Privacy Policy
Last Updated: 9 June 2025 · Wasiat Advocates
1. Introduction
Wasiat Advocates ("we", "us", "our") is a legal practice based at Lot 8, Jalan Gaya, 88000 Kota Kinabalu, Sabah, Malaysia. We provide legal services relating to wills, estate administration and inheritance matters.
This Privacy Policy explains how we collect, use and protect personal data that individuals provide to us or that we obtain in the course of providing our services. We are committed to handling personal data with care and in accordance with the Personal Data Protection Act 2010 (Malaysia) ("PDPA").
If you have questions about this policy or how we handle your data, please contact us at [email protected].
2. Personal Data We Collect
We may collect the following categories of personal data:
- Identity data: Full name, identification card or passport number where required for legal work.
- Contact data: Email address, telephone number, mailing address.
- Matter-related data: Information about your estate, family circumstances, or legal matter — provided by you in the course of obtaining our services.
- Website usage data: Technical data collected via cookies, including IP address and browser type. See our Cookie Policy for details.
How We Collect Data
- Contact forms submitted on this website
- Telephone calls and email correspondence
- In-person consultations and client onboarding
- Cookies and similar technologies on this site
Legal Basis for Processing
- Performance of a contract or pre-contractual steps at your request
- Compliance with legal obligations under Malaysian law
- Our legitimate interest in operating and improving our legal practice
- Your consent, where we have requested it
Retention Periods
Client matter files are retained for a minimum of seven years following the completion of a matter, in accordance with professional practice requirements. Website enquiry data not leading to an engagement is held for up to twelve months. Cookie data is held for the periods set out in our Cookie Policy.
3. How We Use Your Data
- To respond to your enquiries and provide the legal services you have requested
- To prepare legal documents and correspond with relevant authorities on your behalf
- To fulfil our obligations as an advocate and solicitor under Malaysian law
- To send relevant updates about your matter (we do not send unsolicited marketing communications)
- To maintain our records and comply with regulatory and audit requirements
- To improve the functionality and content of this website
We do not sell personal data to third parties. We do not use personal data for automated decision-making or profiling.
4. Data Sharing
We may share personal data in the following limited circumstances:
- Courts and registries: Where required to file documents or make applications on your behalf
- Other parties to your matter: With your knowledge and as necessary for the conduct of your legal matter
- Service providers: Cloud storage and IT support providers who process data on our behalf under confidentiality agreements
- Regulatory bodies: The Malaysian Bar Council or other regulators, where we are legally required to disclose
5. Data Protection Measures
- Client files and communications are stored on access-controlled systems with restricted staff access
- Email communications are protected by standard encryption protocols
- Physical documents are stored in secured office premises
- Staff are made aware of confidentiality obligations as part of their engagement with us
- In the event of a data breach that is likely to affect your rights, we will notify you and, where required, the relevant authority, as soon as practicable
6. Cookies
This website uses cookies to function correctly and to understand how it is used. You can control optional cookies through the cookie banner shown when you first visit the site. For full details of the cookies we use and how to manage them, please see our Cookie Policy.
7. Your Rights
Under the Personal Data Protection Act 2010 (Malaysia), you have the following rights regarding your personal data held by us:
- Right of access: To request a copy of the personal data we hold about you
- Right of correction: To request that inaccurate or incomplete data be corrected
- Right to withdraw consent: Where processing is based on your consent, to withdraw it at any time (this does not affect lawfulness of processing before withdrawal)
- Right to limit processing: To request that we restrict how we use your data in certain circumstances
- Right to complain: To lodge a complaint with the Personal Data Protection Commissioner Malaysia if you believe your data has been handled improperly
To exercise any of these rights, please write to us at [email protected]. We will respond within 21 days.
8. Third-Party Links
This website may contain links to external websites. We are not responsible for the privacy practices of those sites and encourage you to review their privacy policies independently.
9. Children's Privacy
Our services and this website are directed at persons aged 18 and over. We do not knowingly collect personal data from individuals under 18. If you believe a minor has submitted data to us, please contact us and we will take appropriate steps to remove it.
10. Changes to This Policy
We may update this Privacy Policy from time to time. The revised version will be published on this page with an updated date at the top. Continued use of our services or this website after any such update constitutes your acceptance of the revised policy.
11. Contact Us
If you have any questions about this policy or wish to exercise your rights, please contact us: