Privacy Policy

1. About This Policy

Warisan operates from Suite 21-5, Menara Worldwide, Jalan Bukit Bintang, 55100 Kuala Lumpur, Malaysia. We provide legal advisory services relating to inheritance matters including will preparation, estate administration, and grant of probate assistance.

This policy applies to all personal data collected when you visit our website, submit an enquiry, or engage our services. Please read it carefully. By using our website, you acknowledge that you have read and understood this policy.

2. Data We Collect

We collect only the personal data reasonably necessary to provide our services and respond to your enquiries. This may include:

Information you provide to us

• Your name and contact details (email address, telephone number)
• The nature of your enquiry or legal matter
• Any information you share with us in correspondence or during consultations

Information collected automatically

• IP address and browser type (collected via server logs)
• Pages visited, time of visit, and referring URL
• Cookie identifiers, where you have consented (see Section 8)

We do not collect sensitive personal data (such as identification card numbers or financial account details) through our website enquiry forms.

3. How We Use Your Data

We use personal data collected for the following purposes:

• To respond to your enquiry and provide the legal services you have requested
• To maintain a record of our communications with you
• To send you relevant information about your matter where you have requested this
• To improve our website and services through aggregated, anonymised analytics
• To comply with our professional and legal obligations

We will not use your data for unsolicited marketing or share it with third parties for their own marketing purposes.

4. Legal Basis for Processing

We process your personal data on the following grounds:

• Consent — where you have submitted a contact form or agreed to cookies
• Contractual necessity — where processing is required to provide services you have requested
• Legitimate interests — for website security, fraud prevention, and service improvement
• Legal obligation — where we are required to retain records under applicable law or professional rules

5. Sharing of Your Data

We do not sell or rent your personal data to any third party. We may share your data only in the following limited circumstances:

• With service providers who assist us in operating our website and services (such as hosting providers), who are contractually bound to protect your data
• With professional advisers or regulatory authorities where required by law or our professional obligations
• Where you have expressly given us permission to do so

All third parties who process data on our behalf are required to do so in accordance with applicable data protection law.

6. Data Retention

We retain your personal data only for as long as is necessary for the purposes described in this policy, or as required by applicable law or professional obligations.

• Enquiry data from website forms: retained for up to 24 months from the date of last contact
• Client matter records: retained in accordance with our professional obligations, typically seven years from the conclusion of the matter
• Website analytics data: retained in aggregated, anonymised form and not linked to individual users

When data is no longer required, it is deleted or anonymised in a manner that protects your privacy.

7. Your Rights

Under the Personal Data Protection Act 2010 (Malaysia) and, where applicable, other data protection legislation, you have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate or incomplete personal data
• Withdraw consent to processing, where consent is the legal basis
• Request that we cease using your data for direct marketing purposes
• Request erasure of your personal data, subject to legal retention requirements

To exercise any of these rights, please contact us using the details in Section 12. We will respond to your request within a reasonable time and at no charge, unless otherwise permitted by law.

8. Cookies

Our website uses cookies — small text files stored on your device — to support the functioning of the website and, where you consent, to collect analytics data. Please refer to our Cookie Policy for full details of the cookies we use and how to manage your preferences.

9. Security

We take reasonable technical and organisational measures to protect your personal data from unauthorised access, disclosure, alteration, or destruction. These measures include encrypted data transmission (HTTPS) and restricted access controls.

No method of transmission over the internet is entirely secure, however, and we cannot guarantee absolute security. If you have concerns about the security of information you have shared with us, please contact us promptly.

10. Children

Our website and services are directed at adults. We do not knowingly collect personal data from persons under the age of 18. If you believe a child has provided us with personal data without parental consent, please contact us and we will take steps to remove such data.

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. Where changes are material, we will endeavour to bring them to your attention. The date at the top of this page reflects when the policy was last revised.

We encourage you to review this policy periodically to stay informed about how we protect your information.

12. Contact Us

If you have any questions about this Privacy Policy, wish to exercise your rights, or have concerns about how we handle your personal data, please reach out to us: