Privacy Policy

1. Introduction

Warisan Legal ("we", "us", "our") respects the privacy of everyone who contacts us or uses our website at warisanw.live. This policy sets out how we collect, use, and protect personal information provided to us — whether through our website, by email, by telephone, or in person. We are committed to handling personal data with care and discretion, particularly given the sensitive nature of estate and inheritance matters.

This policy applies to all visitors to our website and to current and prospective clients. For questions about your data, contact us at [email protected].

2. What Personal Data We Collect

We may collect the following categories of personal information:

• Identity data: full name, date of birth (where relevant to a legal matter)
• Contact data: email address, telephone number, postal address
• Matter data: information about family circumstances, assets, and intentions shared in the course of instructing us
• Technical data: IP address, browser type, pages visited, and session duration (collected via website analytics)
• Communications data: emails, telephone notes, and correspondence sent to us

We do not collect payment card details directly; payments are processed through secure third-party channels.

3. How We Collect Data

• Via the contact form on our website
• By email sent to our addresses at warisanw.live
• By telephone during enquiry and matter management calls
• In person at our office at Level 14, Menara Worldwide, Kuala Lumpur
• Automatically through cookies and analytics tools when you browse our website (see Section 8)

4. Legal Basis for Processing

We process personal data under the following legal bases as recognised under Malaysian law and consistent with international good practice:

• Consent: where you have provided explicit consent, for example by submitting our contact form
• Contract: where processing is necessary to perform legal services you have engaged us for
• Legitimate interest: to respond to enquiries, improve our services, and maintain security of our systems
• Legal obligation: where we are required by law to retain or process data, including under the Legal Profession Act 1976 (Malaysia)

5. How We Use Your Data

• To respond to your enquiry and provide legal services you request
• To prepare legal documents and correspond with courts, registries, and institutions on your behalf
• To manage billing and fee administration
• To maintain our practice records in compliance with legal professional obligations
• To improve our website and services using anonymised analytics
• To send you information about your matter (we do not send marketing communications without consent)

6. Data Retention

We retain client matter files for a minimum of seven years after conclusion of a matter, in accordance with professional obligations under Malaysian legal practice standards. Website enquiry data not resulting in an instruction is retained for twelve months. Analytics data is retained in anonymised form for up to twenty-four months.

7. Sharing Your Data

We do not sell or share personal data with third parties for marketing purposes. Data may be shared in the following limited circumstances:

• With courts, land offices, EPF, and government registries as required to conduct your legal matter
• With financial institutions as instructed by you in the course of estate administration
• With our IT service providers who assist with secure data storage and website hosting, under data processing agreements
• Where required by law, court order, or lawful authority

Any third party with access to your data is required to handle it securely and in accordance with this policy.

8. Cookies

Our website uses cookies to improve functionality and understand how visitors use the site. Essential cookies are required for the site to operate. Optional analytics and preference cookies are used only with your consent. For full details, please see our Cookie Policy.

9. Data Security

We take reasonable technical and organisational measures to protect personal data against loss, unauthorised access, or disclosure. These include:

• Password-protected systems for client file management
• Encrypted email communication where feasible
• Restricted internal access — only solicitors and staff handling your matter access your data
• Secure file storage and appropriate physical office security

In the event of a data breach that is likely to affect your rights or interests, we will notify you without undue delay.

10. Your Rights

You have the following rights in respect of your personal data:

• Right to access: request a copy of personal data we hold about you
• Right to rectification: request correction of inaccurate data
• Right to erasure: request deletion where data is no longer necessary (subject to professional retention obligations)
• Right to restrict processing: request that we limit how we use your data in certain circumstances
• Right to withdraw consent: where processing is based on consent, you may withdraw it at any time
• Right to object: object to processing based on legitimate interest

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.

11. Third-Party Links

Our website may contain links to external websites. We are not responsible for the privacy practices of those sites. We encourage you to review the privacy policies of any external site you visit.

12. Children

Our services are intended for adults aged 18 and over. We do not knowingly collect personal data from persons under 18. If you believe a minor has provided us with personal data without appropriate authority, please contact us promptly.

13. Jurisdiction

This policy is governed by the laws of Malaysia. Personal data is processed and stored within Malaysia. If you are contacting us from another jurisdiction, please note that your data will be transferred to and processed in Malaysia.

14. Changes to This Policy

We may update this policy from time to time. The updated version will be published on this page with a revised "Last Updated" date. Continued use of our website or services after a change constitutes acceptance of the updated policy.

15. Contact

For any questions about this policy or your personal data: