Privacy Policy

1. Introduction

Waris Merbau ("we", "us", "our"), operating at 71 Jalan Tun Jugah, 93350 Kuching, Sarawak, Malaysia, is committed to handling the personal data of individuals who contact us or use our website with care and in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA).

This policy sets out what personal data we collect, how we use it, how we protect it, and what rights you have in respect of it. It applies to individuals in Malaysia who interact with us through our website or in the course of enquiring about or engaging our legal services.

Questions about this policy should be directed to: [email protected]

2. Personal Data We Collect

We collect personal data in the following ways:

• Contact form submissions: name, email address, phone number, and any details included in the message field.
• Direct correspondence: information provided when you email, telephone, or visit the office.
• Service engagement: information necessary to carry out legal services, which may include identity documents, financial information, property details, and family particulars relevant to an estate matter.
• Website analytics: non-personally-identifying data about how visitors use the website, collected through cookies and analytics tools.

The legal bases for processing your personal data are: your consent (where given), the performance of a contract or pre-contractual steps at your request, compliance with a legal obligation, and our legitimate interests in running a legal practice and communicating with enquirers.

We retain personal data for as long as necessary for the purpose it was collected, or as required by applicable law. For legal client files, this is typically a minimum of seven years after the conclusion of a matter.

3. How We Use Personal Data

We use personal data for the following purposes:

• Responding to enquiries submitted through the website or by other means.
• Providing legal services to clients, including the preparation of applications, documents, and correspondence with the court and registry.
• Communicating progress updates on ongoing matters.
• Complying with our professional obligations under the Legal Profession Act and related regulations in Sarawak.
• Improving the performance and content of our website.

We do not sell personal data to third parties, and we do not use it for direct marketing without consent.

We may share personal data with the High Court, Probate Registry, Land and Survey Department Sarawak, and other relevant government bodies as required in the course of providing legal services. We may also share data with professional advisers such as valuers or accountants where necessary for a matter.

4. Data Protection Measures

We take reasonable technical and organisational steps to protect personal data against unauthorised access, disclosure, alteration, or loss. These include:

• Access to client files restricted to authorised staff only.
• Secure email and document storage practices.
• Physical security measures at the office premises.
• Regular review of data handling procedures.

In the event of a personal data breach that is likely to affect your rights or interests, we will notify you in accordance with the requirements of the PDPA.

5. Cookies

Our website uses cookies to store your preferences (such as cookie consent) and to understand how visitors use the site. Cookies do not collect personally identifying information unless you have submitted it through a form.

You can manage your cookie preferences at any time through our Cookie Policy page.

6. Your Rights

Under the Personal Data Protection Act 2010 (Malaysia), you have the following rights in respect of personal data we hold about you:

• Right to access: You may request a copy of the personal data we hold about you.
• Right to correction: You may request correction of inaccurate or incomplete data.
• Right to withdraw consent: Where processing is based on consent, you may withdraw it at any time. Withdrawal does not affect the lawfulness of processing prior to withdrawal.
• Right to limit processing: In certain circumstances, you may request that we limit how we use your data.
• Right to complain: You may lodge a complaint with the Department of Personal Data Protection Malaysia if you believe we have not handled your data in accordance with the PDPA.

To exercise any of these rights, contact us at: [email protected]

7. Third-Party Links

Our website may contain links to external websites. We are not responsible for the privacy practices of those sites and recommend reviewing their privacy policies separately before providing any personal information.

8. Children's Privacy

Our services are directed at adults aged 18 and over. We do not knowingly collect personal data from individuals under the age of 18. If you believe a minor has submitted data through our website, please contact us so we can take appropriate action.

9. Updates to This Policy

We may update this policy from time to time. Changes will be posted on this page with an updated effective date. Continued use of the website after changes are posted constitutes acceptance of the updated policy.

10. Contact

Data Controller: Waris Merbau
71 Jalan Tun Jugah, 93350 Kuching, Sarawak, Malaysia
Phone: +60 82 236 748
Email: [email protected]