Privacy Policy

Who Is Responsible for Your Data

The data controller for all personal information collected through this website and our service engagements is Almsgate, 6 Jalan Puchong, Bandar Puteri, 47100 Puchong, Selangor, Malaysia. For data-related enquiries, contact us at [email protected].

What Personal Information We Collect

We collect personal data only where it is necessary to respond to enquiries, provide our services, or maintain our records. This includes:

• Contact data: Name, email address, telephone number, and postal address provided through our website contact form or directly by the family during an engagement.
• Engagement records: Written notes, scope agreements, and session records created during the delivery of our services. These relate to document descriptions and file structure, not to the contents or interpretation of any document.
• Website usage data: Cookies and analytics data, as described in our Cookie Policy.

We collect this data directly from you through the website contact form, at in-person appointments, and through written correspondence. We do not collect data from third parties about our clients.

Why We Hold Your Data and on What Basis

Under the PDPA 2010, we process personal data on the following bases:

• Contract performance: To deliver the service the family has engaged us for, including scheduling appointments, producing deliverables, and communicating about the engagement.
• Legitimate interests: To respond to enquiries through our contact form, maintain records of completed engagements for quality review, and improve our service offering.
• Consent: For any optional communications such as service updates or newsletters, where we have obtained explicit consent.

We retain contact and engagement data for a period of five years following the close of an engagement, after which it is securely deleted. Website analytics data is retained for up to 26 months.

Data Usage Practices

• Responding to website enquiries and scheduling initial conversations
• Delivering the specific service selected and producing agreed deliverables
• Issuing invoices and maintaining financial records as required by Malaysian law
• Communicating about appointment schedules and service progress
• Analysing website usage patterns to improve the site (using anonymised or aggregated data only)

We do not use personal data for unsolicited marketing, sell data to any third party, or share data with advertising networks. We do not share data with any party unless required to do so by law or with the explicit instruction of the data subject.

How We Protect Your Information

We take the security of personal data seriously and maintain the following practices:

• Website contact form data is transmitted over an encrypted HTTPS connection
• Digital engagement records are stored on password-protected systems with restricted access
• Paper engagement records are stored in locked filing systems on our premises
• Access to personal data is limited to team members directly involved in delivering the relevant service
• In the event of a data breach affecting personal data, affected individuals will be notified without undue delay and in accordance with PDPA requirements

Cookie Usage

This website uses cookies to support basic functionality, analyse site usage, and record your cookie preferences. Full details of the cookies we use and how to manage your preferences are in our Cookie Policy. When you first visit the site, a cookie notice appears and records your choice. You can change your preferences at any time through the Cookie Policy page.

Data Subject Rights Under Malaysian Law

Under the Personal Data Protection Act 2010, you have the following rights in relation to personal data we hold about you:

• Right of access: To request a copy of the personal data we hold about you
• Right of correction: To request that inaccurate or incomplete data be corrected
• Right to withdraw consent: To withdraw any consent previously given for optional processing, without affecting the lawfulness of processing carried out before withdrawal
• Right to object: To object to processing of your personal data in certain circumstances
• Right to lodge a complaint: To raise a concern with the Department of Personal Data Protection Malaysia (PDPD) if you believe your rights under the PDPA have not been respected

To exercise any of these rights, write to us at [email protected]. We will respond within 21 days.

External Links

Our website may contain links to external websites, including those of professional registries and government bodies. We are not responsible for the privacy practices of those sites. We encourage you to read the privacy policies of any site you visit.

Age Restrictions

Our services are intended for adults aged 18 and over. We do not knowingly collect personal data from individuals under 18. If you believe we have inadvertently received data from a minor, please contact us at [email protected] and we will delete it promptly.

Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will revise the Last Updated date at the top of this page. If changes are material, we will make reasonable efforts to notify individuals with whom we have an active engagement. Continued use of this website following a policy update constitutes acceptance of the updated terms.