Legal documents
Privacy Policy
Last updated: 10 April 2025
Introduction
Beholdr ("we", "us", "our") is committed to the responsible handling of personal data. This policy explains how we collect, use, retain, and protect personal data provided to us through this website and through direct engagement with our legal practice at 42 Jalan Dato Abdullah Tahir, 80300 Johor Bahru, Johor, Malaysia.
This policy is governed by the Personal Data Protection Act 2010 (Malaysia) ("PDPA"). If you have questions about this policy, please contact us at [email protected].
Data We Collect
Information you provide
- Name, email address, telephone number, and any description of your matter submitted through the website enquiry form
- Documents or information you provide during a legal engagement, including identity documents, wills, business records, and correspondence
- Communications you send us by email, letter, or telephone
Information collected automatically
- Browser type, device type, and IP address when you visit our website
- Pages viewed and time spent, collected via analytics cookies where consent has been given
How We Use Your Data
Legal basis for processing
We process personal data on one or more of the following bases under the PDPA: your consent (for analytics and marketing cookies), the performance of a contract or engagement (for legal services work), and our legitimate interests in operating a professional practice (for general enquiry handling and internal administration).
Purposes
- To respond to your enquiry and assess whether we are able to assist with your matter
- To provide legal services pursuant to an engagement agreement
- To maintain accurate legal files and correspondence records
- To comply with our obligations under the Legal Profession Act 1976 and associated rules
- To understand how our website is used, where analytics consent has been given
Data Retention
Personal data collected through website enquiries where no engagement follows is retained for a maximum of 12 months before deletion. Personal data held as part of a legal engagement file is retained for a minimum of seven years from the close of the matter, in accordance with Malaysian legal professional obligations. At the expiry of the applicable retention period, data is securely deleted or anonymised.
Data Sharing
We do not sell or rent personal data. We may share personal data with third parties in the following circumstances:
- With courts, tribunals, opposing parties, or their legal representatives where required in the course of legal proceedings
- With analytics service providers (such as Google Analytics) where website analytics consent has been given
- Where required by law, regulation, or court order
- With professional indemnity insurers or auditors in connection with our regulatory obligations
Data Security
We store personal data on systems protected by access controls and, where appropriate, encryption. Physical documents are held in secured filing. Access to client files is restricted to the practitioner and administrative staff handling the relevant matter. We maintain procedures for responding to data security incidents and will notify affected individuals and the relevant authority where required by law.
Cookies
We use cookies to support basic website functionality and, where you have consented, to collect analytics data about how the website is used. Please refer to our Cookie Policy for full details of the cookies used and how to manage your preferences.
Your Rights
Under the PDPA, you have the right to access personal data we hold about you, to correct inaccurate data, and to withdraw consent for processing that is based on consent (for example, analytics cookies). Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal.
To exercise any of these rights, please contact us at [email protected]. We will respond within 21 days. There is no charge for a request unless it is manifestly unfounded or excessive.
If you are not satisfied with our response, you may refer the matter to the Personal Data Protection Commissioner, Malaysia.
Third-Party Links
Our website may contain links to external websites. We are not responsible for the privacy practices of those sites and encourage you to read their privacy policies before providing any personal data.
Children
Our services are intended for individuals aged 18 and over. We do not knowingly collect personal data from persons under the age of 18. If you believe a minor has provided us with personal data without appropriate consent, please contact us and we will take steps to delete it.
Changes to This Policy
We may update this policy from time to time. Material changes will be noted on this page with an updated date. Continued use of our website or services after a change is published constitutes acceptance of the updated policy.
Contact
Data controller: Beholdr, 42 Jalan Dato Abdullah Tahir, 80300 Johor Bahru, Johor, Malaysia.
Privacy enquiries: [email protected]