Privacy Policy

1. Introduction

Damai ("we", "us", "our") is committed to protecting the personal data of all individuals who engage with our practice. This Privacy Policy explains what data we collect, how we use it, who we share it with, and your rights under the Personal Data Protection Act 2010 (PDPA) of Malaysia.

This policy applies to clients, prospective clients, and visitors to our website at https://damaim.blog. For questions about this policy, contact us at [email protected].

2. What Personal Data We Collect

We collect personal data in the following ways:

• Information you provide via our website contact form (name, email, phone, message)
• Information provided during consultations (case details, family circumstances, financial information where relevant)
• Correspondence by email, phone, or post
• Cookies and website analytics data (see Section 5)

We collect only the personal data necessary for the purposes described in this policy. We do not collect sensitive categories of data beyond what is strictly required for legal service delivery.

3. How We Use Your Personal Data

We use your personal data to:

• Respond to enquiries and provide legal services
• Maintain records of legal matters as required by professional obligations
• Send service-related communications (case updates, appointment confirmations)
• Comply with legal and regulatory obligations
• Improve our website through anonymised analytics

The legal basis for processing is: consent (for contact form submissions), contract (for active client relationships), legal obligation (for record-keeping requirements under Malaysian Bar rules), and legitimate interest (for website analytics).

4. How We Share Your Data

We do not sell or rent personal data to third parties. We may share data with:

• Courts and regulatory bodies where required by law or your legal matter
• Opposing counsel or mediators where your instructions require it
• Our technology service providers (website hosting, email) under strict data processing agreements
• Google Analytics, used in anonymised form to understand website usage

All data sharing is governed by confidentiality obligations and, where applicable, legal professional privilege.

5. Cookies

We use cookies to operate the website and, with your consent, to analyse usage patterns. You may manage cookie preferences via the cookie banner on our homepage or on the Cookie Policy page. Essential cookies cannot be disabled as they are needed for the website to function.

6. Data Retention

Client file data is retained for a minimum of seven years following conclusion of a matter, in accordance with Malaysian Bar practice directions. Contact form enquiries that do not result in a client relationship are deleted within 12 months. Website analytics data is retained in aggregated, anonymised form.

7. Data Protection Measures

• Client files stored on password-protected systems with restricted access
• Electronic communications protected by standard encryption
• Physical documents stored in locked cabinets within our office premises
• Staff trained on data handling and confidentiality obligations
• Access to client data limited to practitioners assigned to the matter

In the event of a data breach affecting your personal data, we will notify you and the relevant authority within the timeframes required under the PDPA.

8. Your Rights Under the PDPA

Under the Personal Data Protection Act 2010, you have the right to:

• Access the personal data we hold about you
• Correct inaccurate or incomplete data
• Withdraw consent for processing based on consent (this does not affect data processed on other legal bases)
• Prevent processing for direct marketing purposes
• Lodge a complaint with the Department of Personal Data Protection (JPDP) if you believe your rights have been violated

To exercise any of these rights, write to us at [email protected]. We will respond within 21 days.

9. Third-Party Links

Our website may contain links to external sites. We are not responsible for the privacy practices of those sites and encourage you to review their policies before providing any personal information.

10. Children's Privacy

Our services are provided to adults aged 18 and over. We do not knowingly collect personal data from individuals under 18 without the involvement of a parent or guardian. In family matters, information concerning children is handled with heightened care and used only for the direct purpose of the legal matter.

11. Changes to This Policy

We may update this policy from time to time. Changes will be posted on this page with a revised effective date. Continued use of our website following any update constitutes acceptance of the revised policy.

12. Contact

Data controller: Damai
Address: Suite 3-9, Menara Landmark, Jalan Tun Razak, 50400 Kuala Lumpur
Email: [email protected]
Phone: +60 10-857 3621