Privacy Policy

1. Introduction

Bunga Damai ("the firm", "we", "us") is committed to protecting the personal data of every person who contacts or engages with us. This Privacy Policy sets out how we collect, use, store, and protect personal information in the course of providing family law services in Kuala Lumpur, Malaysia.

This policy is written in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA). If you have questions about this policy or about how your data is handled, please contact us at [email protected].

2. Data We Collect

We collect personal data only when it is necessary for the purpose of providing legal services or operating this website. The categories of data we may collect include:

• Identification data: Full name, identity card number (where required for formal engagements)
• Contact data: Email address, telephone number, postal address
• Matter data: Information provided in the course of a legal engagement, including family circumstances, financial information where relevant, and correspondence with third parties
• Website data: Anonymised usage data collected via analytics cookies (where consented to)

We do not collect sensitive personal data beyond what is strictly necessary for the legal matter at hand. We do not collect financial data except where directly relevant to the services being provided.

3. How We Use Your Data

Personal data collected by Bunga Damai is used for the following purposes:

• To respond to enquiries submitted via our contact form or by telephone
• To deliver the legal services you have engaged us to provide
• To maintain accurate legal files and records as required by professional obligations
• To fulfil obligations under Malaysian law and Bar Council regulations
• To improve the function and content of this website (using anonymised analytics data only)

We do not use personal data for marketing without explicit consent, and we do not sell or rent personal data to any third party under any circumstances.

4. Legal Basis for Processing

Under the PDPA 2010, personal data may be processed where the data subject has given consent, where processing is necessary for the performance of a contract, or where processing is required to comply with a legal obligation. In the context of legal services, the primary basis for processing is the performance of the engagement contract and compliance with our professional obligations as members of the Malaysian Bar.

5. Data Retention

Client files are retained for a minimum of seven years following the conclusion of an engagement, in line with standard legal practice requirements in Malaysia. Website contact form submissions not leading to an engagement are retained for no more than twelve months. Analytics data is retained for no more than twenty-four months before deletion.

6. Data Sharing

We do not share personal data with third parties except in the following circumstances:

• With mediators, court officials, or other legal practitioners where necessary for the matter and with the client's knowledge
• With third-party service providers who process data on our behalf (for example, secure cloud storage) under contractual data processing agreements
• Where required by Malaysian law or by a court order

7. Data Protection Measures

We take the security of personal data seriously. Measures in place include: encrypted storage of digital files; access controls limiting file access to the relevant practitioner; secure email communication for sensitive correspondence; and physical security for any paper files held at our office. In the event of a data breach affecting personal data, affected individuals will be notified promptly and in accordance with PDPA requirements.

8. Cookies

This website uses cookies to support its basic functions and, where consented to, to collect anonymised analytics data. Please see our Cookie Policy for full details of the cookies used and how to manage your preferences.

9. Your Rights Under the PDPA 2010

Under Malaysia's Personal Data Protection Act 2010, you have the following rights in relation to personal data we hold about you:

• Right of access: To request a copy of the personal data we hold about you
• Right of correction: To request that inaccurate data be corrected
• Right to withdraw consent: To withdraw consent to processing where consent is the basis for processing
• Right to limit processing: To request that processing of your data be limited in certain circumstances

To exercise any of these rights, please contact us in writing at [email protected]. We will respond within thirty days.

If you are not satisfied with our response, you may lodge a complaint with the Personal Data Protection Commissioner of Malaysia.

10. Third-Party Links

This website may contain links to external websites. We are not responsible for the privacy practices of those sites and encourage you to read their privacy policies independently.

11. Children's Privacy

Our services are intended for adults (persons aged 18 and above). We do not knowingly collect personal data from minors. Where a matter involves a minor's interests (for example, parenting arrangements), data relating to the minor is handled with additional care and is not used for any purpose other than the legal matter concerned.

12. Changes to This Policy

We may update this Privacy Policy from time to time. Where changes are material, we will post a notice on this page and update the "Last Updated" date at the top. Continued use of our website or services after a policy change constitutes acceptance of the updated policy.

13. Contact

For any question or concern relating to this Privacy Policy or to the handling of your personal data, please write to: