Privacy Policy — Sayang Legal

1. Introduction

Sayang Legal ("we", "us", "our") is committed to handling personal data with care and transparency. This Privacy Policy explains how we collect, use, store, and protect personal information provided to us through our website at sayanglen.live or when you engage our family law services. Sayang Legal operates in Malaysia and this policy is framed in accordance with the Personal Data Protection Act 2010 (PDPA) of Malaysia.

If you have questions about this policy, please contact us at [email protected].

2. Data We Collect

2.1 Information you provide directly

Full name
Email address
Phone number (if provided)
The content of any message submitted through our contact form

2.2 Information collected automatically

Browser type and version
Pages visited and time spent on pages (via analytics cookies, if consented)
IP address (anonymised where possible)
Cookie identifiers (see our Cookie Policy)

2.3 Legal basis for processing

We process personal data on the following grounds under the PDPA 2010:

Consent — when you submit a contact form or agree to optional cookie categories
Contractual necessity — when data is required to deliver a service you have engaged us for
Legitimate interest — for analytics to improve our website, balanced against your privacy rights
Legal obligation — where required by Malaysian law or court order

3. How We Use Your Data

To respond to enquiries submitted through our contact form
To arrange and conduct counsel sessions and deliver agreed services
To send service-related communications (e.g. session confirmation, written notes)
To improve the functionality and content of our website (analytics, where consented)
To comply with legal and professional obligations applicable to a Malaysian law practice

We do not use your personal data for unsolicited marketing. We do not sell, rent, or share your personal data with third parties for marketing purposes.

4. Data Sharing

Your personal data may be shared only in the following circumstances:

Service providers: Third-party tools that support website analytics or email delivery, operating under data processing agreements that restrict their use of your data.
Legal requirements: Where we are required by law, court order, or professional regulatory obligation to disclose information.
With your explicit instruction: In connection with legal services you have engaged us for, and only as you direct.

All matters discussed with Sayang Legal in a legal capacity are additionally protected by legal professional privilege under Malaysian law, which operates independently of this Privacy Policy.

5. Data Retention

Contact form submissions: Retained for 12 months from submission date, unless a service engagement results from the enquiry.
Client matter files: Retained for 7 years from the closure of the matter, in accordance with professional practice requirements.
Analytics data: Retained in aggregated, anonymised form for up to 26 months.

At the end of the retention period, data is securely deleted or anonymised.

6. Data Security

We take reasonable and appropriate steps to protect personal data against loss, unauthorised access, and misuse. These measures include:

Password-protected systems with access limited to authorised personnel
Encrypted email communications where possible
Physical file security for client documents held on our premises
Regular review of access controls

In the event of a data breach that poses a risk to individuals, we will notify affected parties and, where required, the relevant authorities, within the timeframes required under Malaysian law.

7. Cookies

Our website uses cookies to ensure basic functionality and, where you have consented, to understand how visitors use the site. Please see our Cookie Policy for a full explanation of the cookies we use and how to manage your preferences.

8. Your Rights Under the PDPA 2010

Under the Personal Data Protection Act 2010, you have the right to:

Request access to the personal data we hold about you
Request correction of inaccurate or incomplete data
Withdraw consent for data processing where consent is the legal basis
Request that we cease processing your data for direct marketing purposes

To exercise any of these rights, please contact us at [email protected]. We will respond within 21 days of receiving a written request.

If you believe your data protection rights have not been respected, you may lodge a complaint with the Personal Data Protection Commissioner of Malaysia (Department of Personal Data Protection, Ministry of Digital).

9. Third-Party Links

Our website may contain links to external websites. We are not responsible for the privacy practices of those sites. We recommend reviewing the privacy policy of any external site before providing personal information.

10. Children's Privacy

Our website and services are directed at adults aged 18 and over. We do not knowingly collect personal data from individuals under 18. If you believe we have inadvertently collected data from a minor, please contact us at [email protected] and we will delete it promptly.

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. The updated policy will be published on this page with a revised "Last Updated" date. Where changes are material, we will make reasonable efforts to notify active clients.

12. Contact

Sayang Legal is the data controller for the purposes of this policy.

Email: [email protected]
Address: Suite 11-2, Plaza 33, Jalan Kemajuan, 46200 Petaling Jaya, Selangor, Malaysia
Phone: +60 3-7956 3148