Privacy Policy

1. Introduction

Payung Legal ("we", "us", "our") is committed to protecting your personal data. This Privacy Policy explains how we collect, use, store, and protect the personal information you provide to us when you use our website at payungle.blog or engage our legal services. We operate in compliance with Malaysia's Personal Data Protection Act 2010 (PDPA).

If you have questions about this Policy or how we handle your data, please contact us at [email protected].

2. Data Controller

The data controller responsible for your personal information is:

• Business Name: Payung Legal
• Address: No. 15, Jalan Tengku Ampuan Zabedah, Seksyen 9, 40100 Shah Alam, Selangor, Malaysia
• Email: [email protected]
• Phone: +60 3-5513 6729

3. Information We Collect

We may collect the following categories of personal data:

• Contact Information: name, email address, phone number, and postal address provided via contact forms or email
• Matter-Related Information: details of your pension situation shared in the course of a legal consultation
• Technical Data: IP address, browser type, device information, and pages visited, collected automatically via cookies and server logs
• Communication Records: records of correspondence sent to or received from you

We do not collect sensitive categories of data (such as health information, race, or religious beliefs) except where strictly relevant to a legal matter you have engaged us for and with your explicit consent.

4. How We Use Your Information

Your personal data is used for the following purposes:

• Responding to enquiries and providing legal consultations
• Managing your ongoing legal matter, including document preparation and correspondence
• Sending appointment confirmations, written summaries, and relevant updates
• Maintaining accurate client records as required by our professional obligations
• Improving our website's functionality and user experience
• Complying with legal and regulatory obligations

We do not use your personal data for automated decision-making or profiling.

5. Legal Basis for Processing

We process personal data on the following legal grounds:

• Consent: where you have explicitly agreed to our use of your data (e.g. via our contact form)
• Contractual necessity: where processing is necessary to carry out legal services you have engaged
• Legal obligation: where we are required by law or professional regulation to retain or process certain records
• Legitimate interests: for website analytics and service improvement, balanced against your rights

6. Data Retention

We retain personal data for as long as necessary to fulfil the purposes outlined in this Policy. Specifically:

• Client matter records are retained for a minimum of seven (7) years following the conclusion of an engagement, consistent with professional practice standards
• Website enquiry data is retained for up to twelve (12) months unless a matter is initiated
• Cookie-related data is retained in accordance with the periods described in our Cookie Policy

7. Cookies

Our website uses cookies to improve your browsing experience and to understand how visitors interact with our content. You can manage cookie preferences at any time via our Cookie Policy page.

8. Sharing Your Information

We do not sell your personal data to third parties. We may share information in the following limited circumstances:

• With pension authorities or government bodies as necessary to conduct your legal matter
• With professional service providers who assist us (e.g. secure document management) — bound by confidentiality obligations
• Where required by law, court order, or regulatory authority

9. Data Protection Measures

We take the security of your personal data seriously and have implemented appropriate technical and organisational measures, including:

• Secure storage of client files with access restricted to authorised personnel
• Use of TLS encryption for data transmitted via our website
• Regular review of data handling procedures
• Clear desk policy and secure disposal of physical documents

10. Your Rights Under PDPA 2010

Under Malaysia's Personal Data Protection Act 2010, you have the right to:

• Access the personal data we hold about you
• Correct inaccurate or incomplete data
• Withdraw consent for processing where consent is the basis
• Request that we stop processing your data for direct marketing purposes
• Lodge a complaint with the Department of Personal Data Protection (JPDP) if you believe your rights have been infringed

To exercise any of these rights, please contact us at [email protected].

11. Third-Party Links

Our website may contain links to external resources. We are not responsible for the privacy practices of third-party websites and encourage you to review their policies before providing any personal information.

12. Children's Privacy

Our services are intended for individuals aged 18 and above. We do not knowingly collect personal data from minors. If you believe a minor has provided data to us, please contact us promptly.

13. International Transfers

We do not transfer personal data outside Malaysia except where required by the nature of a legal matter (e.g. correspondence with an overseas authority). Any such transfers comply with PDPA requirements.

14. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with a revised effective date. Continued use of our website or services after a change constitutes acceptance of the updated policy.

15. Contact for Privacy Matters

For any privacy-related questions, data access requests, or complaints, please contact:

• Email: [email protected]
• Phone: +60 3-5513 6729
• Address: No. 15, Jalan Tengku Ampuan Zabedah, Seksyen 9, 40100 Shah Alam, Selangor, Malaysia