Privacy Policy

Bicara Waris ("we", "us", or "the firm") is an inheritance law practice operating from 35, Lebuh Carnarvon, 10100 George Town, Penang, Malaysia. We are committed to handling any personal information you share with us with appropriate care and discretion.

This Privacy Policy describes the categories of personal data we collect, the purposes for which we use it, how long we retain it, and the rights you hold in relation to it. It applies to information collected through this website, as well as through our client engagement process.

By using this website or engaging our services, you acknowledge that you have read and understood this policy. If you have any questions about how we handle personal data, you are welcome to write to us at [email protected].

We collect personal information in the following ways:

We do not purchase personal data from third parties, and we do not collect sensitive categories of personal data (such as health information or financial account details) through this website.

We use personal information only for the purposes set out below, and only on a lawful basis:

We will never sell your personal information to third parties or use it for purposes unrelated to the service you have enquired about or engaged.

We do not share your personal information with third parties except in the following circumstances:

• ✦Professional correspondents: In matters involving foreign assets or cross-jurisdictional estates, we may share limited information with overseas legal counsel or official bodies, strictly as required to carry out the service you have instructed us on.
• ✦Regulatory and legal obligations: We may disclose information where required by Malaysian law, a court order, or an applicable professional regulatory body.
• ✦Service providers: We engage a small number of trusted technical providers (such as website hosting and analytics) who process data on our behalf under appropriate data processing agreements.

Any third party with whom we share your data is required to handle it with the same level of care and to use it only for the stated purpose.

We retain personal data only for as long as necessary for the purposes for which it was collected, or as required by applicable law:

• ✦Enquiry data: Information submitted through the contact form but not followed by a client engagement is retained for up to 12 months, then securely deleted.
• ✦Client matter files: Records related to a completed legal engagement are retained for a minimum of 7 years from matter closure, in accordance with Malaysian legal professional requirements.
• ✦Website analytics data: Aggregated, anonymised traffic data is retained for up to 26 months.

When personal data is no longer required, it is securely deleted or anonymised.

We take the security of personal information seriously and maintain appropriate technical and organisational measures to protect against unauthorised access, disclosure, or loss. These measures include:

• ✦Encrypted transmission of data via HTTPS across all web communications
• ✦Access controls limiting personal data access to staff with a legitimate professional need
• ✦Secure storage systems with regular backups held on protected servers
• ✦Periodic review of our data handling practices and security arrangements

In the event of a data breach that may affect your rights, we will notify you and any relevant regulatory authority without undue delay, in accordance with applicable law.

This website uses cookies — small text files placed on your device — to support basic functionality and to help us understand how visitors use the site. We use the following categories:

• ✦Necessary cookies: Required for the website to function correctly. These cannot be disabled.
• ✦Analytics cookies: Help us understand which pages are visited most and how visitors navigate the site. Used only with your consent.
• ✦Preference cookies: Remember choices you have made (such as cookie consent) to avoid repeating the request on subsequent visits.

For full details about the cookies we use and how to manage your preferences, please read our Cookie Policy.

Under the Personal Data Protection Act 2010 (Malaysia) and, where applicable, other data protection legislation, you hold the following rights in relation to your personal data:

• ✦Right of access: You may request a copy of the personal data we hold about you.
• ✦Right to rectification: You may ask us to correct any information that is inaccurate or incomplete.
• ✦Right to erasure: You may request deletion of your personal data where there is no longer a lawful basis for us to hold it, subject to our legal retention obligations.
• ✦Right to object: You may object to processing carried out on the basis of legitimate interest.
• ✦Right to restrict processing: You may ask us to limit how we use your data in certain circumstances.
• ✦Right to withdraw consent: Where processing is based on consent, you may withdraw it at any time without affecting prior processing.
• ✦Right to lodge a complaint: If you are dissatisfied with how we have handled your data, you may raise a concern with the Department of Personal Data Protection Malaysia (pdp.gov.my).

To exercise any of these rights, please contact us at [email protected]. We will respond within 21 days of receipt of a valid request.

This website may contain links to external websites for your reference or convenience. We are not responsible for the privacy practices of any external site, and this policy does not apply to those sites. We encourage you to review the privacy notices of any external websites you visit.

Our services are intended for adults aged 18 and above. We do not knowingly collect personal data from individuals under the age of 18. If you believe a minor has submitted personal information to us through this website, please contact us promptly so that we may take appropriate steps to remove it.

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or applicable law. When we do, we will revise the "Last Updated" date at the top of this page. We encourage you to review this policy periodically. Where changes are significant, we will take reasonable steps to bring them to your attention.