Privacy Policy

1. Who We Are

Tuah Estate is a legal services firm operating under Malaysian law, located at No. 88, Jalan Hang Jebat, 75200 Melaka, Malaysia. We act as the data controller for personal information collected through this website and in the course of delivering our services. References to "we", "us", or "our" throughout this policy refer to Tuah Estate.

2. Information We Collect

We may collect the following categories of personal data:

• Identity data: full name, date of birth, identification number (MyKad/passport)
• Contact data: email address, telephone number, mailing address
• Enquiry data: the subject and content of messages submitted via our contact form
• Technical data: IP address, browser type, pages visited, session duration (via analytics cookies, where consent is given)
• Engagement data: records of correspondence, appointment dates, and service history
• Estate-related data: asset details, beneficiary information, and testamentary instructions — only where directly provided by the client for service delivery

We do not collect sensitive categories of data (such as health records or financial account numbers) unless strictly necessary for the scope of an engagement, and only with your explicit awareness.

3. How We Collect Your Data

• Through the contact form on this website
• During in-person or telephone consultations
• Via email correspondence initiated by you
• Through analytics and cookie tools, subject to your consent
• From publicly available sources such as the National Registration Department or court records, where required by law or engagement scope

4. Legal Basis for Processing

We process your personal data on the following grounds under the Personal Data Protection Act 2010 (PDPA) and, where applicable, the General Data Protection Regulation (GDPR):

• Contractual necessity: to deliver the services you have engaged us to provide
• Legitimate interests: to respond to enquiries and maintain our professional practice
• Legal obligation: to comply with Malaysian legal, regulatory, and court requirements
• Consent: for analytics cookies and non-essential communications, where you have opted in

5. How We Use Your Data

• To respond to your enquiries and schedule consultations
• To draft and administer legal documents on your behalf
• To communicate updates relevant to your engagement
• To comply with our obligations under Malaysian law, including anti-money laundering requirements
• To improve our website and understand how visitors interact with our content (analytics, with consent)
• To send occasional service-related communications — you may opt out at any time

We do not sell, rent, or trade your personal data to third parties for marketing purposes.

6. Data Sharing

We may share your data with the following parties, only where necessary:

• Amanah Raya Berhad and appointed trustees: for will registration and trust administration
• The High Court of Malaya: for probate and estate administration proceedings
• Regulatory authorities: where required by law or court order
• Technology service providers: hosting, email, and analytics platforms operating under data processing agreements

All third-party processors are required to maintain confidentiality and handle data in a manner consistent with this policy.

7. Data Retention

• Client files: retained for a minimum of 7 years following the conclusion of an engagement, in accordance with Malaysian legal practice standards
• Website enquiries: retained for 2 years unless converted into a client engagement
• Analytics data: retained for up to 14 months (Google Analytics default) where consent is given
• Cookie preferences: stored locally in your browser until manually cleared or re-set

8. Data Security

We take appropriate technical and organisational measures to protect your data from unauthorised access, disclosure, alteration, or loss. These include:

• Encrypted communications (SSL/TLS) for all data transmitted through this website
• Access controls limiting data to personnel with a direct need
• Physical security for paper-based files held at our Melaka office
• Regular review of our information handling practices

In the event of a data breach that poses a risk to your rights, we will notify you and the relevant authority in a timely manner in accordance with applicable law.

9. Cookies

This website uses cookies to operate correctly and, with your consent, to gather anonymised analytics. Cookies are categorised as essential, analytics, marketing, and preference cookies. Full details are provided in our Cookie Policy. You may manage your preferences at any time from that page.

10. Your Rights

Under the PDPA 2010 and, where applicable, the GDPR, you have the right to:

• Access the personal data we hold about you
• Correct inaccurate or incomplete data
• Withdraw consent for processing based on consent at any time
• Request erasure of your data, subject to our legal obligations
• Object to processing for marketing purposes
• Portability of data you have provided, in a structured format
• Lodge a complaint with the Personal Data Protection Commissioner of Malaysia (pdp.gov.my) if you believe your rights have been infringed

To exercise any of these rights, please write to us at [email protected] or by post to our Melaka address. We will respond within 21 days.

11. Third-Party Links

This website may contain links to external resources such as government registries or court portals. We are not responsible for the privacy practices of those sites. We encourage you to review their policies before submitting any personal information.

12. Children's Privacy

Our services are intended for adults aged 18 and above who have legal capacity to enter into agreements. We do not knowingly collect personal data from minors through this website. Information relating to minor beneficiaries is handled only within the context of a client engagement and with the client's explicit instruction.

13. International Transfers

Your data is primarily processed within Malaysia. Where we use cloud-hosted services that may process data in other jurisdictions, we ensure that appropriate safeguards are in place — including data processing agreements and standard contractual clauses — to maintain a level of protection consistent with Malaysian law.

14. Changes to This Policy

We may update this policy from time to time to reflect changes in our practices or in applicable law. The revised policy will be published on this page with an updated date. Continued use of our website following any change constitutes acceptance of the updated policy. Material changes will be communicated directly to existing clients where appropriate.

15. Contact for Privacy Matters

For questions, access requests, or concerns relating to your personal data, please contact us:

• Email: [email protected]
• Address: No. 88, Jalan Hang Jebat, 75200 Melaka, Malaysia
• Phone: +60 6-2834 7162