Privacy Policy

1. Introduction

Tenang Chambers ("we", "us", "our") is committed to protecting the personal data of individuals who contact us or use our legal services. This policy explains how we collect, use, store, and protect your personal information. It applies to data collected through this website and through our engagement process. We operate under the Personal Data Protection Act 2010 (PDPA) of Malaysia.

For data-related questions, contact us at [email protected].

2. Data We Collect

We collect personal data in the following circumstances:

• Contact form submissions: name, email address, telephone number, and any details you include in your message.
• Legal engagement: identity documents, medical records, employment records, and pension account information provided in connection with your matter.
• Website usage: anonymised analytics data through cookies, where consent has been provided.

The legal basis for processing is: consent (for contact form and analytics), performance of a contract (for legal engagements), and legitimate interest (for responding to enquiries).

Personal data related to legal matters is retained for six years from the date of matter closure, in accordance with Malaysian limitation period requirements. Website enquiry data is retained for two years.

3. How We Use Your Data

• Responding to your enquiry or providing the legal services you have engaged us for
• Communicating with you about your matter, including updates and advice
• Obtaining records from pension authorities or other bodies on your behalf, where instructed
• Complying with our legal and professional obligations as members of the Malaysian Bar
• Improving the website through anonymised analytics, where consent has been given

We do not sell personal data. We do not use your data for marketing purposes without explicit consent. We do not send unsolicited communications.

4. Data Sharing

Personal data is shared only where necessary for the conduct of your matter:

• Pension authorities (EPF, JPA, SOCSO) when obtaining records on your behalf
• Pension review tribunals when representing you in proceedings
• Regulatory bodies if required by law or professional obligation

We do not share data with third parties for commercial purposes.

5. Data Protection Measures

We take reasonable technical and organisational steps to protect your personal data, including:

• Secure encrypted storage for electronic files
• Access restrictions — client information is accessible only to those working on the matter
• Physical security for document storage at our Petaling Jaya office
• In the event of a data breach affecting your information, we will notify you as soon as reasonably practicable

6. Cookies

This website uses cookies for basic functionality and, with your consent, for anonymised analytics. Essential cookies are required for the website to function. Optional cookies (analytics, preferences) are set only where you have accepted them. You can manage your cookie preferences at any time on our Cookie Policy page.

7. Your Rights Under the PDPA

Under the Personal Data Protection Act 2010 (Malaysia), you have the right to:

• Request access to the personal data we hold about you
• Request correction of inaccurate or incomplete data
• Request that we cease processing your data for direct marketing
• Withdraw consent for processing based on consent, without affecting the lawfulness of prior processing
• Lodge a complaint with the Department of Personal Data Protection Malaysia

To exercise any of these rights, contact us at [email protected]. We will respond within 21 days.

8. Third-Party Links

This website may contain links to external sites. We are not responsible for the privacy practices of those sites. We encourage you to review the privacy policies of any external sites you visit.

9. Children's Privacy

Our services are intended for individuals aged 18 and above. We do not knowingly collect personal data from minors. If you believe we have inadvertently collected data from a person under 18, please contact us and we will delete it promptly.

10. Policy Updates

We may update this policy from time to time. Where changes are material, we will note the updated date at the top of this page. Continued use of our services after changes constitutes acceptance of the revised policy.