Privacy Policy
Tegas Advocates · Last updated: 1 April 2025
This Privacy Policy describes how Tegas Advocates ("we", "us", "our") collects, processes, and protects personal data in connection with our civil litigation and legal services practice. It applies to visitors to our website at tegasadv.info, prospective clients who submit enquiries, and clients whose matters we handle.
We operate under and in compliance with the Personal Data Protection Act 2010 (Malaysia) ("PDPA"). By using our website or engaging our services, you acknowledge that you have read and understood this Policy.
1. Data Controller
The data controller responsible for your personal data is:
Tegas Advocates
Level 9, Plaza Perangsang, Persiaran Perbandaran
40000 Shah Alam, Selangor, Malaysia
Telephone: +60 3 5514 8267
Email: [email protected]
2. Personal Data We Collect
2.1 Information You Provide Directly
When you submit an enquiry through our contact form or communicate with us by telephone or email, we may collect:
- Your name and contact details (email address, telephone number)
- Your company or organisation name, where applicable
- A description of the matter or dispute you are seeking advice on
- Any documents, correspondence, or information you voluntarily share with us
2.2 Information Collected Automatically
When you visit our website, we or our service providers may collect certain technical data, including:
- Your IP address and approximate geographic location
- Browser type, version, and operating system
- Pages visited, time of visit, and referring URL
- Cookie identifiers, where you have consented to their use
This data is used for website analytics and to improve the performance and usability of our site. It is not used to build individual profiles for marketing purposes.
3. How We Use Your Personal Data
We use your personal data for the following purposes:
- Responding to enquiries — to assess whether we are able to assist with your matter and to communicate our response
- Conflict of interest checking — before accepting any new engagement, we conduct a conflict check. Your name and the names of relevant parties may be used for this purpose
- Providing legal services — if you engage us, your personal data forms part of the matter file and is used in the course of acting on your behalf
- Compliance with legal and professional obligations — including obligations under the Legal Profession Act 1976, the Bar Council's guidelines, and applicable anti-money laundering regulations
- Website analytics — to understand how visitors use our site and to improve it
We do not use your personal data for unsolicited marketing, and we do not sell or rent your data to third parties.
4. Legal Basis for Processing
We process your personal data on the following grounds:
- Your consent — where you have submitted a contact form or agreed to the use of cookies
- Performance of a contract or pre-contractual steps — where you are an existing or prospective client
- Compliance with a legal obligation — where we are required to process data by law or professional regulation
- Legitimate interests — for the purposes of conflict checking and maintaining records of our professional engagements
5. Legal Professional Privilege
Communications between a client and their advocate, and documents prepared in connection with actual or contemplated litigation, may be protected by legal professional privilege under Malaysian law. This privilege belongs to the client and may not be waived except by the client. Where applicable, privileged material is handled and stored in a manner that preserves that protection.
6. Disclosure to Third Parties
We may share personal data with:
- Opposing parties and their representatives — where this is required in the ordinary conduct of litigation, arbitration, or mediation
- Courts, tribunals, and arbitral bodies — as required by proceedings
- Expert witnesses, barristers, and professional consultants — retained in connection with your matter
- Regulatory bodies — including the Malaysian Bar Council, where reporting obligations apply
- IT and hosting service providers — who process data on our behalf under appropriate confidentiality terms
We do not share personal data with third parties for their own marketing or commercial purposes.
7. Data Retention
We retain personal data for as long as is necessary for the purposes for which it was collected, and in accordance with our professional obligations. As a general guide:
- Matter files are retained for a minimum of seven years from the close of the matter, in accordance with standard legal practice and the applicable limitation periods under the Limitation Act 1953
- Enquiries that did not result in an engagement are retained for a period of twelve months, after which they are securely deleted
- Website analytics data is retained in aggregated, anonymised form only
Where we are required by law or regulation to retain data for a longer period, we will do so.
8. Your Rights Under the PDPA
Subject to the provisions of the Personal Data Protection Act 2010, you have the right to:
- Access your personal data that we hold
- Correct inaccurate or incomplete personal data
- Withdraw consent to the processing of your personal data, where processing is based on consent (this will not affect the lawfulness of processing before withdrawal)
- Object to the processing of your personal data in certain circumstances
To exercise any of these rights, please contact us in writing at [email protected] or by post to the address above. We will respond within a reasonable timeframe and in accordance with our obligations under the PDPA.
Please note that certain rights may be limited where the data is subject to legal professional privilege, or where retention is required by law.
9. Cookies
Our website uses cookies. For detailed information on the types of cookies used, their purpose, and how you can manage your preferences, please refer to our Cookie Policy.
10. Data Security
We take reasonable technical and organisational measures to protect personal data against unauthorised access, loss, or destruction. These measures include secure email practices, access controls on matter management systems, and regular review of our data handling procedures. No method of electronic transmission is entirely secure, and we cannot guarantee absolute security; however, we treat data security as an ongoing professional obligation.
11. Cross-Border Transfers
We do not routinely transfer personal data outside of Malaysia. Where such a transfer is necessary (for example, in international arbitration proceedings), we will ensure that appropriate safeguards are in place in accordance with the PDPA and applicable guidelines.
12. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or in applicable law. The date at the top of this page indicates when the Policy was last reviewed. Continued use of our website or services after any update constitutes acceptance of the revised Policy.
13. Contact Us
If you have any questions about this Privacy Policy or about how we handle your personal data, please contact us at:
Tegas Advocates
Level 9, Plaza Perangsang, Persiaran Perbandaran
40000 Shah Alam, Selangor, Malaysia
Telephone: +60 3 5514 8267
Email: [email protected]
Office hours: Monday–Friday 9am–6pm, Saturday 9am–1pm
This Privacy Policy should be read together with our Terms & Conditions and Cookie Policy. None of the above constitutes legal advice. If you require advice on data protection compliance, please consult a qualified practitioner.