Privacy Policy | Mesra Guaman

1. Introduction

Mesra Guaman ("we", "us", "our") is committed to protecting the personal information of everyone who contacts or engages with our practice. This Privacy Policy describes how we collect, use, disclose, and safeguard your personal data in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA) and other applicable laws.

If you have questions about this policy, please contact us at [email protected].

2. Data We Collect

We may collect the following personal data:

Name, email address, and telephone number (provided via our contact form or by direct contact)
Details of your legal matter, as shared during consultations or correspondence
Correspondence records (emails, letters, notes from meetings)
Website usage data collected through cookies and analytics tools (see Section 5)

We collect personal data only when you provide it voluntarily — for example, by completing our contact form, calling our office, or engaging our services.

3. Legal Basis for Processing

We process your personal data on the following legal grounds:

Consent — where you have given explicit consent, such as when submitting our contact form
Contract — where processing is necessary to provide the legal services you have requested
Legitimate interests — for administrative, security, and service improvement purposes, where these do not override your rights
Legal obligation — where we are required to retain or disclose data under Malaysian law or court order

4. How We Use Your Data

To respond to your enquiries and arrange consultations
To provide legal services and fulfil our obligations to you as a client
To maintain records of correspondence and client matters
To improve our website and services through aggregated, anonymised analytics
To comply with legal and regulatory obligations

We do not sell, rent, or share your personal data with third parties for marketing purposes.

5. Cookies and Website Data

Our website uses cookies to help it function and to understand how visitors use it. You can manage your cookie preferences at any time via our Cookie Policy page. Essential cookies are always active; optional analytics and preference cookies require your consent.

6. Data Sharing

We may share your personal data with:

Other parties involved in your legal matter, where necessary and with your knowledge
Courts, government bodies, or regulatory authorities where legally required
Professional advisers (e.g. barristers or expert witnesses) engaged in connection with your matter
Our IT and hosting service providers, under confidentiality obligations

We do not transfer personal data outside of Malaysia except where required by law or with your explicit consent.

7. Data Retention

We retain client files and related correspondence for a minimum of seven years following the conclusion of a matter, in line with professional obligations and the Limitation Act 1953 (Malaysia). Contact enquiries that do not lead to an engagement are retained for up to twelve months. Website analytics data is aggregated and anonymised after 26 months.

8. Data Security

We apply appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These include encrypted email communication, restricted access to client files, and secure server hosting. In the event of a data breach affecting your rights, we will notify affected individuals in accordance with applicable law.

9. Your Rights

Under the Personal Data Protection Act 2010 (Malaysia), you have the right to:

Access the personal data we hold about you
Request correction of inaccurate or incomplete data
Withdraw consent for processing (where consent is the legal basis)
Object to processing for direct marketing purposes
Request that we limit how we use your data in certain circumstances

To exercise any of these rights, please contact us at [email protected]. We will respond within 21 days.

10. Legal Professional Privilege

Communications between you and Mesra Guaman in the context of legal advice are protected by legal professional privilege under Malaysian law. We will not disclose privileged communications except in limited circumstances recognised by law.

11. Third-Party Links

Our website may contain links to external websites. We are not responsible for the privacy practices of those sites and encourage you to review their policies before providing any personal information.

12. Children's Privacy

Our services are directed at adults. We do not knowingly collect personal data from individuals under 18 years of age without the consent of a parent or guardian.

13. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be published on this page with an updated effective date. Continued use of our website or services following such changes constitutes acceptance of the updated policy.

14. Contact

For any questions, requests, or concerns about this Privacy Policy or our data practices, please contact:

Mesra Guaman
Jalan Imbi 72, 55100 Kuala Lumpur, Malaysia
Email: [email protected]
Phone: +60 3-2148 6073