Privacy Policy

1. Introduction

Bakti Law ("we", "us", "our") is committed to handling personal information with care. This policy describes how we collect, use, store, and protect personal data submitted through our website or shared during the course of engaging our legal services.

This policy applies to visitors to our website and individuals who contact us or engage Bakti Law for employment and labour law advisory services in Malaysia. By using this website or contacting us, you acknowledge the practices described here.

2. Personal Data We Collect

We collect personal data only to the extent necessary to respond to inquiries and provide legal services. The types of data we may collect include:

• Name and contact information (telephone number, email address)
• The nature of the legal matter you wish to discuss
• Employment-related details shared in the course of a case or advisory engagement
• Technical data from website use, including IP address, browser type, and pages visited (via analytics tools)
• Cookie preferences and consent records

We do not collect sensitive personal data (such as financial account details or identification numbers) through our website contact form.

3. Legal Basis for Processing

Under the Personal Data Protection Act 2010 (Malaysia), we process your data on one or more of the following bases:

• Consent — where you have voluntarily provided your contact details through our website form or cookie consent interaction
• Contractual necessity — where processing is required to provide legal services you have engaged us for
• Legitimate interests — for purposes such as improving our website and maintaining records of professional interactions
• Legal obligation — where we are required by law to retain certain records

4. How We Use Your Personal Data

Personal data submitted through our website or shared during a client engagement may be used to:

• Respond to your inquiry and assess whether we are able to assist with your matter
• Provide employment contract review, policy development, or dispute advisory services
• Communicate with you about the progress of your engagement
• Maintain professional records as required by Bar Council Malaysia guidelines
• Improve the functionality and content of our website through analytics data
• Comply with applicable Malaysian law and our professional obligations

We do not use your personal data for unsolicited marketing communications without your explicit consent.

5. Sharing of Personal Data

Bakti Law does not sell personal data to third parties. We may share information with:

• Courts and tribunals — where representation requires filing submissions on your behalf (Industrial Court, Department of Labour)
• Counterparties and their solicitors — as required by the nature of a dispute or negotiation
• Technology service providers — including analytics tools and website hosting services, bound by data processing agreements
• Regulatory bodies — where disclosure is required by Bar Council Malaysia or applicable law

Any data shared with third parties is limited to what is necessary for the specific purpose.

6. Data Retention

We retain personal data for as long as necessary to fulfil the purpose for which it was collected, subject to the following:

• Inquiry records (non-engaged matters): up to 12 months from the date of last contact
• Active and completed client matter files: 7 years from the conclusion of the engagement, in accordance with professional obligations
• Website analytics data: up to 26 months, as set by third-party analytics providers
• Cookie consent records: 12 months

After the applicable retention period, data is securely deleted or anonymised.

7. Cookies

Our website uses cookies to support basic functionality and, with your consent, to gather analytics data about how the site is used. Full details of the cookies we use and how to manage your preferences are set out in our Cookie Policy.

8. Data Protection Measures

We take reasonable technical and organisational measures to protect personal data against unauthorised access, loss, alteration, or disclosure. These include:

• Secure socket layer (SSL) encryption for data transmitted via the website
• Access controls limiting data access to authorised personnel
• Regular review of our data handling procedures
• Secure disposal of physical documents containing personal information

While we implement these safeguards, no transmission over the internet can be entirely secure. We encourage you to exercise care when sharing sensitive information digitally.

9. Your Rights

Under the Personal Data Protection Act 2010 (Malaysia), you have the right to:

• Access — request a copy of personal data we hold about you
• Correction — request that inaccurate or incomplete data be corrected
• Withdrawal of consent — withdraw consent where processing is based on consent, without affecting the lawfulness of prior processing
• Limit processing — request that we limit the use of your data in certain circumstances
• Complaint — lodge a complaint with the Department of Personal Data Protection Malaysia if you believe your rights have been infringed

To exercise any of these rights, please contact us at [email protected]. We will respond within 21 days.

10. Third-Party Links

Our website may contain links to external websites, including court portals, government resources, and professional body websites. Bakti Law is not responsible for the privacy practices of third-party websites. We encourage you to review the privacy policies of any external sites you visit.

11. Minors

Our services are intended for adults aged 18 and over. We do not knowingly collect personal data from individuals under 18. If you believe we have inadvertently received such data, please contact us so we can remove it.

12. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. The updated version will be published on this page with a revised "Last Updated" date. Continued use of our website following any update constitutes acknowledgment of the changes.

13. Contact for Data Inquiries

For questions or requests related to your personal data, or to raise a data-related concern, please contact:

• Email: [email protected]
• Post: Bakti Law, Suite 8-2, Menara Northam, Jalan Sultan Ahmad Shah, 10050 George Town, Penang, Malaysia
• Telephone: +60 4-2638 1745