Privacy Policy

1. Introduction

Kukuh Legal ("we", "us", "our") is a legal practice based in Kuala Lumpur, Malaysia, specialising in construction and engineering dispute resolution. This Privacy Policy describes how we collect, use, disclose, and safeguard the personal data of individuals who visit our website or engage our services.

We are committed to handling personal data in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA). If you have questions about this policy, contact us at [email protected].

2. Data We Collect

We collect personal data in several ways. Through our website contact form, we collect your name, email address, and optionally your phone number and a description of your matter. If you become a client, we collect further information necessary to provide legal services, including full contact details, company information, contract documents, and correspondence.

We also collect non-personal technical data through website analytics, including page visit information, browser type, and general geographic location. This data does not identify you individually.

The legal basis for processing your data includes your consent (for website enquiries), the performance of a legal services contract, compliance with our professional obligations, and our legitimate interest in operating and improving our legal practice.

3. How We Use Your Data

• To respond to your enquiries and assess whether we can assist with your matter
• To provide legal advice, representation, and related services under an engagement letter
• To comply with our professional obligations under the Legal Profession Act 1976 and Malaysian Bar Council rules
• To maintain our internal file management and billing records
• To send service updates or relevant legal developments, where you have consented to such communications
• To improve our website based on aggregated analytics data

4. Data Retention

We retain personal data for as long as necessary for the purpose it was collected. For client matter files, we maintain records for a minimum of seven years following the conclusion of each matter, consistent with professional practice obligations and potential limitation periods under Malaysian law.

Website enquiry data that does not lead to an engagement is retained for up to 12 months before deletion.

5. Data Sharing

We do not sell your personal data. We may share data with third parties in limited circumstances. For active matters, we may share relevant information with barristers, expert witnesses, adjudicators, arbitrators, or opposing parties as required by proceedings.

We use third-party service providers for website hosting and analytics. These providers are contractually required to handle data securely and only for the purposes we specify. Where analytics cookies are in use, data may be processed by providers such as Google Analytics in accordance with their respective privacy policies.

6. Data Protection Measures

We implement appropriate technical and organisational measures to protect personal data against unauthorised access, loss, or disclosure. These include restricted access controls for client files, encrypted storage for electronic data, and secure email practices for confidential communications.

In the event of a data breach affecting your personal data in a material way, we will notify you and the relevant authority in accordance with applicable legal requirements.

7. Cookies

We use cookies on our website to support basic functionality and, where consented, to gather anonymised analytics data. Full details are available in our Cookie Policy. You can manage your cookie preferences at any time through that page.

8. Your Rights Under the PDPA 2010

Under Malaysia's Personal Data Protection Act 2010, you have the following rights in relation to your personal data:

• The right to access personal data we hold about you
• The right to correct inaccurate or incomplete personal data
• The right to withdraw consent, where processing is based on consent
• The right to limit or cease processing in certain circumstances
• The right to be informed of how your data is used

To exercise any of these rights, contact us at [email protected]. We will respond within a reasonable timeframe and in accordance with our legal obligations.

9. Third-Party Links

Our website may contain links to external sites, including government portals, professional bodies, or reference documents. We are not responsible for the privacy practices of third-party sites and encourage you to review their respective policies before submitting personal data.

10. Children's Privacy

Our services are not directed at individuals under the age of 18. We do not knowingly collect personal data from minors. If you believe we have inadvertently collected data from a minor, contact us immediately at [email protected].

11. Policy Updates

We may update this Privacy Policy from time to time. Material changes will be communicated via a notice on our website. The date at the top of this document reflects the most recent revision. Continued use of our website after a policy update constitutes acceptance of the revised terms.

12. Contact Information

For all data protection enquiries:

Kukuh Legal

Unit 4-6, Bangunan Kukuh, Jalan Damansara, 60000 Kuala Lumpur, Wilayah Persekutuan

Email: [email protected]

Phone: +60 3-7183 4629