Legal
Privacy Policy
At Budi Guaman, we treat your personal information with the same discretion we bring to every family matter. This policy explains what we collect, why we collect it, and how we protect it.
Last updated: 14 June 2025 · Effective date: 14 June 2025
1. Introduction
Budi Guaman ("we", "our", or "the firm") is a family law practice based at Persiaran KLCC 7, 50088 Kuala Lumpur, Malaysia. We are committed to handling your personal data responsibly and in keeping with our obligations under the Personal Data Protection Act 2010 (PDPA) of Malaysia.
This Privacy Policy describes how we process personal data when you use our website, submit an enquiry, or engage with our services. If you have questions about this policy or about how your data is handled, please contact us at [email protected].
2. Data We Collect
We collect personal data only when there is a clear purpose for doing so. The categories of data we may collect include:
- Identity information: your name and, where relevant, the names of other parties to a family matter.
- Contact information: email address, telephone number, and postal address.
- Enquiry content: the nature of your family matter, as described in your message to us.
- Technical data: IP address, browser type, device type, and pages visited, collected automatically when you browse our website.
- Cookie data: preference records stored in your browser. See Section 5 for details.
Legal basis for processing: we rely on your consent (for communications and cookies), legitimate interest (for website analytics and security), and, where you become a client, the performance of a legal services contract.
Retention periods: enquiry records are retained for up to 12 months. Client matter files are retained for seven years after the matter closes, in line with professional obligations. Technical and analytics data is retained for no more than 26 months.
3. How We Use Your Data
We use personal data only for the purposes for which it was collected:
- To respond to your enquiry and explain the options available to you.
- To provide legal representation and related services when you engage the firm.
- To send administrative updates about your matter (by email or phone).
- To understand how visitors use our website so we can improve it.
- To comply with legal and professional obligations.
We do not sell, rent, or trade your personal data with third parties for marketing purposes. We may share data with trusted service providers (such as hosting and analytics providers) who process data on our behalf and are bound by confidentiality obligations. We may also disclose data when required by law or court order.
4. Data Protection Measures
We take reasonable technical and organisational steps to keep your personal data safe:
- Our website is served over HTTPS with TLS encryption.
- Access to client information is limited to personnel who need it to carry out their work.
- Electronic records are stored on password-protected systems with regular access reviews.
- In the event of a data breach that poses a significant risk to your rights, we will notify you and the relevant authority without undue delay.
While no system is entirely without risk, we are committed to reviewing and improving our safeguards on an ongoing basis.
6. Your Rights
Under the Personal Data Protection Act 2010 and applicable Malaysian law, you have the following rights regarding your personal data:
Right of Access
Request a copy of the personal data we hold about you.
Right to Correct
Ask us to correct inaccurate or incomplete data.
Right to Withdraw Consent
Withdraw marketing or cookie consent at any time, without affecting processing carried out before withdrawal.
Right to Limit Processing
Ask us to restrict use of your data in certain circumstances.
Right to Complain
Lodge a complaint with the Department of Personal Data Protection Malaysia (JPDP).
Right to Erasure
Request deletion of your data, subject to our legal retention obligations.
To exercise any of these rights, write to us at [email protected]. We will respond within 21 days.
7. Third-Party Links
Our website may contain links to external websites — for example, government resources or court portals. Once you leave our site, this policy no longer applies. We are not responsible for the privacy practices of those sites and encourage you to review their policies before sharing any personal information.
8. Children's Privacy
Our website and services are intended for adults (18 years and above). We do not knowingly collect personal data from individuals under 18. If you believe a minor's data has been submitted to us in error, please contact us immediately at [email protected] and we will take steps to delete it promptly.
9. Policy Updates
We may update this policy from time to time to reflect changes in our practices or in applicable law. When we do, we will revise the "Last updated" date at the top of this page. For significant changes, we will display a notice on our homepage. Continued use of our website after any change constitutes acceptance of the updated policy.
10. Contact Us About This Policy
If you have any questions about this Privacy Policy, or if you wish to exercise your data rights, please reach out: