Legal

Privacy Policy

Last Updated: 14 April 2025  |  Budi Advocates

1. Who We Are

Budi Advocates is a law firm based at Level 3, Menara Hatten, Jalan Merdeka, 75000 Melaka, Malaysia. We are the data controller for personal data collected through this website and through our client engagement process.

2. Data We Collect

We may collect the following categories of personal data:

• Name, email address, and phone number — provided through our contact form or when you call us
• Description of your legal matter — provided voluntarily in the message field or during consultation
• Technical data — IP address, browser type, pages visited, collected automatically via cookies and analytics tools
• Communications — emails, call notes, and correspondence you send to us

We do not collect sensitive personal data (such as identity card numbers, financial account details, or health information) through this website.

3. How We Collect Data

• Directly from you, via the contact form on this website
• Through telephone enquiries to our office
• Through email correspondence
• Automatically, via cookies and similar technologies (with your consent)

4. How We Use Your Data

We use personal data for the following purposes:

• To respond to your enquiry and provide legal advice or services
• To manage our client relationship with you
• To comply with our legal professional obligations under the Legal Profession Act 1976
• To improve this website and understand how visitors use it (analytics data, with consent)
• To send service-related communications relevant to your matter

We do not use your personal data for unsolicited marketing. We do not sell or rent personal data to third parties.

5. Legal Basis for Processing

Our processing of your personal data is based on:

• Consent — for analytics cookies and any optional communications
• Contract — for processing necessary to provide our legal services once you engage us
• Legitimate interests — for responding to enquiries and managing our practice
• Legal obligation — for compliance with the Legal Profession Act 1976 and other applicable laws

6. Data Retention

We retain client files and related personal data for a minimum of seven years from the conclusion of a matter, in accordance with professional obligations and the Limitation Act 1953. Enquiry data from non-clients is retained for twelve months and then deleted unless you have instructed us on a matter. Analytics data is retained for periods determined by the relevant analytics provider, typically 26 months.

7. Data Sharing

We do not share your personal data with third parties except in the following circumstances:

• With courts, tribunals (including the TCCM), or regulators where required by law or in connection with your matter
• With professional indemnity insurers and the Malaysian Bar, where required under professional conduct obligations
• With analytics service providers (e.g. Google Analytics), where cookies have been accepted
• With our IT service providers operating under appropriate data processing agreements

8. Data Security

We take reasonable technical and organisational measures to protect personal data from unauthorised access, loss, or disclosure. These include:

• Password-protected systems for client file storage
• Encrypted email communications for sensitive matters
• Restricted access to client files to lawyers and staff who need them
• Secure physical storage of paper files at our Melaka office

In the event of a data breach that poses a risk to individuals, we will notify affected parties and relevant authorities in accordance with applicable law.

9. Cookies

We use cookies on this website to improve the user experience and collect anonymised analytics data. You can manage cookie preferences at any time through our Cookie Policy page. Essential cookies cannot be disabled as they are necessary for the website to function.

10. Your Rights Under the PDPA 2010

Under Malaysian law, you have the following rights regarding your personal data:

• Right to access — to request a copy of the personal data we hold about you
• Right to correction — to request correction of inaccurate or incomplete data
• Right to withdraw consent — where processing is based on consent, you may withdraw it at any time
• Right to object — to object to the processing of your data in certain circumstances
• Right to limit processing — to request that we restrict how we use your data

To exercise any of these rights, contact us at [email protected]. We will respond within 21 days. Note that legal professional privilege may limit our ability to disclose certain information from client files.

11. Third-Party Links

This website may contain links to external websites. We are not responsible for the privacy practices of those sites and encourage you to read their privacy policies before submitting any personal data.

12. Children's Privacy

Our services are intended for adults aged 18 and over. We do not knowingly collect personal data from minors. If you believe a minor has provided us with personal data, please contact us at [email protected] so that we can take appropriate steps.

13. Changes to This Policy

We may update this policy from time to time. Where changes are material, we will update the "Last Updated" date at the top of this page. Continued use of this website after changes are posted constitutes acceptance of the updated policy.

14. Contact Us

For privacy-related questions or requests: