Privacy Policy

Zamrud is committed to handling your personal information with care and transparency. This policy explains what data we collect, how we use it, and the choices you have.

Last Updated: 16 June 2025  |  Effective Date: 16 June 2025

1. Introduction

Zamrud ("we", "us", or "our") is a legal services practice located at Jalan Tebrau 205, 80250 Johor Bahru, Johor, Malaysia. We assist families and individuals with inheritance matters, will drafting, probate, and estate administration.

This Privacy Policy describes how we collect, process, store, and protect personal information when you interact with us — whether through our website, contact form, email, or telephone. It also describes the rights available to you under the Personal Data Protection Act 2010 (PDPA) of Malaysia and other applicable laws.

If you have any questions about this policy or our data practices, you are welcome to reach us at [email protected].

2. Personal Data We Collect

We collect only the information necessary to respond to your enquiry or to deliver the legal services you have engaged us for. This may include:

Contact Information

  • Full name
  • Email address
  • Telephone number
  • Postal address (where relevant)

Matter-Related Information

  • Details of the estate or matter
  • Relationship to the deceased
  • Identity documents (where required by law)
  • Other information you voluntarily provide

Website Usage Data

  • Pages visited and time spent
  • Browser type and device information
  • IP address (anonymised where possible)
  • Referral source

Cookie Data

  • Cookie consent preferences
  • Analytics identifiers
  • Session information

Legal basis: We process your data on the basis of your consent (when you submit our contact form or accept cookies), our legitimate interest in responding to enquiries and improving our services, or the necessity to fulfil a legal or contractual obligation.

Retention: Contact enquiry data is retained for up to 12 months from last contact unless you become a client, in which case records are retained as required by professional and legal obligations — typically 7 years. Analytics data is retained for no more than 26 months.

3. How We Use Your Information

Your personal data may be used for the following purposes:

  • Responding to your enquiry or request for a consultation
  • Providing and administering legal services you have engaged
  • Keeping records required under professional conduct rules and Malaysian law
  • Sending service-related communications (appointment reminders, document requests)
  • Understanding how our website is used so we can improve it
  • Complying with legal or regulatory obligations

We do not use your personal data for unsolicited marketing. We will not sell, rent, or trade your information to third parties for commercial purposes.

4. Data Sharing and Disclosure

We share personal data only in the following circumstances:

  • Service providers: Third-party tools we use for website analytics or communication, who are contractually bound to process data only on our instructions and in accordance with this policy.
  • Legal obligations: Government bodies, courts, or regulatory authorities where we are required by law to disclose information.
  • Matter necessities: Courts, land registries, financial institutions, or other parties involved in administering your estate or legal matter — with your knowledge and, where appropriate, your consent.
  • Professional advisers: Accountants, valuers, or other professionals engaged to assist with your matter.

We will not disclose your information to any third party without your consent unless required to do so by law or professional obligation.

5. How We Protect Your Data

We take reasonable steps to protect your personal information from unauthorised access, loss, misuse, or alteration. Measures in place include:

  • Secure, password-protected systems for client records
  • Encrypted email for sensitive communications
  • Access limited to staff and advisers who need the information to carry out their duties
  • Regular review of data handling practices
  • Physical security at our office premises

In the event of a data breach that is likely to affect your rights, we will notify you and the relevant authority as required under applicable law.

6. Cookies

Our website uses cookies to help us understand how visitors use the site and to remember your preferences. Essential cookies are necessary for the site to function. We also use optional analytics and preference cookies, which are only activated with your consent.

You can review the types of cookies we use, manage your preferences, or withdraw consent at any time by visiting our Cookie Policy page.

7. Your Rights

Under the Personal Data Protection Act 2010 (Malaysia) and applicable data protection principles, you have the right to:

Access

Request a copy of the personal data we hold about you.

Rectification

Ask us to correct inaccurate or incomplete data.

Erasure

Request deletion of your data where there is no lawful reason for us to retain it.

Objection

Object to processing of your data where we rely on legitimate interest.

Portability

Receive your data in a commonly used, machine-readable format where technically feasible.

Withdraw Consent

Withdraw consent at any time without affecting prior lawful processing.

To exercise any of these rights, write to us at [email protected]. We will respond within 21 days. You may also lodge a complaint with the Department of Personal Data Protection (JPDP) Malaysia if you feel your rights have not been respected.

8. Third-Party Links

Our website may contain links to external websites for your convenience. We are not responsible for the content or privacy practices of those sites. We encourage you to read their privacy policies before sharing personal information with them.

9. Children's Privacy

Our services are intended for persons aged 18 and above. We do not knowingly collect personal data from minors. If you believe we have inadvertently received information from a person under 18, please contact us so we can remove it.

10. Changes to This Policy

We may update this policy from time to time to reflect changes in our practices or applicable law. The revised version will be published on this page with an updated "Last Updated" date. Where changes are material, we will take reasonable steps to bring them to your attention.

11. Contact Us

If you have questions about this policy or wish to exercise your data rights, please reach out to us:

Zamrud

Jalan Tebrau 205, 80250 Johor Bahru, Johor, Malaysia