accordance with the PDPA.

---

8. Cookies

This website uses cookies — small text files stored on your device. Essential cookies are necessary for the site to function and cannot be declined. Optional cookie categories (analytics, marketing, and preference) are used only with your consent. You may manage your cookie preferences at any time by visiting the Cookie Policy page, or by adjusting your browser settings.

---

9. Your Rights Under Malaysian Law

Under the Personal Data Protection Act 2010, you have the following rights in relation to personal data held by the firm:

• The right to request access to personal data the firm holds about you
• The right to request correction of personal data that is inaccurate, incomplete, or out of date
• The right to withdraw consent to processing where consent is the applicable basis, without affecting the lawfulness of processing carried out prior to withdrawal
• The right to request that the firm cease or limit processing of your personal data in certain circumstances

Requests to exercise any of these rights should be submitted in writing to [email protected]. The firm will respond within 21 days of receiving a complete request. There is no fee for a single access request in any 12-month period.

If you consider that the firm has not handled your personal data in accordance with the PDPA, you may lodge a complaint with the Department of Personal Data Protection Malaysia (JPDP) at www.pdp.gov.my.

---

10. Third-Party Links

This website may contain links to external websites, including government portals and publicly accessible resources. Sejahtera Counsel is not responsible for the privacy practices of those sites, and this policy does not extend to them. Visitors are encouraged to read the privacy policies of any external sites they visit.

---

11. Children

The services provided by Sejahtera Counsel are directed to adults. The firm does not knowingly collect personal data from individuals under 18 years of age. If you believe that personal data relating to a minor has been provided to the firm in error, please contact [email protected] and the firm will arrange for it to be removed.

---

12. Updates to This Policy

This policy may be updated from time to time to reflect changes in the firm's practices, applicable law, or the services offered. Where a material change is made, the updated policy will be published on this page with a revised effective date. Continued use of this website after the revised policy is published constitutes acceptance of the changes.

---

13. Contact

For any questions about this policy, to submit a data access or correction request, or to raise a concern about how your personal data has been handled, please contact: