Privacy Policy

1. Introduction

Harbour Law ("we", "us", "our") is a legal advisory practice registered in Malaysia and based at Level 22, Menara KOMTAR, Jalan Penang, 10000 George Town, Penang. We take the privacy of individuals seriously and are committed to handling personal data responsibly under the Personal Data Protection Act 2010 (PDPA) of Malaysia.

This Privacy Policy describes the types of personal data we collect, how we use it, and your rights in relation to that data. It applies to visitors to our website and individuals who contact us regarding our legal services.

2. Personal Data We Collect

We collect personal data through the enquiry form on our website and through direct correspondence. The data we collect may include:

• Full name and contact details (email address, phone number)
• Business name and role (if provided)
• Description of the matter you contact us about
• Technical data collected automatically (IP address, browser type, pages visited) via analytics cookies where consented

We do not collect special category personal data (such as health information or financial data) through this website.

3. How We Use Personal Data

Personal data submitted through this website is used for the following purposes:

• Responding to enquiries and requests for information about our services
• Communicating about potential or existing client engagements
• Understanding how visitors use our website (analytics, where consent is given)
• Complying with our legal and professional obligations as a Malaysian law firm

We do not use your personal data for unsolicited marketing purposes. We do not share personal data with third parties except where required for service delivery (such as our web hosting provider) or where required by law.

4. Legal Basis for Processing

Under the PDPA, we process personal data on the following bases:

• Consent — for analytics cookies and where you submit a website enquiry form
• Legitimate interest — for responding to direct correspondence and managing client relationships
• Legal obligation — where processing is required by Malaysian law or professional regulation

5. Data Retention

Enquiry data received through the website is retained for up to 12 months from receipt, unless an engagement is commenced, in which case client data is retained in accordance with our professional obligations under Malaysian Bar Council requirements (typically a minimum of seven years from the close of the matter).

6. Cookies

We use cookies on this website. Essential cookies are necessary for the website to function and cannot be disabled. Optional analytics and preference cookies are only used with your consent. For full details, please refer to our Cookie Policy.

7. Data Security

We take reasonable technical and organisational measures to protect personal data from unauthorised access, loss, or disclosure. Our website uses HTTPS encryption. Access to personal data within the firm is restricted to practitioners with a need to know for the relevant matter.

8. Third-Party Services

Our website may use the following third-party services:

• Google Analytics — for website usage analytics (requires consent)
• Google Maps — for location display on our website (no personal data transmitted)
• Web hosting and email services — operated by our service providers

We are not responsible for the privacy practices of third-party services. Please review their respective privacy policies.

9. Your Rights

Under the PDPA and applicable Malaysian law, you have the right to:

• Access personal data we hold about you
• Correct inaccurate personal data
• Withdraw consent to processing where processing is based on consent
• Request erasure of personal data that is no longer necessary
• Lodge a complaint with the Personal Data Protection Commissioner of Malaysia

To exercise any of these rights, please contact us at [email protected].

10. Children's Privacy

Our services are directed at businesses and professionals. We do not knowingly collect personal data from individuals under the age of 18. If you believe a minor has submitted data through our website, please contact us so we can remove it.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Any material changes will be reflected on this page with a revised Last Updated date. Continued use of the website following an update constitutes acceptance of the revised policy.

12. Contact

For privacy-related enquiries or to exercise your data rights, contact: