Privacy Policy

1. Who We Are

Cahaya Adil is a legal practice registered and operating in Malaysia, with its principal office at No. 41, Jalan Tun Sambanthan, 50470 Kuala Lumpur, Wilayah Persekutuan. We are the data controller for personal information collected in connection with our practice.

For questions about this policy or about how we handle your information, you may contact us at [email protected] or by telephone at +60 3-2274 6083.

2. Information We Collect

We collect personal information only as reasonably necessary for the provision of our legal services and the operation of this website. This includes:

Information you provide directly

• Your name, contact details (telephone number and email address), and postal address
• Information about your pension arrangements, retirement accounts, and related financial or legal circumstances, as shared with us in the course of a consultation or engagement
• Identity documents, where required for the preparation of statutory declarations or notarised documents
• Family or beneficiary details, where relevant to the services requested
• Correspondence sent to us by email, post, or through this website

Information collected automatically

• Technical information about your visit to this website, including your IP address, browser type, and pages visited, collected through cookies and similar technologies
• Date and time of access, and referring website addresses

We do not collect sensitive personal data beyond what is strictly necessary for the legal matter you have engaged us for. We do not collect payment card details through this website.

3. How We Use Your Information

We use personal information for the following purposes:

• To provide the legal services you have requested, including consultations, document preparation, and family pension reviews
• To prepare, review, and finalise legal documents on your behalf
• To communicate with you about your matter, appointment arrangements, and any follow-up steps
• To maintain accurate records of consultations and engagements, as required under applicable legal and professional obligations
• To comply with our obligations under Malaysian law, including the Legal Profession Act 1976, the Anti-Money Laundering, Anti-Terrorism Financing and Proceeds of Unlawful Activities Act 2001, and associated regulations
• To improve the quality and accessibility of our services
• To operate and maintain this website in good working order

We do not use your personal information for marketing purposes without your prior consent, and we do not sell, rent, or otherwise transfer your information to third parties for commercial purposes.

4. Legal Basis for Processing

In accordance with the Personal Data Protection Act 2010 (Malaysia), we process personal information on the following bases:

• Contract performance — where processing is necessary to carry out the services you have requested
• Legal obligation — where we are required to retain or process information under applicable law or professional regulation
• Legitimate interests — where processing is reasonably necessary for the operation of our practice, provided your interests and rights are not overridden
• Consent — where you have given us specific permission to use your information for a stated purpose, which you may withdraw at any time

5. Disclosure of Your Information

We may share your personal information with:

• Notaries, government authorities, and statutory bodies, where required for the completion of legal documents or the filing of applications on your behalf
• Professional advisers, including auditors or compliance consultants, under strict confidentiality obligations
• Law enforcement or regulatory bodies, where we are required to do so by law

We do not share your information with other law firms, financial institutions, or commercial third parties without your written consent, except where required by law or court order.

All information shared with third parties in the ordinary course of our work is subject to appropriate confidentiality arrangements. We do not transfer personal data outside of Malaysia except where required for a specific legal matter with your knowledge and consent.

6. Data Retention

We retain personal information for as long as is necessary to fulfil the purpose for which it was collected, and in accordance with applicable legal and professional requirements. As a general rule:

• Client files and engagement records are retained for a minimum of seven years following the close of a matter, in accordance with Bar Council guidelines
• Correspondence and notes from consultations are retained for five years unless a longer period is required by the nature of the matter
• Website access logs are retained for no longer than twelve months

Where retention is no longer required, information is securely deleted or anonymised.

7. Security of Your Information

We take reasonable steps to protect personal information from unauthorised access, use, or disclosure. These measures include:

• Physical security for paper documents containing personal information
• Password-protected access to digital records, with access limited to relevant staff
• Encrypted email communication for the transmission of sensitive documents, where technically feasible
• Regular review of our information security arrangements

No method of transmission over the internet is entirely secure. If you have concerns about the security of information you have sent to us, you are welcome to contact us by telephone.

8. Your Rights

Under the Personal Data Protection Act 2010 (Malaysia), you have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate or incomplete personal data
• Withdraw consent to processing, where processing is based on consent
• Request that we cease processing your data for direct marketing purposes

To exercise any of these rights, please contact us in writing at [email protected] or at our office address. We will respond to your request within thirty days. In some circumstances, we may be unable to comply fully with a request where it would conflict with our legal or professional obligations.

9. Cookies

This website uses cookies to support its basic operation. Cookies are small text files stored on your device when you visit a website. We use cookies only for the following purposes:

• To remember your cookie consent preference, so that the consent prompt is not shown on each visit
• To collect anonymous statistical information about website usage, which helps us maintain and improve the site

We do not use cookies for advertising or cross-site tracking. For more information about the cookies we use, please see our Cookie Policy.

10. Links to Other Websites

This website may contain links to external websites operated by third parties. We are not responsible for the privacy practices or content of those websites, and this policy does not apply to them. We encourage you to read the privacy policies of any external website you visit.

11. Changes to This Policy

We may update this policy from time to time to reflect changes in our practice, applicable law, or the way we operate this website. The date at the top of this page indicates when the policy was last revised. We encourage you to review this page periodically.

If we make material changes that affect how we handle information provided in connection with an existing engagement, we will notify you directly.

12. Contact

For any queries relating to this policy or to the handling of your personal information, please contact us:

• By email: [email protected]
• By telephone: +60 3-2274 6083 (Monday–Friday, 8:30 am–5:00 pm)
• By post: Cahaya Adil, No. 41, Jalan Tun Sambanthan, 50470 Kuala Lumpur, Wilayah Persekutuan