Privacy Policy

1. Introduction

Advocata ("we," "our," or "us") is committed to protecting the privacy and confidentiality of your personal information. As a legal services provider operating in Malaysia, we understand the sensitive nature of the information entrusted to us and maintain rigorous standards for its protection.

This Privacy Policy explains how we collect, use, store, and protect your personal data in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA) and other applicable privacy regulations. By engaging our services or using our website, you consent to the practices described in this policy.

For questions about this policy or our privacy practices, please contact us at privacy@advocataes.

2. Information We Collect

Personal Information Provided Directly

When you engage our legal services or inquire about them, we collect information you provide directly, including:

• Contact details: name, email address, phone number, mailing address
• Identification information: identification numbers, date of birth as required for legal matters
• Financial information: banking details, payment information for billing purposes
• Legal matter details: information relevant to the services you seek, including family circumstances, business operations, or estate planning objectives
• Communication records: correspondence, consultation notes, and documentation related to your matter

Information Collected Automatically

When you visit our website, we collect certain information automatically:

• Technical data: IP address, browser type, device information, operating system
• Usage data: pages visited, time spent on pages, referring websites
• Cookies and similar technologies: see our Cookie Policy for details

3. How We Use Your Information

Legal Basis for Processing

We process your personal data under the following legal bases:

• Contract Performance: Processing necessary to provide legal services you have engaged
• Consent: Where you have explicitly agreed to specific processing activities
• Legitimate Interest: For business operations, improving services, and preventing fraud
• Legal Obligation: Compliance with legal and regulatory requirements

Purposes of Use

We use your personal information to:

• Provide legal counsel and services you have requested
• Communicate with you about your legal matters and respond to inquiries
• Process billing and payments for services rendered
• Maintain client files and documentation as required by professional standards
• Comply with legal obligations, including anti-money laundering regulations
• Improve our services and website functionality
• Send you important updates about our services or legal developments that may affect you

4. Data Sharing and Disclosure

We maintain strict confidentiality and only share your information in limited circumstances:

Professional Service Providers

We may share information with trusted third parties who assist in delivering our services:

• Legal research databases and document management systems
• Secure cloud storage providers
• Payment processors for billing purposes
• External counsel or experts when required for your matter

All such providers are bound by strict confidentiality obligations.

Legal Requirements

We may disclose information when required by law, such as:

• Court orders or legal proceedings
• Regulatory compliance requirements
• Preventing fraud or illegal activity

With Your Consent

We obtain your explicit permission before sharing information for purposes not covered by this policy.

5. Data Security and Protection

We implement comprehensive security measures to protect your personal information:

• Encryption: Data transmission and storage use industry-standard encryption protocols
• Access Controls: Limited access to personal data on a need-to-know basis
• Physical Security: Secure office facilities with restricted access
• Staff Training: Regular training on confidentiality and data protection
• Incident Response: Procedures for detecting and responding to security incidents

While we employ robust security measures, no system can be completely secure. We work continuously to enhance our protections and respond promptly to any concerns.

6. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes outlined in this policy and to comply with legal obligations:

• Client Files: Maintained for at least seven years after matter conclusion, as required by Malaysian Bar Council rules
• Financial Records: Retained per tax and accounting regulations
• Website Data: Analytics data retained for up to 24 months
• Communication Records: Preserved as needed for legal and professional purposes

After retention periods expire, we securely delete or anonymize personal information.

7. Your Rights and Choices

Under Malaysia's Personal Data Protection Act, you have the following rights:

• Access: Request copies of personal data we hold about you
• Correction: Request correction of inaccurate or incomplete information
• Withdrawal of Consent: Withdraw consent for processing where applicable
• Data Portability: Request transfer of your data in structured format
• Objection: Object to processing based on legitimate interests
• Complaint: Lodge a complaint with the Personal Data Protection Commissioner

To exercise these rights, please contact privacy@advocataes. We will respond to requests within 21 days as required by law.

Note that certain rights may be limited by attorney-client privilege, professional obligations, or legal requirements to maintain records.

8. Cookies and Website Technologies

Our website uses cookies and similar technologies to improve functionality and user experience. For detailed information about the cookies we use and how to manage them, please see our Cookie Policy.

9. Third-Party Links

Our website may contain links to external sites not operated by us. We are not responsible for the privacy practices of third-party websites. We encourage you to review privacy policies of any sites you visit.

10. Children's Privacy

Our services are not directed to individuals under 18 years of age. We do not knowingly collect personal information from minors without parental consent. If you believe we have inadvertently collected such information, please contact us immediately.

11. Updates to This Policy

We may update this Privacy Policy periodically to reflect changes in our practices, legal requirements, or services. Material changes will be communicated through:

• Posting the updated policy on our website with a new "Last Updated" date
• Email notification to active clients when changes significantly affect their rights

Your continued use of our services after policy updates constitutes acceptance of the revised terms.

12. Contact Information

For questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact: