Privacy Policy

1.

Data We Collect

In the course of providing pension legal services, we may collect the following categories of personal data:

• Full name and identity card number (where required for case submissions)
• Contact details: email address, telephone number, postal address
• Employment and pension records provided by you or gathered on your behalf
• Correspondence between you and pension administrators or employers
• Financial details relevant to your pension entitlement (contribution histories, benefit calculations)
• Family member details, where you have consented to their involvement in your matter

When you use the contact form on this website, we collect your name, email address, telephone number (if provided), and any message content you submit. Cookies and basic usage analytics may also be collected — see Section 5.

Legal basis: We process your personal data on the basis of your consent (when you contact us or engage our services), and where processing is necessary for the performance of a legal services agreement with you.

Retention: Client matter files are retained for seven years after the conclusion of a matter, in line with standard legal practice. Website enquiry data is retained for twenty-four months unless a client relationship follows from the enquiry, in which case the above retention period applies.

2.

How We Use Your Data

Personal data collected is used for the following purposes:

• Responding to enquiries submitted through the contact form or by telephone
• Assessing and advising on your pension matter
• Preparing written summaries, appeal documents, and submissions on your behalf
• Corresponding with pension administrators, former employers, or hearing bodies in connection with your matter
• Sending written updates on the progress of a matter
• Maintaining accurate case records and file notes
• Complying with legal and regulatory obligations

We do not use your personal data for marketing purposes without your separate consent. We do not sell personal data to third parties.

Third-party disclosure: We may share your information with pension administrators, the Employees Provident Fund Board, SOCSO, or the relevant government department, but only to the extent required to progress your matter. We may also share information with a family member you have nominated in writing.

3.

Data Protection Measures

• Physical case files are stored in locked cabinets within the office premises, with access limited to staff working on your matter
• Digital records are held on password-protected systems with access controls
• Email communications involving sensitive personal or case information are encrypted where technically supported
• Staff are trained on confidentiality obligations and data handling procedures
• In the event of a data breach that is likely to cause harm, affected individuals and the relevant authority will be notified without undue delay

4.

Cookies and Website Analytics

This website uses cookies to support basic functionality and to understand how the site is used. Essential cookies are necessary for the site to operate. Optional analytics and preference cookies may be set with your consent, which is requested when you first visit the site.

For full details on the cookies used and how to manage your preferences, please see our Cookie Policy.

5.

Your Rights Under Malaysian PDPA

Under the Personal Data Protection Act 2010 (Malaysia), you have the following rights in relation to your personal data held by us:

• Right of access: You may request a copy of the personal data we hold about you
• Right of correction: You may request that inaccurate or incomplete data be corrected
• Right to withdraw consent: Where processing is based on consent, you may withdraw it at any time, though this will not affect processing that has already occurred
• Right to limit processing: You may request that we limit how we use your data in certain circumstances
• Right to complain: You may lodge a complaint with the Department of Personal Data Protection Malaysia (JPDP) if you believe your data rights have not been respected

To exercise any of these rights, please contact us at [email protected] or in writing to our office address.

6.

Third-Party Links

This website may contain links to external websites operated by government departments, pension bodies, or other organisations. We are not responsible for the privacy practices of those sites. We encourage you to read their privacy policies before providing personal information.

7.

Children's Privacy

Our services are intended for individuals aged 18 and over. We do not knowingly collect personal data from persons under 18 without the consent of a parent or guardian. If you believe a minor has submitted data to us without appropriate consent, please contact us and we will delete that information promptly.

8.

Changes to This Policy

We may update this policy from time to time to reflect changes in our practices or in applicable law. The updated policy will be posted on this page with a revised "Last Updated" date. If changes are material, we will notify clients directly by email where we hold a current address.

9.

Contact for Data Enquiries

For any questions or requests relating to your personal data, please contact: