Privacy Policy

1. Introduction

Setia Counsel ("we", "us", "our") is committed to protecting the personal data of clients and website visitors. This Privacy Policy explains what data we collect, how we use it, and your rights under the Personal Data Protection Act 2010 (Malaysia) ("PDPA"). Our practice is based at Unit 5-7, Block C, Wisma Setia, Jalan PJU 1/42A, 47301 Petaling Jaya, Selangor.

If you have questions about this policy, contact us at [email protected].

2. Data We Collect

We collect personal data through several channels:

• Contact form submissions: name, email address, phone number, and message content
• Direct communications: email correspondence, telephone calls, and in-person meetings
• Service delivery: documents and information you provide when engaging us for legal services
• Website analytics: anonymised usage data, page visits, and referral sources (if analytics cookies are enabled)

We do not collect special category data (such as health information or political opinions) unless specifically required for a legal matter you have instructed us on.

3. How We Use Your Data

We process personal data for the following purposes:

• Responding to enquiries and providing information about our services
• Delivering legal services under a client engagement agreement
• Maintaining client files and matter records as required by professional obligations
• Complying with Malaysian Bar requirements and applicable legislation
• Improving our website and understanding how it is used (anonymised analytics only)

The legal basis for processing is: consent (for initial enquiries and marketing), contract (for client engagements), and legal obligation (for professional record-keeping requirements).

4. Data Retention

Client matter files are retained for a minimum of seven years following closure of a matter, in line with Malaysian Bar guidance and the Limitation Act 1953. Enquiry data for non-clients is retained for 12 months and then deleted. Analytics data is retained in anonymised form for up to 24 months.

5. Data Sharing

We do not sell personal data. We may share data with:

• Regulatory bodies: where required by law, court order, or professional obligation
• Service providers: secure IT and document management providers operating under data processing agreements
• Opposing parties or tribunals: only where required as part of legal proceedings you have instructed us to conduct

Third-party providers are selected for their security standards and are contractually obligated to process data only for specified purposes.

6. Data Protection Measures

We maintain appropriate technical and organisational measures to protect personal data. These include encrypted file storage, access controls limiting data access to relevant team members, and regular security reviews. In the event of a data breach that may affect your rights, we will notify you and the relevant authorities as required under applicable law.

7. Cookies

Our website uses cookies to ensure basic functionality and, where you have consented, to understand website usage through analytics. For detailed information about cookie usage and how to manage your preferences, see our Cookie Policy.

8. Your Rights Under the PDPA

Under the Personal Data Protection Act 2010, you have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate or incomplete data
• Withdraw consent to processing (where processing is based on consent)
• Request that we cease processing your data for direct marketing
• Be informed of the categories of data held and the purposes for which they are processed

To exercise any of these rights, contact us at [email protected]. We will respond within 21 days. Note that some requests may be limited where professional obligations require us to retain records.

9. Third-Party Links

Our website may contain links to external sites. We are not responsible for the privacy practices of those sites and recommend you review their policies before submitting personal data.

10. Children's Privacy

Our services are directed at adults aged 18 and above. We do not knowingly collect personal data from individuals under 18. If you believe a minor has provided data to us, please contact us so we can arrange for its deletion.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be published on this page with an updated date. Continued use of our website after changes are published constitutes acceptance of the revised policy.

12. Contact

For any privacy-related questions or to exercise your rights, contact us at:
Email: [email protected]
Address: Unit 5-7, Block C, Wisma Setia, Jalan PJU 1/42A, 47301 Petaling Jaya, Selangor, Malaysia