Privacy Policy

1. Scope of This Policy

This Policy applies to personal data collected through our website at budiipartnao.top, via email correspondence, telephone enquiries, and in the course of providing legal services. It does not apply to third-party websites that may be linked from our site.

2. Personal Data We Collect

We may collect the following categories of personal data:

• Identification data: full name, designation, company name
• Contact data: email address, telephone number, postal address
• Enquiry data: nature of dispute or matter, preferred contact method, message content submitted via forms
• Technical data: IP address, browser type and version, pages visited, time and date of access (collected via cookies and server logs)
• Communication data: records of email and written correspondence with our firm

We do not knowingly collect personal data from individuals under 18 years of age.

3. Legal Basis for Processing

Under the PDPA 2010, we process personal data on the following grounds:

• Consent: where you have explicitly agreed to the processing, including by submitting an enquiry form
• Contract performance: where processing is necessary to fulfil obligations under a retainer or service engagement
• Legitimate interests: where we have a legitimate professional interest, such as maintaining accurate records of client communications
• Legal obligation: where processing is required by Malaysian law or applicable professional regulations

4. How We Use Your Personal Data

Personal data collected is used solely for the following purposes:

• Responding to enquiries and providing information about our services
• Administering client retainers and delivering legal services
• Maintaining records as required by Malaysian Bar Council professional standards
• Improving the functionality and content of our website
• Sending service-related communications (not marketing) where you have engaged our firm
• Complying with applicable laws, court orders, or regulatory requirements

We do not sell, rent, or trade your personal data to third parties for their own marketing purposes.

5. Data Retention

We retain personal data for the following periods:

• Enquiry data (no retainer formed): 12 months from date of enquiry
• Client matter files: 7 years from conclusion of the matter, as required by professional standards
• Website technical data: up to 26 months, consistent with standard analytics retention
• Financial records: 7 years from the relevant financial year, per Malaysian statutory requirements

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised.

6. Sharing of Personal Data

We may share personal data with the following categories of recipients where necessary:

• Co-counsel and arbitral institutions: where required in the course of dispute proceedings (e.g., AIAC, SIAC, ICC)
• Technology service providers: including secure cloud storage and website hosting providers operating under data processing agreements
• Regulatory and judicial bodies: where disclosure is required by law or professional regulation

All third parties with whom we share personal data are required to handle it in accordance with applicable data protection requirements.

7. Data Security

We implement appropriate technical and organisational measures to protect personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• Encrypted transmission (HTTPS/TLS) for all data submitted through the website
• Access controls limiting data access to authorised personnel only
• Regular security reviews of our digital infrastructure
• Secure physical storage of paper files within our Kuala Lumpur premises

In the event of a data breach that is likely to result in risk to the rights and freedoms of individuals, we will take steps to notify affected parties in accordance with applicable requirements.

8. Cookies

Our website uses cookies to improve functionality and understand usage patterns. Essential cookies are necessary for the site to operate. Optional analytics and preference cookies are only placed with your consent. For full details, please refer to our Cookie Policy.

9. Your Rights Under the PDPA

As a data subject under Malaysian law, you have the right to:

• Access the personal data we hold about you
• Correct inaccurate or incomplete personal data
• Withdraw consent to data processing at any time, where consent is the legal basis
• Request restriction of processing in certain circumstances
• Lodge a complaint with the Personal Data Protection Department of Malaysia (JPDP)

To exercise any of these rights, please contact our data protection contact using the details below. We will respond within 21 days of receiving a verified request.

10. Third-Party Links

Our website may contain links to external websites operated by third parties. We are not responsible for the privacy practices of those sites. We encourage you to review the privacy policies of any external sites you visit.

11. Minors

Our services are directed at commercial entities and individuals of 18 years and above. We do not knowingly collect personal data from persons under 18. If we become aware that personal data of a minor has been collected, it will be deleted promptly.

12. Changes to This Policy

We may update this Policy from time to time to reflect changes in our practices or applicable law. The revised Policy will be published on this page with an updated effective date. Continued use of our website following publication of changes constitutes acceptance of the updated Policy.

13. Contact for Data Enquiries

For questions about this Policy or to exercise your data rights, please contact: