Privacy Policy
Bintang Legal — Legal Chambers, Kuching, Sarawak
Last Updated: 10 May 2025 | Effective Date: 10 May 2025
Bintang Legal ("we", "us", "our") is committed to handling your personal data with care, discretion, and in full compliance with the Personal Data Protection Act 2010 (PDPA) of Malaysia. This policy explains what data we collect, how we use it, and what rights you have in relation to it.
This policy applies to all personal data collected through our website, our contact forms, and in the course of our legal services engagement.
1. Data We Collect
We collect personal data in the following ways:
Information you provide to us
- — Full name
- — Email address
- — Phone number (where provided)
- — Content of enquiries submitted through our contact form
- — Any documentation or information shared during a legal engagement
Information collected automatically
- — Browser type and device information
- — Pages visited and time spent on our website (via analytics cookies, if consented)
- — IP address (anonymised where possible)
Legal basis for processing: Contract performance (legal engagement), legitimate interest (responding to enquiries), and consent (analytics and marketing cookies).
2. How We Use Your Data
- — Responding to enquiries and arranging consultations
- — Delivering legal services under our engagement agreement
- — Communicating updates or correspondence relevant to your matter
- — Complying with our legal and professional obligations as advocates of the Sarawak Bar
- — Improving website functionality based on aggregated, anonymised usage data
We do not use your personal data for unsolicited marketing. If you have consented to receive updates from us, you may withdraw that consent at any time by contacting [email protected].
3. Data Sharing
We do not sell, rent, or trade your personal data. We may share data in the following limited circumstances:
- — With courts, opposing parties, and relevant authorities where required in the course of legal proceedings
- — With professional advisors (e.g. barristers, accountants) engaged in connection with your matter, subject to their own confidentiality obligations
- — With website analytics providers (Google Analytics), subject to your cookie consent
- — Where required by law or by order of a Malaysian court
4. Data Retention
We retain personal data for as long as necessary to fulfil the purpose for which it was collected:
- — Enquiries not converted to engagements: retained for up to 12 months
- — Active engagement files: retained for the duration of the matter and seven years thereafter, in line with standard legal practice requirements
- — Website analytics data: retained for up to 26 months (Google Analytics default)
Upon expiry of the applicable retention period, data is securely deleted or anonymised.
5. Data Protection Measures
- — All digital communications handled via encrypted channels
- — Physical files stored in secure, access-controlled premises
- — Access to client data restricted to advocates and staff with direct involvement in the matter
- — Regular review of data handling procedures within the chambers
In the event of a data security incident affecting your personal information, we will notify you and the relevant authorities in accordance with our obligations under Malaysian law.
6. Cookies
Our website uses cookies. Essential cookies are required for the site to function correctly. Optional analytics and preference cookies require your consent. For full details of the cookies we use and how to manage your preferences, please refer to our Cookie Policy.
7. Your Rights
Under Malaysia's Personal Data Protection Act 2010, you have the right to:
- — Access the personal data we hold about you
- — Correct inaccurate or incomplete data
- — Withdraw consent for processing based on consent (this does not affect processing already carried out)
- — Request that we cease using your data for direct marketing purposes
- — Lodge a complaint with the Personal Data Protection Commissioner of Malaysia
To exercise any of these rights, contact us at [email protected]. We will respond within 21 days of receiving your request.
8. Third-Party Links
Our website may contain links to external websites. We are not responsible for the privacy practices of those sites and recommend reviewing their policies independently.
9. Children's Privacy
Our services are intended for adults aged 18 and above. We do not knowingly collect personal data from individuals under 18. If we become aware that a minor's data has been submitted to us, we will delete it promptly.
10. Changes to This Policy
We may update this Privacy Policy from time to time. Material changes will be indicated by an updated date at the top of this page. We recommend checking this page periodically. Continued use of our services following a change constitutes acceptance of the updated policy.
Contact for Data Enquiries
For any questions about this policy or about how your personal data is handled, please contact our data enquiries address: