Privacy Policy

1. Introduction

Waris Seri ("we", "us", "our") is committed to protecting the personal information of everyone who contacts or engages with our family legal practice. This Privacy Policy explains what personal data we collect, how we use it, and the rights you hold in relation to that data.

This policy applies to information collected through our website at waisano.club, through our enquiry forms, and through direct communications with our office. It does not cover third-party websites that may be linked from our pages.

Questions about this policy may be directed to: [email protected]

2. Personal Data We Collect

We collect the following categories of personal information:

• Identity data: full name, as provided in contact forms or communications
• Contact data: email address, telephone number, postal address
• Enquiry data: information you share in your message or consultation about your legal situation
• Technical data: IP address, browser type, pages visited, and session duration (collected via cookies and analytics tools)
• Communication data: records of correspondence, including emails and call notes

We do not collect sensitive categories of personal data (such as health or financial data) beyond what you voluntarily share in the context of seeking legal advice, and such information is protected by legal professional privilege.

3. How We Collect Data

• Directly from you via our website contact form or email enquiry
• During telephone calls or in-person consultations
• Automatically through cookies and analytics tools when you browse our website

4. Legal Basis for Processing

We process your personal data under the following legal bases, in accordance with the Personal Data Protection Act 2010 (PDPA) of Malaysia:

• Consent: for marketing communications and optional cookies (where applicable)
• Contractual necessity: to provide legal services you have engaged us for
• Legitimate interests: to respond to enquiries, manage our practice, and improve our services
• Legal obligation: where required by Malaysian law or professional regulation

5. How We Use Your Data

• To respond to your enquiries and arrange consultations
• To provide the legal services you have engaged us for
• To communicate updates relating to your matter
• To maintain client and matter records as required by professional obligations
• To improve our website and understand how visitors use it
• To comply with legal and regulatory obligations

6. Data Retention

Personal data relating to client matters is retained for a minimum of seven (7) years following the conclusion of the matter, in line with standard professional practice and regulatory requirements in Malaysia.

Website enquiries that do not progress to a formal engagement are retained for twelve (12) months. Technical and analytics data is typically retained for twenty-four (24) months.

7. Data Sharing

We do not sell or rent your personal data. We may share information with:

• Courts, tribunals, and regulatory authorities where required in connection with your matter
• Opposing counsel or other parties directly relevant to your matter, with your knowledge
• Third-party service providers (such as website hosting and analytics) under strict data processing agreements

Where data is shared with third-party processors, we ensure appropriate safeguards are in place consistent with PDPA requirements.

8. Cookies

Our website uses cookies to understand visitor behaviour and improve the user experience. You can manage your cookie preferences at any time through our Cookie Policy page or via your browser settings.

9. Your Rights

Under the Personal Data Protection Act 2010 and applicable principles, you have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate or incomplete data
• Withdraw consent for processing where consent is the legal basis
• Request erasure of data, subject to our legal retention obligations
• Object to processing based on legitimate interests
• Lodge a complaint with the relevant supervisory authority in Malaysia

To exercise any of these rights, contact us at [email protected]. We will respond within thirty (30) days.

10. Data Security

We maintain appropriate technical and organisational security measures to protect personal data against unauthorised access, loss, or disclosure. Physical client files are stored securely, and digital records are held on access-controlled systems. In the event of a data breach likely to affect your rights, we will notify you and the relevant authority as required by law.

11. Children

Our services are intended for adults aged 18 and above. We do not knowingly collect personal data from individuals under 18 without parental or guardian consent.

12. Third-Party Links

Our website may contain links to external sites. We are not responsible for the privacy practices of those sites and encourage you to review their policies independently.

13. Changes to This Policy

We may update this Privacy Policy from time to time. The current version will always be available on this page, with the "Last Updated" date clearly noted at the top. Continued use of our website following an update constitutes acceptance of the revised policy.

14. Contact

For any questions about how we handle your personal data:

• Email: [email protected]
• Post: Waris Seri, Jalan Kia Peng 19, 50450 Kuala Lumpur, Malaysia