Privacy Policy

1. Introduction

Perisai Amanah ("we", "us", "our") is committed to protecting the personal information of those who contact us or engage our services. This Privacy Policy explains how we collect, use, store, and protect personal data in connection with our pension protection legal services, in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA).

If you have questions about how we handle your personal information, please contact us at [email protected].

2. Data We Collect

We may collect the following categories of personal information:

• Name, email address, and phone number (when you contact us or submit a form)
• Postal address and identification details (when required for legal work)
• Details of your pension matter, including documents you provide
• Correspondence records between us and pension authorities on your behalf
• Technical data from your browser when you visit our website (see Cookies section)

We collect information only when it is necessary for the purpose stated and do not collect sensitive data beyond what is required for your matter.

3. How We Use Your Data

We use your personal information for the following purposes:

• To respond to enquiries and provide the legal services you have requested
• To prepare and send correspondence on your behalf to pension funds and authorities
• To fulfil our obligations under any engagement agreement
• To maintain records as required by our professional obligations under the Legal Profession Act 1976
• To improve our website and service delivery based on usage data

The legal basis for processing your data is primarily the performance of a contract (where you have engaged our services) or your consent (where you have submitted an enquiry without formal engagement).

4. Data Retention

We retain client files for a minimum of seven years following the conclusion of a matter, in line with professional obligations and the limitation period for legal claims under Malaysian law. Website enquiry data not resulting in an engagement is held for no longer than twelve months. Data held for analytics purposes is anonymised within ninety days.

5. Sharing of Personal Data

We do not sell, rent, or trade your personal information. We may share it in the following limited circumstances:

• With pension funds, government ministries, or administrative bodies — only as necessary to act on your behalf, and only with your knowledge
• With our professional indemnity insurer, where required
• With IT service providers who support our systems, under appropriate data processing agreements
• Where required by law, court order, or regulatory authority

6. Data Security

We take reasonable and appropriate steps to protect personal information from unauthorised access, disclosure, or loss. Our measures include secure storage of physical documents, restricted access to client files, password protection and encryption for digital systems, and regular review of our data handling practices. In the event of a data breach that is likely to affect your rights or interests, we will notify you promptly as required under the PDPA.

7. Cookies

Our website uses cookies to understand how visitors use the site and to improve your experience. For full details of the cookies we use, what they do, and how to manage your preferences, please see our Cookie Policy.

8. Your Rights Under the PDPA

Under Malaysia's Personal Data Protection Act 2010, you have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate or incomplete data
• Withdraw consent to the processing of your data (where consent is the basis for processing)
• Request that we stop using your data for direct marketing purposes
• Lodge a complaint with the Personal Data Protection Commissioner of Malaysia

To exercise any of these rights, please contact us at [email protected]. We will respond within a reasonable time and in any case within thirty days.

9. Third-Party Links

Our website may contain links to external resources or third-party websites. We are not responsible for the privacy practices of those sites. We encourage you to review their privacy policies before sharing any personal information.

10. Children's Privacy

Our services are intended for individuals aged eighteen and above. We do not knowingly collect personal information from minors. If you believe a minor has submitted personal data to us, please contact us so we can take appropriate steps.

11. Updates to This Policy

We may update this Privacy Policy from time to time to reflect changes in our services or legal obligations. When we do, we will revise the "Last Updated" date at the top. Continued use of our website or services after an update constitutes acceptance of the revised policy.

12. Contact Information

For any questions or requests relating to this Privacy Policy or our data practices, please contact: