Privacy Policy

Vicarum is a legal practice based at 19 Jalan Dato Bandar Tunggal, 70000 Seremban, Negeri Sembilan, Malaysia. This Privacy Policy applies to personal data collected through this website and through direct engagement with our practice.

We handle personal data in accordance with the Personal Data Protection Act 2010 (PDPA), which governs the processing of personal data in Malaysia. Questions about this policy may be directed to: [email protected]

We may collect the following categories of personal data:

• Name and contact details (email address, telephone number, postal address)
• Information submitted through the website contact form
• Details you share during a consultation or in the course of an engagement
• Technical data from your visit to our website (IP address, browser type, pages visited) via analytics tools
• Communications you send to us by any channel

We collect only what is necessary for the purposes described below. We do not collect sensitive personal data unless specifically required for the legal matter you have engaged us on.

Personal data is used for the following purposes:

• Responding to enquiries submitted through this website
• Providing legal services where an engagement has been formalised
• Maintaining client records as required by professional and regulatory obligations
• Improving the functioning of this website through analytics
• Fulfilling legal obligations applicable to a legal practice operating in Malaysia

We do not use your data for marketing communications without your consent. We do not sell or transfer your data to third parties for their own commercial use.

Under the PDPA 2010, we process personal data on the following bases:

• Consent — for enquiries submitted through our website contact form
• Contractual necessity — where processing is required to fulfil a legal engagement
• Legal obligation — where professional rules or Malaysian law require us to retain or process certain information
• Legitimate interests — for website analytics, where such interests do not override your rights

We retain personal data for as long as required by the purpose for which it was collected, or as required by applicable law and professional rules:

• Website enquiry data: up to 12 months if no engagement follows
• Client matter files: 7 years from closure of the matter, in accordance with professional records requirements
• Analytics data: governed by the retention settings of the respective analytics service

After the applicable retention period, data is securely deleted or anonymised.

We take reasonable steps to protect the personal data we hold. These include:

• Secure server hosting with encryption in transit (TLS/SSL)
• Access controls limiting data access to authorised personnel only
• Internal procedures for handling data-related incidents
• Regular review of data handling practices

If a data breach occurs that is likely to cause harm to individuals, we will take appropriate steps including notification to the affected parties and, where required, to the relevant authority.

This website uses cookies to support basic functionality and, where consent has been given, to understand how visitors use the site. For detailed information on the cookies we use, please refer to our Cookie Policy.

We may use the following third-party services that have access to certain technical data:

• Google Analytics — for understanding website usage patterns
• Google Maps — for displaying our office location on the website

Each of these services operates under its own privacy policy. We do not control how these third parties process data beyond what is set out in their respective policies.

Our website may contain links to external websites. We are not responsible for the privacy practices of those sites and encourage you to read their privacy policies before providing any personal information.

Under the PDPA 2010, you have the right to:

• Request access to the personal data we hold about you
• Request correction of inaccurate or incomplete data
• Withdraw consent for processing based on consent, without affecting the lawfulness of prior processing
• Request that your data be deleted where it is no longer necessary for the purpose for which it was collected, subject to any overriding retention obligations
• Lodge a complaint with the Department of Personal Data Protection Malaysia if you believe your rights have been infringed

To exercise any of these rights, please contact us at: [email protected]

Our services are intended for adults aged 18 and above. We do not knowingly collect personal data from individuals under 18. If you believe a minor has submitted personal data through this site, please contact us so we can arrange for its deletion.

We may update this Privacy Policy from time to time. Changes will be reflected on this page with an updated "Last Updated" date. We encourage you to check this page periodically. Continued use of this website after changes are published constitutes acceptance of the revised policy.