Privacy Policy

1. Who We Are

Mutiara Adil is a legal practice registered in Malaysia, operating from Jalan Damansara 78, 60000 Kuala Lumpur. We are the data controller for personal information collected through this website and through our engagement with clients.

For data-related enquiries, please contact us at [email protected].

2. Data We Collect

We collect the following types of personal data:

• Contact information — your name, email address, and phone number, when you submit our enquiry form or contact us directly.
• Enquiry content — information you choose to include in your message to us, which may relate to your personal or family circumstances.
• Usage data — standard technical data such as IP address, browser type, pages visited, and session duration, collected automatically by our hosting infrastructure and analytics tools.
• Cookie data — preferences and consent information stored in your browser. See our Cookie Policy for details.

We collect this data through our website contact form, direct email or telephone enquiries, and during the course of providing legal services to you.

3. How We Use Your Data

We process your personal data for the following purposes:

• Responding to your enquiry and assessing whether and how we can assist you
• Providing legal services where you have engaged us
• Complying with our legal and professional obligations as a regulated legal practice
• Improving our website and understanding how visitors interact with it

The legal basis for processing is your consent (for website enquiries), contract (where we are providing services to you), and our legitimate interests (for website improvement). We do not send unsolicited marketing communications.

4. Data Sharing and Disclosure

We do not sell your personal data. We may share it only in the following limited circumstances:

• Courts and authorities — where your matter requires us to file documents with the Malaysian High Court, Land Office, or other relevant bodies.
• Professional advisers — where specialist input is required (e.g. a tax consultant), and only with your knowledge.
• Service providers — our website hosting provider and analytics tool (both operating under data processing agreements that restrict their use of your information).
• Legal obligation — where we are required to disclose information by Malaysian law or a court order.

5. Data Retention

Enquiry data from our website contact form is retained for up to 12 months, after which it is deleted unless it has led to an active client engagement.

Client files — including all correspondence and documents relating to a legal matter — are retained for a minimum of seven years following the close of the matter, in accordance with professional obligations under the Legal Profession Act 1976 and the Limitation Act 1953. After this period, files are securely destroyed.

6. Security Measures

We take reasonable technical and organisational measures to protect personal data against unauthorised access, loss, or disclosure. These include:

• Encrypted connections (HTTPS) on our website
• Access controls restricting client data to authorised team members only
• Physical security at our office premises
• Staff awareness of confidentiality obligations under the Legal Profession Act 1976

In the event of a data breach that is likely to result in risk to your rights, we will notify you without undue delay and, where required, report to the relevant authorities.

7. Cookies

We use cookies on our website for essential functionality and, where you consent, for analytics. Full details are in our Cookie Policy.

8. Your Rights

Under the Personal Data Protection Act 2010 (Malaysia) ("PDPA"), you have the following rights in relation to your personal data:

• Right of access — to request a copy of the personal data we hold about you.
• Right of correction — to request that inaccurate data be corrected.
• Right to withdraw consent — where processing is based on consent, you may withdraw it at any time without affecting prior processing.
• Right to limit processing — to request that we limit processing in certain circumstances.

To exercise any of these rights, contact us at [email protected]. We will respond within 21 days. If you believe your rights under the PDPA have been violated, you may lodge a complaint with the Personal Data Protection Commissioner of Malaysia.

9. Children's Privacy

Our services are intended for adults (aged 18 and over). We do not knowingly collect personal data from anyone under the age of 18. If you believe a minor has provided us with personal information, please contact us at [email protected] and we will take appropriate action.

10. Third-Party Links

Our website may contain links to external resources. We are not responsible for the privacy practices of those sites. We recommend reviewing the privacy policy of any third-party site you visit.

11. Updates to This Policy

We may update this policy from time to time. When we do, we will revise the "Last updated" date at the top. Material changes will be notified to active clients by email. Continued use of our website following an update constitutes acceptance of the revised policy.

12. Contact for Data Enquiries