Privacy Policy

1. Who We Are

Verdien is a legal services practice based in Kuala Lumpur, Malaysia. We provide Corporate Advisory, Dispute Mediation, and Estate Planning services to individuals and organisations. Our registered address is 28 Jalan Bukit Bintang, 55100 Kuala Lumpur. As the data controller, we are responsible for how your personal data is collected and used.

2. What Personal Data We Collect

Depending on how you interact with us, we may collect the following categories of personal data:

Information you provide directly:

• Full name and preferred form of address
• Email address
• Phone number
• Postal address or business address
• The subject matter of your enquiry or message
• Documents or materials you choose to share with us during consultation

Information collected automatically:

• Browser type and version
• Pages visited and time spent on each page
• Referring URL and device type
• IP address (anonymised where possible)
• Cookie identifiers (see Section 7)

3. How We Collect Personal Data

We collect personal data through the following means:

• Contact and enquiry forms on our website
• Direct correspondence via email or telephone
• In-person meetings and consultations
• Analytics tools that operate on our website (with your consent)
• Cookies and similar tracking technologies (with your consent)

We do not purchase personal data from third-party data brokers, and we do not collect sensitive personal data such as identification numbers, financial records, or health information unless directly relevant to a legal matter you have engaged us for.

4. Legal Basis for Processing

Under the PDPA 2010, we process your personal data on the following legal grounds:

• Consent — where you have clearly agreed to our use of your data (e.g., submitting the contact form, accepting analytics cookies)
• Contractual necessity — where processing is necessary to provide the legal services you have requested
• Legitimate interests — for internal administrative purposes, improving our services, and maintaining the security of our systems
• Legal obligation — where we are required to retain or disclose data under Malaysian law

5. How We Use Your Data

Your personal data may be used for the following purposes:

• Responding to your enquiries and scheduling consultations
• Delivering the legal services you have engaged us for
• Preparing and sending legal documents relevant to your matter
• Maintaining records as required under Malaysian professional standards
• Sending service-related communications (e.g., appointment reminders)
• Improving the functionality and content of our website
• Complying with applicable laws and professional obligations

We do not sell, rent, or trade your personal data to any third party for marketing or commercial purposes.

6. Data Sharing

In limited circumstances, your data may be shared with:

• Service providers — third parties who assist with our operations (e.g., hosting, email delivery) under strict confidentiality agreements
• Professional colleagues — where your matter requires referral or collaboration with another legal professional, with your prior knowledge
• Regulatory or legal authorities — where required by law or a court order
• Analytics platforms — anonymised usage data shared with providers such as Google Analytics (only with your consent)

Any third party receiving your data is required to handle it in accordance with applicable data protection standards and is not permitted to use it for their own purposes.

7. Cookies

We use cookies to understand how visitors use our website and to remember your preferences. Cookies are small text files stored on your device. You can manage your cookie preferences at any time through our Cookie Policy page.

Types of cookies used:

• Essential cookies — necessary for the website to function properly
• Analytics cookies — help us understand page visits and user behaviour (optional)
• Preference cookies — remember your settings across visits (optional)
• Marketing cookies — used to show relevant information (optional, disabled by default)

For full details on cookies and how to manage them, please refer to our Cookie Policy.

8. Data Retention

We retain personal data only for as long as necessary for the purposes described in this policy, or as required by law:

• Enquiry form data — up to 12 months if no engagement follows
• Client matter files — 7 years from the conclusion of a matter, in accordance with professional standards
• Analytics data — up to 26 months, as aggregated and anonymised records
• Financial and billing records — 7 years as required under Malaysian tax and company law

When data is no longer required, it is securely deleted or anonymised.

9. Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or disclosure. These measures include:

• SSL/TLS encryption for data transmitted via our website
• Access controls limiting data access to authorised personnel only
• Regular review of our internal data handling practices
• Secure storage of physical documents in restricted areas

While we take reasonable steps to protect your information, no method of electronic transmission or storage is entirely without risk. We encourage you to contact us directly for highly sensitive matters rather than through web forms.

In the event of a data breach that poses a risk to your rights, we will notify you and the relevant authorities in accordance with applicable legal requirements.

10. Your Rights Under the PDPA

As a data subject under the Personal Data Protection Act 2010, you have the following rights:

• Right of access — to request a copy of the personal data we hold about you
• Right of correction — to request that we update or correct inaccurate data
• Right to withdraw consent — where processing is based on consent, you may withdraw at any time without affecting prior processing
• Right to cease processing — to request that we stop using your data for direct marketing or other non-essential purposes
• Right to lodge a complaint — with the Department of Personal Data Protection Malaysia (JPDP) if you believe your rights have been infringed

To exercise any of these rights, please write to us at [email protected]. We will respond within 21 days. In some circumstances, we may need to verify your identity before processing your request.

11. Third-Party Links

Our website may contain links to external resources or other websites. We are not responsible for the privacy practices of those sites. We encourage you to review the privacy policies of any external sites you visit. The presence of a link does not constitute an endorsement of that site's data handling practices.

12. Children's Privacy

Our services are intended for individuals aged 18 and above. We do not knowingly collect personal data from minors. If you believe a minor has submitted personal data through our website, please contact us and we will take steps to remove that information promptly.

13. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal obligations, or the services we offer. When changes are made, we will update the "Last Updated" date at the top of this page. We encourage you to review this page periodically. Your continued use of our website following any updates constitutes your acknowledgment of the revised policy.

14. Contact Us

If you have any questions, concerns, or requests related to your personal data, please reach out to us:

• Email: [email protected]
• Phone: +60 3-7182 4639
• Address: Verdien, 28 Jalan Bukit Bintang, 55100 Kuala Lumpur, Malaysia

We aim to handle all privacy-related enquiries with the same care and discretion that we bring to our legal practice.