Privacy Policy

Last updated: 15 July 2025 · Effective: 15 July 2025

Nurani Sirih ("the office", "we", "us") takes the privacy of its clients and website visitors seriously. This policy explains what personal information we collect, how we use it, how we protect it, and what rights you have in relation to it. It applies to information collected through this website and through our legal services.

This policy is governed by the Personal Data Protection Act 2010 (Malaysia) ("PDPA"). By using our website or engaging our services, you acknowledge that you have read and understood this policy.

1. Who we are

The data controller is Nurani Sirih, a law practice based at 10 Jalan Tunku Abdul Rahman, 05100 Alor Setar, Kedah, Malaysia. For data-related enquiries, contact us at [email protected].

2. What personal data we collect

We may collect the following categories of personal data:

• Contact information: name, email address, telephone number
• Matter-related information: details of your family law matter provided during consultations or in correspondence
• Communications: messages sent through our contact form or by email
• Technical data: IP address, browser type, pages visited, time of visit (collected via cookies and analytics tools, where consented)

We collect this data when you:

• Submit an enquiry through our website contact form
• Telephone or email the office
• Attend a meeting or consultation
• Send us documents in connection with a matter

3. Why we collect and use your data

We process personal data for the following purposes and on the following legal bases under the PDPA:

• Provision of legal services (contractual necessity): to handle your matter, communicate with you and fulfil our professional obligations
• Responding to enquiries (legitimate interests): to reply to messages sent through the website or by telephone
• Legal compliance: to meet obligations under Malaysian law, including record-keeping requirements for legal practitioners
• Analytics (consent): to understand how visitors use the website and improve it — only where you have accepted analytics cookies

We do not use your personal data for direct marketing without your explicit consent. We do not sell personal data to third parties.

4. How long we keep your data

• Client matter files: retained for a minimum of seven years after the matter closes, in line with professional obligations and the Limitation Act 1953
• Enquiry records (where no engagement follows): deleted within twelve months
• Website analytics data: retained for up to twenty-six months, depending on the analytics tool used
• Cookie consent records: retained until you clear your browser storage

5. Who we share your data with

We do not share your personal data with third parties except in the following circumstances:

• With your consent: for example, when sharing information with opposing counsel or a mediator at your direction
• Legal obligation: if required by a court order or applicable Malaysian law
• Service providers: our website host and analytics provider may process technical data on our behalf under data processing agreements; they do not use this data for their own purposes
• Professional obligations: as required by the Malaysian Bar or relevant regulatory body

All matter-related information you share with us is subject to legal professional privilege and will not be disclosed without your written consent, except as required by law.

6. How we protect your data

• Physical client files are stored in a secure, locked area accessible only to authorised staff
• Electronic communications are sent via encrypted channels where available
• Access to client records within the office is restricted to the solicitor handling the matter and the client coordinator
• In the event of a data breach, we will notify affected individuals and the relevant authority as required under the PDPA

7. Cookies

Our website uses cookies. Essential cookies are necessary for the site to function. Optional analytics and preference cookies are used only if you consent through the cookie banner. You can manage your cookie preferences at any time via our Cookie Policy page.

8. Your rights under the PDPA

Under the Personal Data Protection Act 2010, you have the right to:

• Access the personal data we hold about you
• Correct inaccurate or incomplete personal data
• Withdraw consent to processing where consent is the legal basis (this will not affect processing already carried out)
• Request deletion of data we no longer have a lawful basis to retain
• Object to processing carried out on the basis of legitimate interests
• Lodge a complaint with the Personal Data Protection Commissioner of Malaysia

To exercise any of these rights, contact us at [email protected]. We will respond within twenty-one days.

9. Third-party links

This website may contain links to external websites. We are not responsible for the privacy practices of those sites and encourage you to read their privacy notices before providing personal data.

10. Children's privacy

Our services are directed at adults aged 18 and over. We do not knowingly collect personal data from persons under 18. If a child's information is relevant to a family matter, that information is handled with particular care and only to the extent necessary.

11. Changes to this policy

We may update this policy from time to time. When we do, we will update the "Last updated" date at the top of this page. We encourage you to review this page periodically. Continued use of the website after changes are made constitutes acceptance of the updated policy.

12. Contact us about privacy

For any questions or concerns about this policy or how we handle your data: