Privacy Policy

1. Introduction

Amanah Counsel ("we", "us", "our") is a legal advisory practice registered in Malaysia, with principal offices at Level 18, Menara Aria, 35 Jalan Sultan Ismail, 50250 Kuala Lumpur. We provide pension protection legal services to individuals across Malaysia.

This Privacy Policy applies to all personal data collected through our website at amanahaa.live, through consultation intake forms, and through any other means by which clients or prospective clients engage with us. It is issued in compliance with the Personal Data Protection Act 2010 (PDPA) of Malaysia.

If you have questions about this policy or how your data is handled, please contact us at [email protected].

2. Personal Data We Collect

2.1 Information you provide to us

When you use our contact form, request a consultation, or correspond with our practitioners, we may collect:

• Full name
• Email address
• Phone number (where provided)
• Details of your pension-related enquiry or legal matter
• Any documents or information you choose to share with us

2.2 Automatically collected information

When you visit our website, standard technical data may be collected automatically through server logs and analytics tools, including:

• IP address (anonymised where possible)
• Browser type and version
• Pages visited and time spent on pages
• Referring website
• Device type and operating system

2.3 Legal basis for processing

We process your personal data on the following grounds:

• Consent — where you have expressly consented, such as by submitting our contact form
• Legitimate interest — to respond to enquiries and improve our services
• Legal obligation — where we are required to retain records under applicable law

2.4 Data retention

We retain enquiry data for up to 24 months from the date of last contact. Client engagement data is retained for 7 years from the conclusion of the engagement, in line with professional obligations under Malaysian law. After these periods, data is securely deleted or anonymised.

3. How We Use Your Data

Personal data collected is used solely for the following purposes:

• Responding to your enquiry and arranging consultations
• Delivering legal advisory services for which you have engaged us
• Maintaining records as required under the Legal Profession Act 1976 and related Malaysian regulations
• Improving the quality and accessibility of our services
• Sending you service-related communications, such as appointment reminders

3.1 Marketing communications

We do not send unsolicited marketing communications. Any periodic updates we may issue (such as relevant legal news) are sent only with your prior consent and may be opted out of at any time by writing to [email protected].

3.2 Data sharing

We do not sell, rent, or trade your personal data. We may share data in limited circumstances:

• With professional service providers (e.g. secure hosting, encrypted email) under strict data processing agreements
• With courts, tribunals, or regulatory bodies where we are legally compelled to do so
• With your authorised representative, where you have given written consent

3.3 Analytics

We may use aggregate, anonymised analytics data to understand how visitors use our website, in order to improve its structure and content. This data cannot be used to identify any individual.

4. How We Protect Your Data

We take the security of your personal information seriously. Our measures include:

• TLS/SSL encryption for all data transmitted through our website
• Access controls limiting data visibility to staff who require it for their work
• Secure document storage and handling practices within our chambers
• Regular internal reviews of data handling procedures
• Data minimisation — we collect only what is necessary for the purpose stated

4.1 Data breach notification

In the unlikely event of a data breach that may affect your rights, we will notify you and, where required, the relevant supervisory authority, within the timeframes prescribed by the PDPA 2010 and any applicable guidelines issued by the Department of Personal Data Protection (JPDP) Malaysia.

5. Cookies

Our website uses cookies to maintain basic site functionality and, optionally, to support analytics. Cookies that are not strictly necessary are only placed with your consent, which you may give or withdraw through the cookie banner displayed on your first visit.

For a full explanation of the cookies we use, their purposes, and how to manage your preferences, please refer to our Cookie Policy.

6. Your Rights

Under the Personal Data Protection Act 2010 (Malaysia), you have the following rights in relation to your personal data:

• Right of access — to request a copy of the personal data we hold about you
• Right of correction — to request correction of inaccurate or incomplete data
• Right to withdraw consent — where processing is based on consent, you may withdraw it at any time without affecting prior lawful processing
• Right to prevent processing for direct marketing — you may at any time request that we cease using your data for promotional purposes
• Right to lodge a complaint — with the Department of Personal Data Protection (JPDP), the supervisory authority in Malaysia

6.1 How to exercise your rights

To exercise any of the above rights, please write to us at [email protected] or by post to our address below. We will respond within 21 days of receiving a valid request. In some circumstances, we may need to verify your identity before processing the request.

7. Third-Party Links

Our website may include links to external websites for reference purposes. We are not responsible for the privacy practices of those websites and encourage you to review their respective privacy policies before submitting any personal information. The presence of a link does not constitute an endorsement.

8. Children's Privacy

Our services are directed solely at adults aged 18 years and above. We do not knowingly collect personal data from individuals under this age. If we become aware that data from a minor has been submitted to us, we will take prompt steps to delete it. If you believe a minor has submitted data through our website, please notify us at [email protected].

9. Changes to This Policy

We may update this Privacy Policy from time to time as our practices change or as required by law. When we do, the revised policy will be published on this page with an updated effective date. We encourage you to review this page periodically. Continued use of our website after changes have been published constitutes acceptance of the revised policy.

10. Contact the Data Controller

If you have any questions, concerns, or requests relating to the handling of your personal data, please contact us:

Supervisory authority: Department of Personal Data Protection (Jabatan Perlindungan Data Peribadi — JPDP), Malaysia. www.pdp.gov.my