Privacy Policy | Wawasan Legal

1. Scope & Data Controller

This Privacy Policy applies to all personal data processed by Wawasan Legal ("we", "us", "our") in connection with our website at wawasans.pro and the legal services we provide.

Wawasan Legal operates as the data controller for information collected through this website. Our registered office is located at Co-labs Coworking, Level 3, Naza Tower, Platinum Park, 50450 Kuala Lumpur, Malaysia.

This policy is governed by the Personal Data Protection Act 2010 (PDPA) of Malaysia and applies to all data subjects who interact with our website or enquire about our services, regardless of location.

2. Data We Collect

Information You Provide Directly

Full name and preferred contact name
Email address and telephone number
Details of your enquiry or the legal matter you wish to discuss
Company name or startup name (where relevant)
Any additional information you choose to share in a message or during a consultation

Information Collected Automatically

IP address and approximate geographic region
Browser type and version, operating system
Pages visited, time on site, referral source
Device identifiers where analytics tools are active

Legal Basis for Processing

We process personal data on the basis of your consent (given when submitting an enquiry form), our legitimate interest in responding to business enquiries, and where necessary to perform or prepare to perform a contract for services.

3. How We Use Your Data

To respond to your enquiries and schedule consultations
To prepare engagement proposals and service agreements
To deliver the legal services you have engaged us for
To send service-related communications (updates, document requests, correspondence)
To analyse website performance and improve user experience through aggregated analytics
To comply with legal obligations, professional regulations, and court orders

We do not use your personal data for unsolicited marketing communications without your prior consent. Where you have subscribed to service updates or newsletters, you may withdraw consent at any time by contacting us at [email protected].

4. Data Sharing & Third Parties

Wawasan Legal does not sell, rent, or trade personal data. We may share information with trusted service providers where necessary to operate our business:

Analytics Providers

We may use Google Analytics to understand how visitors use our website. Data shared with Google is processed under their own privacy terms. IP anonymisation is enabled where this service is active.

Cloud Infrastructure

Website hosting and email services operate on reputable cloud platforms with data processing agreements in place. Providers are selected on the basis of their security posture and PDPA compatibility.

Legal & Regulatory Bodies

We may be required to disclose personal data to Malaysian regulatory authorities, courts, or law enforcement bodies where we are legally obligated to do so. We will inform you of such disclosures where permitted by law.

Professional Advisors

Engagements involving co-counsel, expert witnesses, or licensed professionals may require limited data sharing on a strictly need-to-know basis, subject to confidentiality obligations.

5. Retention Periods

Enquiry data (no engagement): Retained for up to 12 months from last contact, then securely deleted.
Client engagement data: Retained for 7 years following the conclusion of an engagement, in accordance with Malaysian Bar Council requirements and the Limitation Act 1953.
Analytics data: Aggregated and retained for up to 26 months before being anonymised or deleted.
Cookie consent records: Retained for 12 months from the date consent was recorded.

After the applicable retention period, data is securely deleted or anonymised so that it can no longer be attributed to an individual.

6. Data Protection Measures

All data transmitted to and from our website is encrypted using TLS (HTTPS)
Access to client files and personal data is restricted to authorised personnel only
Internal access controls are reviewed regularly
Physical documents containing personal data are stored securely and disposed of via confidential waste channels
In the event of a data breach affecting your personal data, we will notify you and the relevant authority within the timeframes required under the PDPA and applicable guidelines

7. Cookies

Our website uses cookies to maintain basic functionality and, where you have consented, to gather analytics data. Cookies are small text files stored on your device.

Essential cookies: Required for the site to function. Cannot be disabled.
Analytics cookies: Help us understand visitor behaviour in aggregate form. Active only with your consent.
Marketing cookies: Used only if advertising tracking is enabled. Active only with your consent.
Preference cookies: Remember your settings and choices. Active only with your consent.

For full details on cookie usage and to manage your preferences, please visit our Cookie Policy.

8. Your Rights Under the PDPA

Under Malaysia's Personal Data Protection Act 2010, you have the following rights in relation to personal data we hold about you:

Right of access: Request a copy of the personal data we hold about you.
Right to correct: Ask us to correct inaccurate or incomplete information.
Right to withdraw consent: Withdraw consent to processing at any time, without affecting the lawfulness of prior processing.
Right to limit processing: Request that we restrict how we use your data in certain circumstances.
Right to erasure: Ask us to delete your data where it is no longer necessary for the purposes it was collected, subject to our legal and professional retention obligations.
Right to complain: Lodge a complaint with the Department of Personal Data Protection Malaysia (JPDP) if you believe your rights have not been observed.

To exercise any of these rights, write to us at [email protected]. We will respond within 21 days.

9. Children's Privacy

Our services are intended for individuals aged 18 and above. We do not knowingly collect personal data from persons under 18 years of age. If you believe that a minor's data has been submitted through our website, please contact us promptly so that we may delete it.

10. Third-Party Links

Our website may contain links to external resources, government portals, or partner sites. We are not responsible for the privacy practices of those websites and encourage you to review their privacy policies independently before submitting any personal data.

11. Policy Updates

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or applicable law. When material changes are made, the "Last Updated" date at the top of this page will be revised.

Continued use of our website following any update constitutes acceptance of the revised policy. Where changes are significant, we may also notify active contacts directly.

12. Contact & Data Protection Enquiries

If you have questions about this policy or wish to exercise your data rights, you may reach us through the following channels:

Email: [email protected]
Phone: +60 3-2726 4817 (Mon – Fri, 9:00 AM – 6:00 PM)
Address: Co-labs Coworking, Level 3, Naza Tower, Platinum Park, 50450 Kuala Lumpur, Malaysia

For regulatory complaints, contact the Department of Personal Data Protection Malaysia (JPDP) at www.pdp.gov.my.