Privacy Policy
Last Updated: 18 June 2025
This Privacy Policy describes how Delima Guaman ("the Firm", "we", "us", or "our"), operating from Jalan Cheras 141, 56000 Kuala Lumpur, Malaysia, collects, uses, stores, and protects personal data provided to us through this website or in the course of providing legal services. We are committed to handling your information responsibly and in compliance with applicable Malaysian law, including the Personal Data Protection Act 2010 (PDPA).
1. Data Controller
The data controller for personal data collected through this website and in connection with our legal services is:
Delima Guaman
Jalan Cheras 141, 56000 Kuala Lumpur, Malaysia
Email: [email protected]
Phone: +60 3-9182 6437
2. What Personal Data We Collect
We may collect the following categories of personal data when you contact us or use our services:
- Identity data: Full name, identification number (MyKad or passport)
- Contact data: Email address, telephone number, postal address
- Matter-related data: Information about family members, assets, estate details, and other information necessary to provide legal advice
- Technical data: IP address, browser type, pages visited, and session duration collected via website analytics
- Communication data: Records of correspondence, enquiries, and instructions
We collect this data when you submit our website contact form, contact us by phone or email, or engage us to provide legal services.
3. Legal Basis for Processing
We process personal data on the following legal bases under the PDPA 2010:
- Consent: Where you have provided consent through our contact form or cookie acceptance
- Contract performance: To fulfil our obligations under a legal services retainer or agreement
- Legal obligation: Where processing is required by Malaysian law or Bar Council obligations
- Legitimate interest: For purposes such as maintaining client records, improving our services, and responding to enquiries
4. How We Use Your Data
We use the personal data we collect for the following purposes:
- Responding to enquiries and providing legal advice and services
- Preparing legal documents including Wills, petitions, and correspondence
- Filing documents with Malaysian courts and government authorities
- Communicating updates on your legal matter
- Complying with our professional obligations under the Legal Profession Act 1976
- Maintaining our client management and file records
- Website analytics to understand how visitors use our site
We do not use your personal data for unsolicited marketing communications. We will not sell, rent, or share your personal data with third parties for their commercial purposes.
5. Data Sharing
In the ordinary course of providing legal services, we may disclose your personal data to the following parties:
- Malaysian courts and tribunals as required by legal proceedings
- Government authorities such as the Land Office, EPF, National Registration Department, and Amanah Raya Berhad, where required to administer your estate matter
- Financial institutions where disclosure is necessary to carry out estate-related transactions on your behalf
- Opposing parties' solicitors in the context of legal proceedings or negotiations
- IT service providers who host or maintain our systems, subject to confidentiality obligations
Any disclosure is limited to what is strictly necessary for the purpose at hand and is subject to our professional duty of confidentiality.
6. Data Retention
We retain client files and personal data in accordance with the following guidelines:
- Active client matter files: retained for the duration of the engagement
- Completed matter files: retained for a minimum of seven (7) years following closure
- Website enquiry data (where no retainer follows): retained for twelve (12) months
- Analytics data: retained in aggregated, anonymised form only
After the applicable retention period, personal data is securely deleted or anonymised.
7. Data Security
We take reasonable steps to protect personal data against unauthorised access, loss, or misuse. Our measures include:
- Access to client files restricted to the practitioners and staff handling the relevant matter
- Physical client files stored in locked cabinets on secured premises
- Electronic communications sent via secure, password-protected systems
- Staff awareness of confidentiality and data protection obligations
In the event of a data breach that is likely to affect your rights or interests, we will notify you and, where required, the relevant authority in accordance with the PDPA 2010.
8. Cookies
Our website uses cookies to improve functionality and to gather basic analytics on site usage. You can manage your cookie preferences at any time through our Cookie Policy page. Essential cookies required for the website to function cannot be disabled.
9. Your Rights Under Malaysian Law
Under the Personal Data Protection Act 2010, you have the following rights in relation to personal data we hold about you:
- Right of access: You may request a copy of personal data we hold about you
- Right of correction: You may ask us to correct inaccurate or incomplete data
- Right to limit processing: In certain circumstances, you may ask us to cease or limit the use of your data
- Right to withdraw consent: Where processing is based on consent, you may withdraw it at any time (this does not affect prior processing)
- Right to complain: You have the right to raise a concern with the Personal Data Protection Commissioner of Malaysia
To exercise any of these rights, write to us at [email protected] or by post to our Jalan Cheras office. We will respond within a reasonable time and in any event within thirty (30) days.
10. Third-Party Links
Our website may contain links to external websites. We are not responsible for the privacy practices or content of those sites. We encourage you to review the privacy policies of any external website before providing personal information.
11. Children's Privacy
Our services are intended for persons aged 18 and above. We do not knowingly collect personal data from individuals under 18 without the consent of a parent or guardian. If you believe a minor has provided personal data to us without such consent, please contact us and we will take appropriate steps to address it.
12. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or in applicable law. Any changes will be posted on this page with a revised "Last Updated" date. We encourage you to review this page periodically. Continued use of our website after a policy update constitutes acceptance of the revised terms.
13. Contact for Data Enquiries
For any questions, requests, or concerns relating to your personal data or this Privacy Policy, please contact:
Delima Guaman
Jalan Cheras 141, 56000 Kuala Lumpur, Malaysia
Email: [email protected]
Phone: +60 3-9182 6437
Office Hours: Monday–Friday 9:00 am – 6:00 pm; Saturday 9:00 am – 1:00 pm