Legal Document
Privacy Policy
Last Updated: 12 June 2025 | Effective: 12 June 2025
This Privacy Policy describes how Kencana Waris ("we", "our", "us") collects, uses, stores, and protects personal information obtained through our website and in the course of providing legal services. We are committed to handling all personal data with discretion and in compliance with the Personal Data Protection Act 2010 (PDPA) of Malaysia.
1. Data Controller
The data controller responsible for your personal information is:
Kencana Waris
Jalan Yap Kwan Seng 29, 50450 Kuala Lumpur, Malaysia
Email: [email protected]
Phone: +60 3-2715 4093
2. Information We Collect
We collect personal information in the following ways:
2.1 Information You Provide
- Full name, email address, and phone number (via contact forms)
- Details about your legal matter provided during consultations
- Identity documents, estate-related documents, and financial information shared as part of a legal engagement
2.2 Information Collected Automatically
- IP address, browser type, and device information via website analytics
- Pages visited and time spent on the website
- Cookie data (see Section 5 and our Cookie Policy)
3. How We Use Your Information
We use the information collected for the following purposes:
- To respond to enquiries submitted through our contact form
- To provide legal advice and services in connection with your matter
- To prepare and execute legal documents on your behalf
- To communicate updates on the progress of your matter
- To maintain records as required by legal and professional obligations
- To improve the performance and content of our website
- To comply with applicable laws and court orders
The legal basis for processing is: your consent (for website enquiries and analytics), the performance of a legal services contract, and our legitimate interests as a legal practice.
4. Data Sharing
We do not sell or share your personal data with third parties for commercial purposes. We may share information with:
- Courts, tribunals, and government registries where required by your matter
- Financial institutions notified as part of estate administration
- Counterparties in legal proceedings (as permitted or required by law)
- Website analytics providers (data is anonymised where possible)
All information shared in the context of a legal engagement is protected by solicitor-client privilege and professional confidentiality obligations under the Legal Profession Act 1976.
5. Cookies
Our website uses cookies to function properly and to understand how it is used. Essential cookies are required for the site to operate. Analytics cookies help us understand visitor behaviour. You may manage cookie preferences at any time. For full details, see our Cookie Policy.
6. Data Retention
We retain personal data for the following periods:
- Website enquiries (not converted to clients): Up to 12 months
- Client legal files: A minimum of 7 years from the conclusion of a matter, as required by professional obligations
- Estate documents held in storage: As agreed in writing with the client
- Website analytics data: Up to 26 months (anonymised)
7. Data Protection Measures
- Physical client files stored in locked, restricted-access facilities
- Digital records maintained on encrypted, access-controlled systems
- Staff access limited to those directly handling a matter
- Regular review of data security practices
- In the event of a data breach affecting your rights, we will notify you and the relevant authority as required under the PDPA
8. Your Rights
Under the Personal Data Protection Act 2010, you have the right to:
- Access the personal data we hold about you
- Request correction of inaccurate or incomplete data
- Withdraw consent to certain types of processing
- Request that we stop processing your data for direct marketing purposes
- Lodge a complaint with the Department of Personal Data Protection (JPDP) if you believe your rights have not been respected
To exercise any of these rights, contact us at [email protected]. We will respond within 21 days. Please note that some requests may be subject to limitations where data is held under a legal obligation.
9. Third-Party Links
Our website may contain links to external sites. We are not responsible for the privacy practices of those sites and recommend reviewing their policies separately before submitting any personal information.
10. Children's Privacy
Our website and services are directed at individuals aged 18 and above. We do not knowingly collect personal data from minors. If you believe a minor has submitted personal data through our website, please contact us so we can remove it promptly.
11. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. The revised version will be posted on this page with an updated date. Continued use of our website after changes are posted constitutes acceptance of the updated policy.
12. Contact for Privacy Matters
For any questions or requests related to this Privacy Policy or your personal data:
Kencana Waris
Jalan Yap Kwan Seng 29, 50450 Kuala Lumpur
Email: [email protected]
Phone: +60 3-2715 4093
Office Hours: Monday – Friday, 9:00 am – 5:30 pm