Legal Documentation
Privacy Policy
How Firmavow collects, uses, and protects your personal information under Malaysian law.
Last Updated: 28 March 2026 · Effective: 28 March 2026
1. Introduction
Firmavow ("we", "us", "our") is a legal services firm based at 29 Jalan Hang Jebat, 75200 Melaka, Malaysia. We are committed to handling your personal information with care and transparency, in accordance with the Personal Data Protection Act 2010 (PDPA) of Malaysia.
This Privacy Policy explains what personal data we collect when you visit our website or engage our services, how we use and protect that data, and what choices you have regarding your information.
By using our website or submitting an enquiry, you acknowledge that you have read and understood this policy. If you have any questions, please reach us at [email protected].
2. Data We Collect
We collect personal data only to the extent necessary to provide legal services and communicate with you. The types of data we may collect include:
Information You Provide
- Full name and contact details (email address, telephone number)
- Business name and registered address (where applicable)
- Nature of your legal enquiry or matter
- Any documentation you choose to share with us
Information Collected Automatically
- Browser type, operating system, and device information
- Pages visited on our website and time spent
- Referring website or search terms
- IP address (anonymised where possible)
Legal Basis: We process your personal data on the basis of your consent (when you submit an enquiry), for the performance of a contract (when you engage our services), and for our legitimate interests in operating a professional legal practice.
Data Retention
Enquiry data is retained for up to 24 months from the date of first contact. Client matter files are retained for a minimum of 7 years in accordance with legal professional obligations. After these periods, data is securely deleted or anonymised.
3. How We Use Your Data
Your personal data is used for the following purposes:
- Responding to enquiries — to reply to questions submitted through our contact form or by telephone.
- Service delivery — to carry out legal work you have engaged us to perform.
- Administrative communications — appointment scheduling, billing, and matter updates.
- Website improvement — understanding how visitors use our site to improve its content and usability.
- Legal compliance — where required to meet obligations under Malaysian law or a court order.
We do not sell, trade, or otherwise transfer your personal data to third parties for marketing purposes. We do not send unsolicited marketing communications.
4. Data Protection Measures
We take reasonable and appropriate steps to safeguard the personal data we hold. These measures include:
Encryption
Data transmitted via our website is encrypted using TLS/SSL protocols.
Access Control
Access to client data is restricted to authorised personnel on a need-to-know basis.
Secure Storage
Physical and digital records are stored in secure environments with controlled access.
Breach Notification
In the event of a data breach, affected parties will be notified as required under the PDPA.
While we take these precautions seriously, no method of data transmission or storage is entirely without risk. We encourage you to contact us if you have concerns about your data.
6. Your Rights
Under the Personal Data Protection Act 2010, you have the following rights in respect of your personal data:
To exercise any of these rights, please contact us at [email protected]. We will respond within 21 days of receiving your request.
7. Third-Party Links & Services
Our website may contain links to external websites or resources. We are not responsible for the privacy practices or content of those external sites, and we encourage you to review their privacy policies independently.
Where we use third-party service providers (such as website hosting or analytics), we ensure they handle data responsibly and in a manner consistent with this policy. We do not transfer personal data outside of Malaysia without appropriate safeguards.
8. Children's Privacy
Our legal services are intended for individuals aged 18 and above. We do not knowingly collect personal data from persons under the age of 18. If you believe a minor has submitted information to us, please contact us promptly so we may take appropriate steps to remove that data.
9. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or in applicable law. Any material changes will be indicated by a revised "Last Updated" date at the top of this page.
We encourage you to review this page periodically. Continued use of our website after any changes constitutes acknowledgement of the updated policy.
10. Contact for Data Enquiries
For any questions, requests, or concerns relating to your personal data or this Privacy Policy, please contact our designated data contact:
Data Contact — Firmavow
You also have the right to lodge a complaint with the Department of Personal Data Protection Malaysia (JPDP) at www.pdp.gov.my