Privacy Policy

1. Introduction

Teguh Bicara ("we", "us", "our") is a law firm registered in Malaysia providing legal services for pension and retirement matters. We are committed to protecting the personal data of those who contact us or engage our services. This Privacy Policy explains what personal information we collect, why we collect it, how we use it, and the rights available to you under Malaysian law.

This Policy applies to our website at teguhbicara.biz, our email communications, and information collected during service engagement. It should be read alongside our Terms & Conditions and Cookie Policy.

Questions about this Policy may be directed to [email protected].

2. Data Controller

The data controller responsible for your personal data is Teguh Bicara, Jalan Sultan Ismail 88, 50250 Kuala Lumpur, Malaysia. For privacy-related enquiries, email [email protected].

3. Data We Collect

We may collect the following categories of personal data:

• Contact details: name, email address, telephone number, and postal address when provided through our enquiry form or in correspondence.
• Case-related information: employment history, pension statement details, and other documentation you share with us in connection with a legal matter.
• Website usage data: IP address, browser type, pages visited, and session duration, collected via cookies and standard server logs.
• Communications: content of emails, letters, and phone call notes relevant to your matter.

We collect information directly from you (via forms, email, phone, or in-person meetings) and, where relevant, from documents and records you provide as part of a service engagement.

4. Legal Basis for Processing

We process personal data on the following grounds under the Personal Data Protection Act 2010 (PDPA):

• Contract: processing necessary to provide legal services you have engaged us to perform.
• Consent: where you have provided explicit consent, such as when submitting an online enquiry form.
• Legal obligation: compliance with Malaysian law, including record-keeping requirements under the Legal Profession Act 1976.
• Legitimate interests: sending service-related communications, maintaining records of completed matters, and improving our website.

5. How We Use Your Data

Your personal data is used to:

• Respond to your initial enquiry and assess whether we can assist with your pension matter.
• Provide the legal service you have engaged, including preparing documents, conducting correspondence with authorities, and maintaining case records.
• Communicate updates about your ongoing matter.
• Comply with our professional obligations and applicable Malaysian law.
• Maintain internal records for the period required by law.
• Improve the content and usability of our website.

We do not use your personal data for unsolicited marketing and will not sell it to third parties.

6. Data Sharing

Your data may be shared in limited circumstances:

• Regulatory and legal authorities: where required by law, court order, or a direction from the Bar Council Malaysia.
• Counterparties in your legal matter: only to the extent necessary and with your knowledge — for example, when we correspond with EPF or a former employer on your behalf.
• Trusted service providers: including secure email and document storage providers, bound by confidentiality obligations and processing data only on our instructions.

We do not transfer personal data outside Malaysia without ensuring appropriate protections are in place.

7. Data Retention

We retain personal data for the following periods:

• Enquiries that do not proceed to a service engagement: deleted within 12 months of last contact.
• Completed service matters: retained for seven years from the date of matter closure, as required for professional conduct and limitation period compliance.
• Website usage data: retained in anonymised form for up to 24 months.

After the applicable retention period, data is securely deleted or anonymised.

8. Data Security

We take the following steps to protect your information:

• Encrypted email communications for sensitive documents.
• Password-protected file storage with access limited to the lawyer assigned to your matter.
• Physical file security in our Kuala Lumpur office.
• Annual review of our data security practices.

In the event of a data breach affecting your personal information, we will notify you and the relevant authority as required under Malaysian law.

9. Cookies

Our website uses cookies to maintain basic functionality and to analyse site usage. Please see our Cookie Policy for full details and to manage your preferences.

10. Third-Party Services

Our website may link to external resources, including legal databases or regulatory websites. We are not responsible for the privacy practices of those sites. We recommend reviewing their policies before providing personal data.

We use Google Analytics (anonymised IP) to understand website traffic. This data does not identify you personally.

11. Children's Privacy

Our services are intended for adults aged 18 and over. We do not knowingly collect personal data from minors. If you believe a minor has submitted data through our website, please contact us at [email protected] and we will remove it promptly.

12. Your Rights Under PDPA 2010

As a data subject under the Personal Data Protection Act 2010, you have the right to:

• Access: request a copy of the personal data we hold about you.
• Correction: request that inaccurate or incomplete data be corrected.
• Withdrawal of consent: withdraw consent where processing is based on consent, noting this will not affect prior lawful processing.
• Restriction: request that we limit the processing of your data in certain circumstances.
• Objection: object to processing based on legitimate interests.

To exercise any of these rights, write to [email protected]. We will respond within 21 days. If you are unsatisfied with our response, you may contact the Department of Personal Data Protection Malaysia (JPDP).

13. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. The updated version will be published on our website with a revised "Last Updated" date. Continued use of our website or services following a change constitutes acceptance of the updated policy.

14. Contact

Privacy enquiries: [email protected]

Address: Teguh Bicara, Jalan Sultan Ismail 88, 50250 Kuala Lumpur, Malaysia

Phone: +60 3-2148 9367