Privacy Policy

Data We Collect

We collect personal data in the following circumstances:

Contact and Client Data

• Full name
• Email address
• Phone number (where provided)
• Nature of your enquiry or legal matter (as described by you)
• Correspondence and documents you share with us in the course of receiving our services

Website Data

• IP address and browser type (via analytics tools, if consented)
• Pages visited and time spent on each page
• Device type and operating system
• Cookie preferences and interactions

Legal Basis for Processing

We process personal data on the following lawful bases under the PDPA:

• Consent — where you have provided explicit consent (e.g. submitting a contact form or accepting analytics cookies)
• Contract performance — where processing is necessary to deliver the legal services you have engaged us for
• Legal obligation — where we are required to retain or process data by Malaysian law
• Legitimate interest — for website operation and internal administration, where this does not override your rights

How We Use Your Data

Personal data we hold is used only for the following purposes:

• Responding to enquiries submitted via our contact form or by telephone or email
• Providing legal advice and services in relation to child custody, family mediation, or marital agreements
• Preparing, reviewing, and managing legal documents on your behalf
• Sending service-related communications (appointment confirmations, document updates)
• Maintaining our internal client records and complying with professional obligations
• Improving our website based on aggregated, anonymised usage data (only where analytics cookies are consented to)

We do not use your personal data for unsolicited direct marketing. If you would like to receive updates from Sri Kasih, you may opt in at the point of contact.

Data Sharing

We do not sell or rent personal data to third parties. We may share data with:

• Courts, tribunals, or regulatory bodies where required for your legal matter or by law
• Other parties directly involved in your legal matter (with your knowledge and consent)
• Technology service providers (hosting, analytics) under strict data processing agreements

Data Retention

We retain personal data only as long as necessary for the purpose for which it was collected:

• Client engagement records — retained for seven (7) years from the date of last engagement, in accordance with Malaysian legal professional obligations
• Enquiries not resulting in engagement — retained for twelve (12) months from the date of initial contact
• Website analytics data — retained for up to twenty-six (26) months in anonymised form
• Cookie consent records — retained for twelve (12) months

After the applicable retention period, personal data is securely deleted or anonymised.

Data Protection Measures

• All data transmitted via our website is encrypted using TLS/SSL protocols
• Client files and correspondence are stored on access-controlled, password-protected systems
• Only authorised personnel of Sri Kasih have access to client data
• Physical documents containing personal data are stored in secured, locked premises
• In the event of a data breach that may affect your rights, we will notify you and the relevant authority as required by the PDPA

Cookies

Our website uses cookies. Essential cookies are required for the site to function and are always active. Optional cookies (analytics, marketing, preferences) are only placed with your consent.

You can manage your cookie preferences at any time via our Cookie Policy page. Withdrawing consent for optional cookies does not affect the functioning of essential cookies or any legal services you have engaged us for.

Your Rights

Under the Personal Data Protection Act 2010 and general data protection principles, you have the following rights regarding personal data we hold about you:

• Right of access — you may request a copy of the personal data we hold about you
• Right to correction — you may request that inaccurate or incomplete data be corrected
• Right to withdraw consent — where processing is based on consent, you may withdraw it at any time; this does not affect the lawfulness of processing prior to withdrawal
• Right to limit processing — you may request that we limit how we use your data in certain circumstances
• Right to lodge a complaint — you may raise a complaint with the Department of Personal Data Protection Malaysia (JPDP) if you believe your rights have been infringed

To exercise any of these rights, contact us at [email protected]. We will respond within thirty (30) days.

Third-Party Links

Our website may contain links to external websites. Sri Kasih is not responsible for the privacy practices of third-party sites. We recommend reviewing the privacy policies of any external website you visit.

Children's Privacy

Our services and website are intended for individuals aged 18 and above. We do not knowingly collect personal data directly from persons under 18. Where the personal data of minors is relevant to a legal matter (e.g. custody proceedings), such data is handled with particular care and only to the extent required for the legal service.

Policy Updates

We may update this Privacy Policy from time to time. When we do, the "Last Updated" date at the top of this page will be revised. Continued use of our website or services after changes are posted constitutes acceptance of the updated policy. For material changes, we will take reasonable steps to notify active clients.

Contact & Data Controller

Sri Kasih is the data controller for the personal data described in this policy. For privacy-related enquiries, corrections, or requests: