Privacy Policy

1. Introduction

brevelles ("we", "our", "us") is committed to protecting and respecting the privacy of individuals who interact with our firm. This Privacy Policy explains how we collect, use, store, and protect personal data in the course of providing legal services and operating our website.

This policy applies to all personal data collected through our website, contact forms, email communications, telephone calls, and in-person consultations. By using our services or accessing our website, you acknowledge that you have read and understood this policy.

For any questions regarding this policy or your personal data, please contact us at [email protected].

2. Data We Collect

We may collect the following categories of personal data:

Contact Information: Your name, email address, telephone number, and postal address when you submit a contact form, send an enquiry, or engage our services.

Case-Related Information: Details about your legal matter, including relevant documents, correspondence, and background information you provide during consultations.

Technical Data: Your IP address, browser type, operating system, and browsing behaviour when you visit our website. This data is collected through cookies and similar tracking technologies.

Payment Information: Where applicable, billing details related to our professional fees. We do not store complete payment card details on our systems.

3. How We Use Your Data

We process personal data for the following purposes:

Service Delivery: To provide legal advice, prepare documents, communicate about your matter, and fulfil our professional obligations to you.

Communication: To respond to enquiries, schedule appointments, and send relevant updates about your matter or our services.

Website Improvement: To analyse how visitors use our website and improve its functionality and content.

Legal Compliance: To meet our obligations under Malaysian law, including anti-money laundering regulations and the rules of professional conduct.

We process your data on the legal bases of consent, contractual necessity, and legitimate interest as applicable under the Personal Data Protection Act 2010 (PDPA).

4. Data Sharing

We do not sell or rent your personal data. We may share data in the following limited circumstances:

With Your Consent: Where you instruct us to share information with third parties in connection with your legal matter (e.g., opposing counsel, courts, regulatory bodies).

Service Providers: With third-party providers who assist in operating our website and business, such as hosting services and analytics providers (e.g., Google Analytics). These providers are contractually obligated to handle your data securely.

Legal Requirements: Where disclosure is required by law, court order, or regulatory obligation.

5. Data Protection Measures

We take the security of your personal data seriously and implement appropriate measures, including encrypted communications for sensitive data, secure document storage with restricted access controls, regular review of data handling procedures, and staff training on data protection responsibilities.

In the event of a data breach that poses a risk to your rights and freedoms, we will notify you and the relevant authorities in accordance with the PDPA and applicable guidelines.

6. Data Retention

We retain personal data for as long as necessary to fulfil the purposes for which it was collected, including:

Client matter files: Retained for a minimum of six years after the conclusion of the matter, in accordance with Bar Council record-keeping requirements.

Enquiry data: Retained for up to 12 months from the date of the enquiry if no engagement follows.

Website analytics data: Retained for up to 26 months in anonymised form.

7. Cookies

Our website uses cookies to improve your experience and analyse site usage. For detailed information about the cookies we use and how to manage your preferences, please see our Cookie Policy.

8. Your Rights

Under the Personal Data Protection Act 2010 (PDPA) and general principles of data protection, you have the right to:

Access: Request a copy of the personal data we hold about you.

Correction: Request that inaccurate or incomplete data be corrected.

Withdrawal of Consent: Withdraw your consent to data processing at any time, subject to legal and contractual restrictions.

Limitation: Request that we restrict the processing of your data in certain circumstances.

To exercise any of these rights, please write to us at [email protected]. We will respond within 21 days of receiving your request. You also have the right to lodge a complaint with the Department of Personal Data Protection (JPDP) Malaysia if you believe your data has been handled improperly.

9. Third-Party Links

Our website may contain links to third-party websites. We are not responsible for the privacy practices of those websites and encourage you to review their privacy policies before providing personal data.

10. Children's Privacy

Our services are not directed at individuals under 18 years of age. We do not knowingly collect personal data from minors. If we become aware that we have collected data from a person under 18 without appropriate consent, we will take steps to delete that data.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Last Updated" date. We encourage you to review this page periodically for any changes.

12. Contact Us

Data Controller: brevelles

Address: 14 Jalan Yap Kwan Seng, 50450 Kuala Lumpur, Malaysia

Email: [email protected]