Privacy Policy

1. Data Controller

Kasih is the data controller for personal data processed through this website and in connection with the provision of family law advisory services. Our registered office is at No. 27, Jalan Telawi 5, Bangsar Baru, 59100 Kuala Lumpur, Malaysia.

2. Personal Data We Collect

We may collect the following categories of personal data:

• Contact information: full name, email address, phone number, postal address
• Matter-related information provided during consultations and advisory sessions
• Correspondence: emails, messages submitted through our contact form, notes from meetings
• Technical data: IP address, browser type, pages visited, session duration (collected via cookies)
• Financial information required for billing and payment purposes

We collect personal data when you: submit our contact form; contact us by telephone or email; attend a consultation; or engage us to provide legal advisory services.

3. How and Why We Use Your Personal Data

We process personal data for the following purposes:

• Service delivery: to provide family law advisory services you have requested or enquired about
• Communication: to respond to your enquiries and keep you updated on your matter
• Compliance: to meet obligations under Malaysian law, including the Legal Profession Act 1976 and Bar Council rules
• Billing: to prepare and issue fee invoices and receive payment
• Website improvement: to understand how our website is used and improve its content and usability

The legal bases under the PDPA for our processing are: your consent (where requested); the performance of a contract for services; compliance with a legal obligation; and our legitimate interest in operating a professional advisory practice.

4. Data Retention

We retain personal data only for as long as necessary:

• Client files and correspondence: up to 7 years from the conclusion of the matter, as required by professional rules
• Contact form submissions (no engagement): up to 12 months
• Analytics and technical data: up to 26 months
• Financial records: 7 years as required by Malaysian tax and accounting law

5. Sharing of Personal Data

We do not sell personal data. We may share data only in the following circumstances:

• With courts, tribunals, or government bodies as required in the course of your matter
• With third-party service providers who assist us in operating our website and practice (subject to data processing agreements)
• With opposing parties or their solicitors only as necessary and appropriate in the conduct of your matter
• Where required by Malaysian law or a court order

6. Data Protection Measures

We take the security of your personal data seriously. Measures we employ include:

• Access to client files restricted to relevant team members only
• Physical files stored securely and locked when not in use
• Electronic data stored on password-protected systems with access controls
• Encrypted communications for sensitive correspondence where practical
• Regular review of security practices within our office

In the event of a data breach that is likely to affect your rights, we will notify you and, where required, the relevant Malaysian authority without undue delay.

7. Cookies

Our website uses cookies — small text files stored on your device — to improve your browsing experience and collect basic usage data. We use:

• Essential cookies: required for the website to function correctly
• Analytics cookies: to understand how visitors use the site (anonymised)
• Preference cookies: to remember your consent choices

You can manage cookie preferences through our cookie banner or in your browser settings. For full details, see our Cookie Policy.

8. Your Rights

Under the PDPA and applicable Malaysian law, you have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate or incomplete data
• Request erasure of data where retention is no longer justified
• Object to processing on grounds of legitimate interest
• Withdraw consent where processing is based on consent
• Lodge a complaint with the Department of Personal Data Protection (JPDP), Malaysia

To exercise any of these rights, contact us at [email protected]. We will respond within 21 days.

9. Third-Party Links

Our website may contain links to external websites. We are not responsible for the privacy practices or content of those websites. We encourage you to review their privacy policies before providing any personal data.

10. Children's Privacy

Our website and services are directed at adults aged 18 and above. We do not knowingly collect personal data from children under 18. If you believe a minor has submitted data to us, please contact us and we will promptly address it.

11. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the "Last Updated" date at the top of this page. Continued use of our website following changes constitutes acceptance of the revised policy. For material changes, we will provide reasonable notice.

12. Contact Us

For any privacy-related questions, requests, or concerns: