Privacy Policy

1. Introduction

Setia Guard ("we", "us", "our") is a legal services practice based at No. 9, Jalan Kota Laksamana 2/3, 75200 Melaka, Malaysia. We are committed to protecting the personal data you share with us, and to being transparent about how that data is handled.

This policy applies to all personal data collected through our website, by telephone, by email, or during consultations. It is written in accordance with the Personal Data Protection Act 2010 (Malaysia) ("PDPA").

If you have questions about this policy, please contact us at [email protected].

2. Data We Collect

We collect personal data in the following ways:

• Contact form submissions: name, email address, telephone number, and any message you choose to send.
• Consultations: employment history, pension documentation, correspondence, and other information you share during the course of a matter.
• Website usage: anonymised analytics data (pages visited, browser type, device type) collected via cookies where consent is given.
• Telephone enquiries: name and contact details provided when you call us.

The legal bases on which we process your data are: your consent (for marketing and cookies), the performance of a contract or pre-contractual steps (for legal matters), and our legitimate interests in running a professional practice (for basic operational communications).

Client matter files are retained for seven years following the close of a matter, in line with professional practice obligations. Website enquiry data is retained for up to two years unless you request earlier deletion.

3. How We Use Your Data

• To respond to enquiries submitted via our contact form or by telephone.
• To deliver legal services you have engaged us to provide.
• To communicate updates relevant to your matter.
• To meet our obligations under Malaysian law, including record-keeping requirements.
• To improve the functionality of our website using anonymised analytics (only where cookie consent has been given).

We do not send marketing communications without your explicit consent. If you have given consent, you may withdraw it at any time by contacting us at [email protected].

We do not share your personal data with third parties except where required by law, or where we engage service providers (such as a secure email or document management platform) under appropriate data processing agreements. We do not sell personal data.

4. Data Protection Measures

• Client files are stored on access-controlled systems with password protection and encryption at rest.
• Electronic communications containing personal data are transmitted over encrypted connections (TLS/SSL).
• Access to client records is restricted to the practitioners handling the matter.
• In the event of a data breach that poses a risk to your rights, we will notify the relevant authorities and affected individuals without undue delay, as required under the PDPA.
• We review our data security practices periodically and update them as necessary.

5. Cookies

Our website uses cookies. Essential cookies are required for the site to function and cannot be disabled. Optional cookies (analytics, preferences) are only activated where you have given consent via the cookie banner on our homepage.

For full details, including how to manage your cookie preferences, please see our Cookie Policy.

6. Your Rights Under Malaysian Law

Under the Personal Data Protection Act 2010, you have the following rights in relation to your personal data:

• Right of access: to request a copy of the personal data we hold about you.
• Right of correction: to request that inaccurate data be corrected.
• Right to withdraw consent: where processing is based on consent, you may withdraw it at any time.
• Right to limit processing: to request that we restrict the way we process your data in certain circumstances.
• Right to lodge a complaint: you may contact the Department of Personal Data Protection Malaysia (JPDP) if you believe your data rights have been infringed.

To exercise any of these rights, please contact us in writing at [email protected]. We will respond within thirty days.

7. Third-Party Links

Our website may contain links to third-party websites (for example, the Malaysian Bar Council or government regulatory bodies). Once you leave our site, this policy no longer applies. We are not responsible for the privacy practices of external websites and encourage you to review their policies independently.

8. Children's Privacy

Our services are intended for individuals aged 18 and above. We do not knowingly collect personal data from minors. If you believe a minor has submitted data through our website, please contact us and we will delete it promptly.

9. Changes to This Policy

We may update this policy from time to time to reflect changes in our practices or in applicable law. When we do, we will update the "Last Updated" date at the top of this page. Continued use of our website after such changes constitutes your acceptance of the revised policy.

10. Contact

Data Controller: Setia Guard
Address: No. 9, Jalan Kota Laksamana 2/3, 75200 Melaka, Malaysia
Email: [email protected]
Telephone: +60 6-283 7401