Privacy Policy

1. Who We Are

Sirih Adil is a legal firm registered in Malaysia, providing pension protection legal services from our office at Wisma Permata, Jalan Tun Perak, 50050 Kuala Lumpur. For data-related enquiries, contact us at privacy@sirihadi.

2. Information We Collect

Information you provide directly

When you contact us, use our website form, or engage our services, we may collect:

• Full name and identification details (MyKad number where required for legal work)
• Contact details: telephone number, email address, postal address
• Pension and employment records you share with us in connection with a matter
• EPF account details and nomination information where relevant
• Health-related preferences shared in connection with the Legacy File service
• Family member details where provided as part of a matter

Information collected automatically

Our website may collect basic usage data through cookies, including pages visited, browser type, and approximate location. This information is used only to improve the site's function. See our Cookie Policy for detail.

3. How We Use Your Information

We use personal information for the following purposes:

• To provide the legal services you have engaged us for
• To communicate with you about your matter and respond to enquiries
• To correspond with government bodies (JPA, EPF) on your behalf, with your consent
• To prepare and maintain your Legacy File where that service is engaged
• To fulfil our professional and legal obligations under Malaysian law
• To improve our website and service delivery

Legal basis for processing: We process personal data on the basis of contractual necessity (to deliver the service you have requested), legal obligation (compliance with Malaysian professional and regulatory requirements), and consent where explicitly obtained.

4. How Long We Keep Your Information

Legal matter files are retained for a minimum of seven years after the matter is closed, as required by professional standards. Legacy Files are retained for the period agreed with the client (typically for the client's lifetime or until instructed otherwise). Website enquiry data not resulting in an engagement is held for no longer than twelve months.

5. Who We Share Information With

We do not sell, rent, or share personal data with third parties for marketing purposes. We may share information in the following limited circumstances:

• Government bodies: JPA, EPF, or other government agencies, only when required to conduct your matter and with your prior consent
• Other legal professionals: If coordinating with your solicitor on will-related matters as part of the Legacy File service, and only with your explicit consent
• Regulatory authorities: If required by law or a court order
• IT service providers: Where necessary for secure document management, under strict confidentiality agreements

6. Data Protection Measures

We apply the following measures to protect personal information:

• Physical client files are stored in locked storage accessible only to authorised staff
• Digital records are held on access-controlled systems
• Email communications containing sensitive information are sent securely where possible
• Staff are trained on confidentiality obligations as part of their engagement with the firm
• In the event of a data breach, we will notify affected individuals and relevant authorities in accordance with our legal obligations

7. Cookies

We use a small number of cookies on our website to understand how visitors use it. Essential cookies are necessary for the site to function; optional analytics and preference cookies require your consent. Full details are in our Cookie Policy.

8. Your Rights Under Malaysian Law

Under the Personal Data Protection Act 2010, you have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate or incomplete data
• Withdraw consent to processing (where consent is the legal basis) — noting this may affect our ability to continue providing the service
• Enquire about what personal data is held and how it is used

To exercise any of these rights, please write to us at privacy@sirihadi. We will respond within 21 days.

9. Third-Party Links

Our website may contain links to external sites (for example, JPA or EPF). We are not responsible for the privacy practices of those sites and encourage you to read their policies separately.

10. Children's Privacy

Our services are directed at adults aged 18 and over. We do not knowingly collect personal data from individuals under 18. Where a family member is acting on behalf of an elderly client, we handle their data with the same care as the primary client's.

11. Changes to This Policy

We may update this policy from time to time. When we do, we will update the date at the top of this page. Continued use of our services after any change constitutes acceptance of the updated policy. We encourage you to review this page periodically.

12. Contact Us

For any questions about this policy or your personal data:

• Email: privacy@sirihadi
• Post: Sirih Adil, Wisma Permata, Jalan Tun Perak, 50050 Kuala Lumpur, Malaysia

If you believe your data has been handled in a way that does not comply with the PDPA, you may also lodge a complaint with the Department of Personal Data Protection Malaysia (JPDP).