Privacy Policy
Last Updated: 10 May 2025 | Kukuh Law, Kuala Lumpur, Malaysia
1. Introduction
Kukuh Law ("we", "our", "us") is committed to handling your personal information with care and in accordance with the Personal Data Protection Act 2010 (PDPA) of Malaysia. This policy explains what information we collect, how we use it, how we protect it, and what rights you hold with respect to your data.
This policy applies to information collected through our website at kukuh.club and in the course of providing our legal services. If you have questions about this policy, you may contact us at [email protected].
2. Personal Data We Collect
We collect personal information in the following circumstances:
- Contact form submissions: name, email address, phone number (optional), and message content.
- Consultations and legal engagements: identity documents, pension and retirement fund records, employment history, and other information relevant to your matter.
- Website usage: cookie data, browser type, and pages visited (collected via analytics tools with your consent).
Legal basis for processing: we process personal data on the basis of your consent (website enquiries), contractual necessity (legal services engagement), and our legitimate interests in operating a professional law practice.
Retention: client file data is retained for a minimum of seven years following conclusion of a matter, in accordance with legal professional obligations. Website enquiry data is retained for up to two years unless you ask us to delete it sooner.
3. How We Use Your Information
- To respond to your enquiries and schedule consultations.
- To provide the legal services you have engaged us for.
- To correspond with pension authorities, government bodies, and other parties on your behalf (with your instruction).
- To send you updates on your matter and relevant legal developments (where you have agreed to receive these).
- To comply with our legal and regulatory obligations as members of the Malaysian Bar.
- To improve our website and communications based on anonymised usage data.
We do not sell personal data to third parties. We do not use your information for unsolicited marketing purposes.
4. Data Sharing
Your personal data may be shared in the following limited circumstances:
- Pension bodies and government agencies: EPF, KWAP, the Public Service Department, and others — only when this is necessary for your matter and on your instruction.
- Service providers: our IT systems provider and document management service, who are contractually bound to keep your data confidential and use it only for specified purposes.
- Legal and regulatory requirements: where disclosure is required by law, court order, or the Malaysian Bar's professional conduct rules.
5. Data Protection Measures
- Client files are stored on password-protected systems with restricted staff access.
- Electronic communications containing sensitive data are sent via encrypted channels where possible.
- Physical documents are held in secured premises with controlled access.
- In the event of a data breach affecting your personal information, we will notify you and the relevant authorities as required under Malaysian law.
6. Cookies
Our website uses cookies to remember your preferences and to collect anonymised analytics data. You can manage your cookie preferences through the banner on our homepage or via our Cookie Policy. Essential cookies that are necessary for the website to function cannot be disabled.
7. Your Rights Under Malaysian Law
Under the Personal Data Protection Act 2010 (Malaysia), you have the following rights with respect to personal data we hold about you:
- Right of access: you may request a copy of the personal data we hold about you.
- Right of correction: you may ask us to correct any inaccurate or incomplete data.
- Right to withdraw consent: where processing is based on your consent, you may withdraw it at any time. This will not affect the lawfulness of processing that took place before withdrawal.
- Right to limit processing: in certain circumstances, you may ask us to restrict how we use your data.
- Right to prevent processing for direct marketing: we do not use your data for direct marketing without your agreement, but you may instruct us to stop at any time.
To exercise any of these rights, contact us at [email protected]. We will respond within 21 days. If you believe we have handled your data incorrectly, you may lodge a complaint with the Department of Personal Data Protection Malaysia (JPDP).
8. Third-Party Links
Our website may contain links to government portals and other external resources. We are not responsible for the privacy practices of those sites and encourage you to read their privacy policies separately.
9. Children's Privacy
Our services are directed at adults aged 18 and over. We do not knowingly collect personal data from minors. If you believe a minor has submitted personal information through our website, please contact us so we can remove it.
10. Updates to This Policy
We may update this Privacy Policy from time to time. The date at the top of this page indicates when it was last revised. Continued use of our website following an update constitutes acceptance of the revised policy. For material changes, we will make reasonable efforts to notify you directly.
11. Contact for Data Enquiries
Data Controller: Kukuh Law
+60 3-2386 9174
Level 25, Menara Citibank, 165 Jalan Ampang, 50450 Kuala Lumpur, Malaysia