Legal
Privacy Policy
Kemuncak is committed to handling your personal information with care, discretion, and full regard for your rights. This policy explains what we collect, why we collect it, and how it is safeguarded.
Last updated: 28 April 2025
1. Introduction
Kemuncak ("we", "us", or "our") operates from Level 11, Wisma BU8, 11 Lebuh Bandar Utama, 47800 Petaling Jaya, Selangor, Malaysia. We provide estate and inheritance legal counsel to individuals and families navigating matters of personal significance.
This Privacy Policy governs the collection and use of personal data obtained through our website at kemuncak.pro and through our professional engagement processes. By using our website or enquiring about our services, you acknowledge the practices described here.
We comply with the Personal Data Protection Act 2010 (PDPA) of Malaysia, which governs the processing of personal data in commercial transactions. Where relevant, we also observe the principles of the General Data Protection Regulation (GDPR) for individuals in the European Economic Area.
2. Personal Data We Collect
We collect only the information that is reasonably necessary for the delivery of our services and the administration of our professional relationship with you.
Information you provide directly
- Full name and preferred form of address
- Email address and telephone number
- Details about your estate or inheritance matter, as shared during enquiry or engagement
- Any documents or correspondence you choose to share with us
Information collected automatically
- Browser type, device type, and operating system
- IP address and approximate location (city level)
- Pages visited, time spent on pages, and referring URLs
- Cookie identifiers (see our Cookie Policy)
Legal basis for processing
- Consent — for marketing communications and non-essential cookies
- Contractual necessity — for delivering the services you have engaged us for
- Legitimate interest — for website analytics and service improvement
- Legal obligation — where Malaysian law requires us to retain records
Retention periods
- Enquiry data with no resulting engagement: deleted after 12 months
- Client engagement records: retained for 7 years from conclusion of matter, in accordance with professional obligations
- Website analytics data: aggregated and anonymised after 26 months
- Cookie consent records: retained for 12 months
3. How We Use Your Information
Your information is used for purposes directly related to the professional services we provide and the administration of our relationship with you.
- Service delivery. To assess your enquiry, arrange a consultation, and carry out the engagement you have requested.
- Client communication. To respond to questions, provide updates on your matter, and send documents relevant to your engagement.
- Legal compliance. To meet our obligations under Malaysian professional standards, anti-money laundering provisions, and tax administration requirements.
- Website improvement. To understand how visitors use our website so we may improve its content and structure.
- Occasional updates. With your explicit consent, to inform you of changes to our services or matters we consider relevant to your estate planning interests. You may withdraw consent at any time.
We do not sell, lease, or otherwise transfer your personal data to third parties for their own commercial purposes.
4. Data Sharing and Disclosure
We share your personal data only where necessary and always within the bounds of applicable law.
Service providers
We work with a small number of trusted third-party providers for website hosting, secure email, and document management. All such providers are bound by confidentiality obligations and are not permitted to use your data for any purpose beyond that for which it was shared.
Professional referrals
Where your matter requires specialist input from another professional (such as a licensed valuer, financial planner, or registered trust company), we will discuss this with you before sharing any information and obtain your agreement.
Legal requirements
We may be required to disclose information to regulatory authorities, courts, or law enforcement where required by Malaysian law. We will notify you where we are legally permitted to do so.
5. How We Protect Your Data
Given the sensitive nature of estate and inheritance matters, we take data security with the seriousness it deserves.
- All data in transit between your browser and our servers is protected by TLS encryption (HTTPS).
- Client documents and records are stored on access-controlled systems with role-based permissions.
- We conduct periodic internal reviews of our data handling practices to identify and address any areas of concern.
- Access to personal data is limited to staff members who require it for the performance of their duties.
- In the event of a data breach that may affect your rights, we will notify you and, where required, the relevant supervisory authority within the timeframes prescribed by law.
6. Cookies
Our website uses cookies and similar technologies to support its operation and to help us understand how it is used. You will be presented with a consent notice on your first visit.
For full details, please read our Cookie Policy.
7. Your Rights
Under the Personal Data Protection Act 2010 and, where applicable, the GDPR, you hold the following rights in relation to your personal data. We are committed to responding to requests within 21 days.
Right of Access
You may request a copy of the personal data we hold about you.
Right to Rectification
You may ask us to correct any inaccurate or incomplete information.
Right to Erasure
You may ask us to delete your data where there is no longer a legitimate reason to retain it.
Right to Object
You may object to data processing based on legitimate interest at any time.
Right to Portability
Where technically feasible, you may request your data in a structured, machine-readable format.
Right to Withdraw Consent
Where processing is based on your consent, you may withdraw it at any time without affecting prior processing.
Supervisory authority: Complaints may also be directed to the Department of Personal Data Protection Malaysia (JPDP) at www.pdp.gov.my, which serves as the relevant supervisory authority under the PDPA 2010.
8. External Links
Our website may include links to external resources — such as government portals, court websites, or professional bodies — for your reference. These external sites operate under their own privacy policies, and we are not responsible for how they handle your information. We encourage you to review their policies before submitting any personal data.
9. Children and Minors
Our services are directed at individuals aged 18 and above. We do not knowingly collect personal data from those under 18. In the context of estate matters involving minors as beneficiaries, we deal with the appointed administrator or guardian on their behalf. If you believe data relating to a minor has been submitted to us inadvertently, please contact us so we may address this promptly.
10. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or the services we offer. Where material changes are made, we will update the "Last updated" date at the top of this page. We encourage you to review this page periodically. Continued use of our website following any update constitutes acknowledgement of the revised policy.
11. Contact for Data Matters
If you wish to exercise any of your rights, have a question about this policy, or wish to raise a concern about how your information has been handled, please contact us through the details below. We aim to respond within 21 calendar days.
Data Privacy Enquiries
[email protected]Postal Address
Level 11, Wisma BU8, 11 Lebuh Bandar Utama, 47800 Petaling Jaya, Selangor, Malaysia
Telephone
+60 4-3287 6594