Privacy Policy

1. Introduction

Zuriat ("we", "us", or "our") is a legal services practice registered in Johor Bahru, Malaysia. We take the privacy of our clients and website visitors seriously. This policy explains what personal information we collect, how we use it, and the rights you hold in relation to it.

This policy applies to information collected through our website at zuriat.live, through enquiry forms, and in the course of our professional engagements. It should be read alongside our Cookie Policy and Terms and Conditions.

If you have questions about this policy, please contact us at [email protected].

2. Information We Collect

We collect personal information only when you choose to provide it, or when it is necessary for us to deliver our legal services.

Information you provide directly:

• Name and contact details (telephone, email address)
• Information about your estate, assets, or family situation shared during consultations
• Correspondence and messages sent through our website enquiry form
• Identity documents and legal paperwork submitted in connection with an engagement

Information collected automatically:

• Website usage data (pages visited, time on site) via cookies and analytics tools
• Device and browser information
• IP address and approximate geographic location

Legal basis for processing (PDPA 2010): We process personal data on the basis of consent (for website enquiries and marketing), contractual necessity (for service delivery), and legitimate interest (for analytics and service improvement).

3. How We Use Your Information

• To respond to enquiries submitted through our website
• To provide and administer the legal services you have engaged us for
• To liaise with government authorities and third parties on your behalf in the course of an engagement
• To prepare and maintain legal documentation and records as required
• To send service-related communications (appointment confirmations, document requests)
• To improve our website and understand how visitors engage with it
• To comply with legal and regulatory obligations in Malaysia

We do not sell personal information to any third party. We do not use your information for automated decision-making that has a legal or significant effect on you.

4. Data Sharing

We may share your personal data with the following categories of recipients, where relevant to your matter:

• Government authorities — courts, the Land Registry, LHDN, Amanah Raya, and other agencies in connection with your estate matter
• Other legal practitioners — solicitors in other states engaged to assist with multi-jurisdiction estates
• Analytics providers — such as Google Analytics, for website usage data in anonymised or pseudonymised form
• IT service providers — hosting and infrastructure providers who process data under appropriate agreements

We will not share your personal data with any other party without your explicit consent, except where required by law.

5. Data Retention

We retain personal data for the following periods:

• Website enquiry data: 12 months from the date of enquiry, unless an engagement commences
• Client engagement records: 7 years from the date of matter closure, in line with legal and professional obligations
• Website analytics data: As determined by the analytics provider's settings, typically 26 months

After the applicable retention period, data is securely deleted or anonymised.

6. Data Security

We take reasonable steps to protect personal information from loss, misuse, or unauthorised access. Measures include:

• Secure file storage for physical documents, with access limited to authorised staff
• Password-protected systems and access controls for digital records
• Encrypted transmission of data over our website (HTTPS)
• Confidentiality obligations for all staff and associated practitioners

In the event of a data breach that poses a risk to affected individuals, we will notify those individuals and, where applicable, the relevant authority under Malaysian law.

7. Cookies

Our website uses cookies to function correctly and to improve your experience. Details of the cookies we use and how to manage your preferences are set out in our Cookie Policy.

8. Your Rights

Under the Personal Data Protection Act 2010 (Malaysia), you have the right to:

• Access the personal data we hold about you
• Correct inaccurate or incomplete personal data
• Withdraw consent to processing at any time (where processing is based on consent)
• Object to processing for direct marketing purposes
• Request limitation of processing in certain circumstances

To exercise any of these rights, please contact us at [email protected]. We will respond within 21 days. Please note that in some circumstances, particularly for legally required records, we may not be able to delete data immediately.

9. Third-Party Links

Our website may contain links to external sites. We are not responsible for the privacy practices of those sites and recommend you review their policies independently.

10. Children's Privacy

Our services are directed at adults (18 years and above). We do not knowingly collect personal data from individuals under 18. If you believe a minor has submitted information through our website, please contact us so we can remove it.

11. Changes to This Policy

We may update this policy from time to time. Where changes are material, we will notify clients by email. The updated date at the top of this page reflects the most recent revision. Continued use of our website or services following any update constitutes your acceptance of the revised policy.

12. Contact for Privacy Matters