Privacy Policy

Budiman Chambers ("we", "us", "the Firm") is committed to handling personal information with care and in accordance with applicable Malaysian law, including the Personal Data Protection Act 2010 (PDPA). This policy explains what information we collect, why we collect it, how it is used, and what choices you have regarding your personal data.

If you have questions about anything described here, you may write to us at [email protected] or by post to our registered address at 27, Jalan Telawi 3, Bangsar, 59100 Kuala Lumpur.

1. Information We Collect

We collect personal information in the ordinary course of providing legal services and operating this website. The categories of information we may hold include:

• Contact particulars — your name, telephone number, email address, and postal address where provided
• Intake information — details about a consumer matter you have submitted through the Receipt Intake form, including the nature of the transaction, the other party, dates, amounts, and any correspondence you describe
• Communication records — emails, letters, and notes of telephone calls between you and the Firm
• Technical data — your IP address, browser type, and pages visited when using this website, collected through standard server logs
• Cookie data — session and preference data collected in accordance with our Cookie Policy

We do not collect sensitive personal data — such as health records, financial account numbers, or national identification numbers — through this website. Where sensitive data is relevant to legal proceedings, it is handled within a formal retainer and is subject to legal professional privilege.

2. How We Use Your Information

Personal information submitted through this website is used for the following purposes:

• To review and respond to your intake submission or enquiry
• To provide a preliminary written note on the suitability of Tribunal or court proceedings for your matter
• To administer the client relationship if an engagement proceeds
• To comply with obligations under the Legal Profession Act 1976 and related regulations, including record-keeping and anti-money-laundering requirements
• To improve this website through aggregated, anonymised analytics

We do not use personal information for direct marketing without your prior consent, and we do not sell or transfer personal data to third parties for commercial purposes.

3. Legal Basis for Processing

Under the PDPA 2010, processing is permitted where it is necessary to fulfil a contract or take steps at your request prior to entering a contract, where we have a legitimate interest in processing, or where you have provided your consent. The primary basis for our processing is the fulfilment of a legal services engagement or the evaluation of your intake request. Where processing is based on consent, you may withdraw that consent at any time without affecting the lawfulness of processing prior to withdrawal.

4. Disclosure to Third Parties

We may share your information with the following categories of recipients, strictly as required:

• Barristers, advocates, or co-counsel engaged to advise on your matter
• The Tribunal for Consumer Claims, Sessions Court, High Court, or other adjudicatory bodies before which your matter is heard
• Service providers who assist with our IT infrastructure, including hosting and secure email, acting under confidentiality obligations
• Regulatory or law enforcement bodies where disclosure is required by law

Any sharing of information with co-counsel or adjudicatory bodies is done within the context of legal professional obligations and is not a disclosure for commercial purposes.

5. Retention of Information

We retain personal information for as long as is necessary for the purposes described in this policy and to comply with our legal and regulatory obligations. For matters that proceed to a formal engagement, records are generally retained for a period of not less than seven years from the conclusion of the matter, in line with applicable limitation periods. Intake submissions that do not proceed to an engagement are retained for a period of twelve months.

6. Your Rights

Under the PDPA 2010 and applicable data protection principles, you have the right to:

• Request access to the personal data we hold about you
• Request correction of inaccurate or incomplete data
• Withdraw consent where processing is based on consent
• Request, in appropriate circumstances, that we cease processing your data

Requests should be made in writing to [email protected]. We will respond within a reasonable period and in accordance with our obligations under the PDPA 2010. We may need to verify your identity before processing a request.

7. Data Security

We maintain reasonable technical and organisational measures to protect personal information against unauthorised access, loss, or disclosure. These include secure HTTPS transmission for this website, access controls for internal systems, and staff procedures governing the handling of client information. No transmission over the internet can be warranted as entirely secure, and we encourage you to exercise care when sharing sensitive details through any electronic channel.

8. Cookies

This website uses cookies to support its operation and to understand how visitors use the site. Details of the cookies we use, their purpose, and how to manage them are set out in our Cookie Policy.

9. Links to Other Websites

This website may contain links to external resources, including Tribunal forms, court filing portals, or regulatory guidance. We are not responsible for the privacy practices or content of external websites and encourage you to read their respective privacy notices.

10. Changes to This Policy

We may update this policy from time to time to reflect changes in our practices or applicable law. Where changes are material, we will update the effective date at the top of this page. Continued use of this website after a revision constitutes acknowledgement of the updated terms.

11. Contact Us

For any privacy-related enquiries, requests, or complaints, please contact us: