Privacy Policy

1. Introduction

Bakti Guaman ("we", "us", "our") is committed to handling your personal information responsibly and in accordance with the Personal Data Protection Act 2010 (PDPA) of Malaysia. This Privacy Policy describes what data we collect, how we use it, and the rights you hold as a data subject.

This policy applies to all information collected through our website at https://baktiguaman.world and through any direct engagement with our practice. If you have questions about any aspect of this policy, please contact us at [email protected].

2. Data We Collect

We collect personal data only when it is necessary for providing our legal services or communicating with prospective clients. The categories of data we may collect include:

• Full name and identity particulars
• Contact details (email address, telephone number, postal address)
• Pension and employment records shared for the purpose of obtaining legal advice
• Communication records (emails, correspondence, meeting notes)
• Website usage data collected via cookies (see Section 5 below)

We collect data through the contact form on our website, through direct communications (phone, email, in-person meetings), and through documents you provide to us in the course of our work.

Legal basis for processing: Data is processed on the basis of your consent (where explicitly provided), performance of a contract (where you have engaged our services), legitimate interests (responding to enquiries), and compliance with legal obligations.

Retention periods: Client data is retained for seven years after the conclusion of a matter, in accordance with standard legal practice obligations. Website enquiry data not resulting in a client engagement is retained for twelve months.

3. How We Use Your Data

Personal data collected by Bakti Guaman is used for the following purposes:

• Responding to enquiries submitted through our website or by other means
• Providing pension legal consultation, representation, and protection services
• Maintaining client records and correspondence
• Communicating updates regarding your matter
• Compliance with legal and regulatory obligations
• Improving our website and services through aggregated analytics data

We do not sell, rent, or trade your personal data to third parties. We do not send unsolicited marketing communications.

We may share data with relevant government authorities or pension bodies where this is required to carry out work on your behalf, or where disclosure is required by law. Any such sharing is done only to the extent necessary and with your knowledge where practicable.

4. Data Protection Measures

We take the security of your personal data seriously. The measures we maintain include:

• Restricted access to client files — only personnel directly involved in a matter have access
• Secure storage of physical documents at our Ipoh office
• Password-protected digital systems for client records
• SSL/TLS encryption on our website for data submitted through contact forms
• A data breach response procedure — in the event of a breach affecting your data, you will be notified within 72 hours where required

5. Cookies

Our website uses cookies to improve user experience and to understand how visitors interact with our pages. Cookies we use include necessary cookies (for basic site function), analytics cookies (to understand traffic patterns), and preference cookies (to remember your settings).

You can manage your cookie preferences at any time via our Cookie Policy page. Declining optional cookies will not affect your ability to use our website or contact us.

6. Your Rights Under Malaysian Law

Under the Personal Data Protection Act 2010, you have the following rights with respect to personal data we hold about you:

• Right of access: You may request a copy of the personal data we hold about you.
• Right of correction: You may request that inaccurate or outdated data be corrected.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw it at any time.
• Right to limit processing: In certain circumstances, you may request that we limit how we use your data.
• Right to make a complaint: You may direct complaints to the Department of Personal Data Protection Malaysia (Jabatan Perlindungan Data Peribadi).

To exercise any of these rights, contact us in writing at [email protected] or at our office address below. We aim to respond within 21 days.

7. Third-Party Links

Our website may contain links to external websites, government portals, or other third-party resources. We are not responsible for the privacy practices of those third parties. We recommend reviewing the privacy policies of any external site you visit.

8. Children's Privacy

Our services are intended for adults aged 18 and above. We do not knowingly collect personal data from individuals under 18. If you believe we have inadvertently collected data from a minor, please contact us and we will promptly remove it.

9. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or in applicable law. The revised policy will be posted on this page with an updated date. Continued use of our website after any update constitutes acceptance of the revised policy.

10. Contact for Data Matters

For any questions, requests, or concerns regarding your personal data:

• Email: [email protected]
• Post: Bakti Guaman, Lorong Kledang 9, 30450 Ipoh, Perak, Malaysia
• Phone: +60 5-241 8093