Privacy Policy

1. Introduction

Pulih Law ("the Firm", "we", "us") is committed to handling personal data responsibly and in accordance with the Personal Data Protection Act 2010 (PDPA) of Malaysia. This Privacy Policy describes how we collect, use, store, and protect information provided to us by individuals who engage our services or contact us through our website.

If you have questions about this policy, please contact us at [email protected].

2. Data We Collect

We collect only information that is necessary to provide our legal services or to respond to enquiries. This may include:

• Full name and contact details (phone number, email address)
• Postal address or location information where relevant to a legal matter
• Details of the incident or injury described in an enquiry or intake form
• Medical records, police reports, and employment records provided in connection with a claim
• Financial information relevant to loss-of-earnings assessment
• Website usage data collected via cookies (see Section 6)

We collect personal data through our website contact form, email correspondence, telephone conversations, and in-person meetings.

3. Legal Basis and Purpose of Processing

We process personal data on the following bases:

• Consent: Where you submit an enquiry form or contact us voluntarily
• Contract: Where data is necessary to provide legal services you have engaged us to perform
• Legitimate interest: For administrative purposes, recordkeeping, and improving our services
• Legal obligation: Where required by Malaysian law, court order, or regulatory requirement

Data is used to assess and handle personal injury claims, communicate with clients, prepare legal documents, correspond with insurers or courts, and maintain accurate records of matters handled.

4. Data Retention

Personal data connected to a legal matter is retained for a minimum of seven years following conclusion of the matter, in accordance with standard legal practice requirements in Malaysia. Enquiry data for matters not taken on is typically retained for twelve months and then securely deleted. You may request earlier deletion where no ongoing legal obligation prevents this.

5. Data Security

We store client data on secured, access-controlled systems. Physical files are kept in locked premises. Electronic correspondence is handled through encrypted channels where possible. Access to client records is restricted to members of the legal team directly involved in the matter.

In the event of a data breach that may affect your rights, we will notify affected parties within the timeframes required by Malaysian law.

6. Cookies

Our website uses cookies to understand how visitors navigate the site and to improve functionality. For a full description of the cookies we use, please see our Cookie Policy. You may manage your cookie preferences at any time through that page.

7. Third-Party Services

We may share data with the following third-party services in the course of handling a legal matter:

• Medical reporting specialists instructed to prepare expert reports
• Insurance companies and their legal representatives during negotiations
• The courts of Malaysia as required by legal proceedings
• Our professional indemnity insurers where required
• Website analytics providers (Google Analytics, where active)

We do not sell or share personal data with any party for marketing purposes.

8. Your Rights Under the PDPA

Under the Personal Data Protection Act 2010 (Malaysia), you have the right to:

• Access personal data we hold about you
• Correct inaccurate or incomplete personal data
• Withdraw consent to processing (where consent is the basis)
• Request that we cease using your data for direct marketing

To exercise any of these rights, please write to us at [email protected]. We will respond within 21 days.

9. Third-Party Links

Our website may contain links to external sites. We are not responsible for the privacy practices of those sites and encourage you to review their policies independently.

10. Children's Privacy

Our services are intended for adults (18 and above) or for parents and guardians acting on behalf of minor claimants. We do not knowingly collect data directly from individuals under 18 without parental or guardian consent.

11. Policy Updates

We may update this Privacy Policy from time to time. Any changes will be posted on this page with a revised "Last Updated" date. Continued use of our website or services following publication of changes constitutes acceptance of the updated policy.

12. Contact

For any questions about this policy or how we handle your personal data:

• Email: [email protected]
• Post: Pulih Law, 8, Jalan Imbi, 55100 Kuala Lumpur, Malaysia
• Phone: +60 3-2283 7964