Legal

Privacy Policy

Last Updated: 12 May 2025 | Effective: 12 May 2025

Pelindung is committed to handling your personal information with care and discretion. This policy explains what information we collect, how we use it, and the rights you have under Malaysia's Personal Data Protection Act 2010 (PDPA). If you have questions, please contact us at [email protected].

1. Data Controller

The data controller for your personal information is:

Pelindung Legal Services
Level 11, Menara Northam, Jalan Sultan Ahmad Shah, 10050 George Town, Penang, Malaysia
Email: [email protected]
Phone: +60 4-227 6918

2. What Personal Data We Collect

We collect personal data when you use our website contact form, send us an email, or engage our services. The categories of personal data we may hold include:

Full name
Email address
Telephone number
Postal address (where provided)
MyKad number or identification number (only when required for a service engagement)
Employment or pension details shared during a case review
IP address and browser information collected via cookies and web analytics

We collect only the information that is necessary for the stated purpose. We do not collect sensitive personal data beyond what is directly relevant to the pension or EPF matter at hand.

3. Legal Basis for Processing

Under the Personal Data Protection Act 2010, we process your personal data on the following bases:

Consent — when you submit an enquiry form or agree to receive communications
Contract performance — when you engage us for a service and data processing is necessary to fulfil that engagement
Legitimate interest — for internal record-keeping, quality improvement, and security purposes, where these interests do not override your rights
Legal obligation — where we are required to retain or disclose records by Malaysian law

4. How We Use Your Personal Data

Your personal data may be used for the following purposes:

Responding to your enquiries and providing the services you have requested
Managing your case file, including correspondence with EPF offices or pension authorities on your behalf
Sending you written progress updates related to your engagement
Maintaining internal records and service quality
Complying with legal or regulatory requirements
Improving our website and understanding how visitors use it

We do not use your personal data for automated decision-making or profiling. We do not sell your personal data to third parties.

5. Data Sharing

We share your personal data only in the following circumstances:

Government and statutory bodies — such as the Employees Provident Fund (KWSP), Kumpulan Wang Persaraan (KWAP), or other pension authorities, where this is necessary to carry out the service you have engaged us for and with your knowledge
Professional advisers — legal counsel, accountants, or consultants instructed to assist with your matter, under confidentiality obligations
Analytics providers — aggregated, anonymised data may be processed by website analytics services
Legal requirement — where we are required to disclose information by Malaysian law or court order

6. Data Retention

We retain personal data for the following periods:

Enquiries that did not proceed to an engagement: 12 months from the date of last contact
Active service engagements: for the duration of the engagement, plus 7 years after completion
Legal correspondence and case files: 7 years from closure, in accordance with professional legal record-keeping standards in Malaysia
Analytics and website usage data: up to 24 months

After the applicable retention period, personal data is securely deleted or anonymised.

7. Data Protection Measures

We take reasonable technical and organisational steps to protect your personal data from unauthorised access, loss, or disclosure. These include:

Secure, password-protected document storage for case files
Restricted staff access on a need-to-know basis
TLS encryption for email communications where possible
Secure disposal of physical documents
Regular review of access logs and data handling procedures

In the event of a personal data breach that is likely to result in risk to your rights, we will notify the relevant parties as required under the PDPA 2010 and take immediate steps to contain the breach.

8. Cookies

Our website uses cookies to improve your browsing experience and to understand how the site is used. These include essential cookies required for the site to function, and optional analytics cookies. You can manage your cookie preferences at any time. See our Cookie Policy for full details.

9. Your Rights Under PDPA 2010

Under Malaysia's Personal Data Protection Act 2010, you have the following rights in relation to personal data we hold about you:

Right of access — you may request a copy of the personal data we hold about you
Right to correction — you may ask us to correct inaccurate or incomplete personal data
Right to withdraw consent — where processing is based on your consent, you may withdraw it at any time, though this may affect our ability to deliver certain services
Right to limit processing — in certain circumstances, you may ask us to restrict how we use your data
Right to make a complaint — you may contact the Department of Personal Data Protection Malaysia (JPDP) if you believe your rights have been infringed

To exercise any of these rights, please write to us at [email protected]. We will respond within 21 days.

10. Third-Party Links

Our website may contain links to external websites, including government agency portals and legal information resources. We are not responsible for the privacy practices of those sites and encourage you to review their policies directly.

11. Children's Privacy

Our services are intended for individuals aged 18 and above. We do not knowingly collect personal data from individuals under 18. If you believe a minor has submitted personal data through our website, please contact us and we will arrange for its deletion.

12. International Data Transfers

We store and process personal data within Malaysia. Where any third-party services we use process data outside Malaysia, we ensure that appropriate safeguards are in place consistent with the PDPA 2010 requirements.

13. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last Updated" date at the top of this page. We encourage you to review this policy periodically. Continued use of our services after changes take effect constitutes your acceptance of the revised policy.

14. Contact Us

For any questions regarding this policy or your personal data, please contact our data privacy contact:

Pelindung Legal Services
Level 11, Menara Northam
Jalan Sultan Ahmad Shah
10050 George Town, Penang
Email: [email protected]
Phone: +60 4-227 6918