Privacy Policy

1. Introduction

Restu Law ("we", "us", "our") is committed to handling your personal information with the same care and discretion we apply to every aspect of our legal practice. This Privacy Policy explains what information we collect, how we use it, and the rights you have regarding your data.

This policy applies to all information collected through our website at restulaw.live and through our legal services. By using our website or services, you acknowledge that you have read and understood this policy. For questions, contact us at [email protected].

2. Information We Collect

We collect personal information only when it is necessary for the purpose of providing legal services or responding to your enquiries. The information we may collect includes:

• Identity information: full name, date of birth, identity card number (where required for legal purposes)
• Contact information: email address, telephone number, residential address
• Matter-related information: details relevant to your legal matter shared during consultations
• Website usage data: IP address, browser type, pages visited (via analytics cookies, if consented)

Legal basis for processing: Your data is processed on the basis of your consent (for communications and cookies), legitimate interest (for responding to enquiries), and contractual necessity (for delivering legal services).

Retention: Matter files are retained for 7 years from the close of a matter, in line with Malaysian legal practice standards. Website enquiry data is retained for up to 2 years.

3. How We Use Your Information

We use your personal information for the following purposes:

• Responding to your enquiries and providing legal advice
• Managing your legal matter and corresponding with relevant parties
• Sending appointment reminders and progress updates
• Complying with our legal and professional obligations under Malaysian law
• Improving our website and services (aggregated, anonymised analytics only)

We do not sell, rent, or trade your personal information to third parties for marketing purposes.

4. How We Protect Your Information

We take the security of your personal information seriously. Our measures include:

• Secure, password-protected internal systems with restricted staff access
• Encrypted email for sensitive client communications
• Physical file security for paper-based matter records
• Staff trained in confidentiality obligations under the Legal Profession Act 1976

In the event of a data breach affecting your personal information, we will notify you and the relevant authority in accordance with our legal obligations under the Personal Data Protection Act 2010 (PDPA).

5. Cookies

Our website uses cookies to improve your browsing experience and, where you consent, to understand how visitors use our site. Essential cookies are required for basic website function. Optional analytics and preference cookies are used only with your consent. You can manage your cookie preferences at any time via our Cookie Policy page.

6. Third-Party Sharing

We may share your personal information with third parties only in the following limited circumstances:

• With courts, government agencies, or opposing parties as required by your legal matter
• With third-party service providers who assist in delivering our services (e.g. secure file storage), under confidentiality obligations
• Where required by law or court order

We do not transfer personal data outside Malaysia except where required for your specific legal matter and with appropriate protections in place.

7. Your Rights Under the PDPA 2010

Under Malaysia's Personal Data Protection Act 2010, you have the following rights in relation to your personal data:

• Right of access: to request a copy of the personal data we hold about you
• Right of correction: to request that inaccurate data be corrected
• Right to withdraw consent: where data is processed based on consent, you may withdraw it at any time
• Right to object: to processing of your data for marketing purposes

To exercise any of these rights, please contact us at [email protected]. We will respond within 21 working days. Please note that some data may need to be retained to meet our legal professional obligations, even if you withdraw consent.

8. Children's Privacy

Our legal services are intended for adults aged 18 and above. We do not knowingly collect personal data from minors through our website. Where children's information is provided as part of a family legal matter, that information is handled with additional care and used solely for the purposes of the matter.

9. External Links

Our website may contain links to external sites. We are not responsible for the privacy practices of those sites and recommend reviewing their privacy policies independently.

10. Changes to This Policy

We may update this policy from time to time to reflect changes in our practices or legal requirements. The updated date at the top of this page will reflect any revision. Continued use of our website following an update constitutes acceptance of the revised policy.