Privacy Policy

1. Who We Are

Naung Sejahtera is a legal practice registered in Malaysia, with chambers at No. 21, Jalan Raja Chulan, 50200 Kuala Lumpur. We provide pension-related legal services to individuals in Malaysia, including consultations, correspondence management, and formal representation. For the purposes of this policy, Naung Sejahtera is the data controller in respect of personal information you provide to us.

If you have any questions about this policy or about how we handle your information, please contact us at [email protected].

2. What Personal Information We Collect

Depending on how you interact with us, we may collect the following categories of personal information:

Information You Provide Directly

• Your full name
• Your email address
• Your telephone number
• The content of any message you send us through our website contact form
• Documents and records you share with us in connection with a legal matter
• Details relating to your pension situation, employment history, or related circumstances

Information Collected Automatically

• Basic website usage data collected through cookies and analytics tools (pages visited, time on site, browser type)
• Your IP address

3. How We Collect Your Information

We collect personal information in the following ways:

• When you complete and submit the contact form on our website
• When you contact us by telephone or email
• When you attend a consultation at our chambers
• When you provide documents or information in connection with a legal matter we are handling
• Automatically, through cookies and website analytics tools when you visit our site

4. Legal Basis for Processing

Under Malaysia's Personal Data Protection Act 2010 (PDPA), we process your personal information on the following bases:

• Consent — where you have submitted information through our contact form or agreed to our use of non-essential cookies
• Contractual necessity — where processing is necessary to deliver the legal services you have engaged us for
• Legitimate interest — where processing is necessary for our business purposes, including responding to enquiries and improving our services, provided these interests do not override your rights
• Legal obligation — where we are required to process or retain information in order to comply with applicable law

5. How We Use Your Information

We use the personal information we collect for the following purposes:

• To respond to enquiries submitted through our website or by telephone or email
• To carry out the pension legal services you have engaged us to provide
• To prepare correspondence, submissions, and other documents in connection with your matter
• To communicate updates and information about your matter
• To comply with our professional obligations as legal practitioners
• To improve the usability and content of our website

We do not use your personal information for unsolicited marketing purposes. We do not sell, rent, or share your personal information with third parties for commercial purposes.

6. Data Sharing

We may share your personal information in the following limited circumstances:

• With relevant authorities and institutions — such as the Employees Provident Fund (EPF), the Public Service Department, or other bodies, where this is necessary to carry out your legal matter and you have authorised us to act on your behalf
• With professional advisers — such as barristers or expert witnesses, where engaged in connection with your matter
• With service providers — such as secure document storage or IT support providers, who are bound by confidentiality obligations and only process data on our instructions
• As required by law — where we are under a legal obligation to disclose information

7. Data Retention

We retain personal information for as long as is necessary for the purposes for which it was collected, and in accordance with our professional obligations. In general:

• Client files and related correspondence are retained for a minimum of seven (7) years following the conclusion of a matter, in accordance with applicable professional practice requirements
• Enquiry information (where no engagement follows) is retained for up to twelve (12) months
• Website analytics data is retained for a period of up to twenty-six (26) months

8. Data Protection Measures

We take reasonable and appropriate steps to protect the personal information we hold from unauthorised access, loss, or disclosure. These measures include:

• Secure storage of physical client files with restricted access
• Password-protected systems and encrypted electronic storage
• Limiting access to personal information to staff who require it for their professional duties
• Staff awareness of confidentiality and data protection obligations

In the event of a data breach that is likely to affect your rights, we will notify you and the relevant authority as required under applicable law.

9. Cookies

Our website uses cookies to support basic functionality and to help us understand how visitors use our site. For full details of the cookies we use and your choices in relation to them, please read our Cookie Policy.

10. Your Rights Under Malaysian Law

Under the Personal Data Protection Act 2010 (Malaysia), you have the following rights in relation to your personal information:

• Right of access — to request a copy of the personal information we hold about you
• Right of correction — to request correction of personal information that is inaccurate or incomplete
• Right to withdraw consent — where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing
• Right to limit processing — to request that we restrict how we use your information in certain circumstances

To exercise any of these rights, please contact us at [email protected]. We will respond within thirty (30) days. We may need to verify your identity before processing your request.

If you believe your personal data has been handled in a manner inconsistent with the PDPA, you may lodge a complaint with the Department of Personal Data Protection Malaysia (JPDP): www.pdp.gov.my.

11. Third-Party Links

Our website may contain links to external websites. These links are provided for your convenience only. We are not responsible for the privacy practices of any third-party websites and encourage you to review their privacy policies before sharing personal information with them.

12. Children's Privacy

Our services are intended for adults aged 18 and over. We do not knowingly collect personal information from individuals under the age of 18. If you believe a minor has provided us with personal information without appropriate consent, please contact us at [email protected] so that we may take appropriate steps.

13. Changes to This Policy

We may update this policy from time to time to reflect changes in our practices or in applicable law. When we make changes, we will update the "Last Updated" date at the top of this page. Continued use of our website or services following any changes constitutes acceptance of the updated policy. We encourage you to review this policy periodically.

14. Contact Us

If you have any questions about this Privacy Policy, or wish to exercise your data rights, please contact us:

• Email: [email protected]
• Address: No. 21, Jalan Raja Chulan, 50200 Kuala Lumpur, Malaysia
• Phone: +60 3-2093 4718