Privacy Policy
Effective Date: 1 January 2026
1. Overview
Messrs S.K. Song ("the Firm", "we", "us", or "our") respects the privacy of every individual who interacts with our website at lawfirmjb.com ("the Site") or engages our legal services. This Privacy Policy outlines the types of personal data we may collect, the purposes for which we process that data, and the safeguards we have in place to protect it. This policy is prepared in accordance with the Personal Data Protection Act 2010 (Act 709) ("PDPA") as applicable in Malaysia.
2. Categories of Personal Data We Collect
We may collect and process the following categories of personal data:
- Identity and contact information: Full name, identity card number, residential or business address, telephone number, and email address provided when you submit an enquiry through our contact form, call our offices, or visit us in person.
- Case-related information: Details pertaining to legal matters you discuss with us after a solicitor-client relationship has been formally established through an engagement letter.
- Technical and usage data: IP address, browser type and version, operating system, referring URLs, pages viewed, and time spent on those pages. This data is collected automatically when you visit the Site, typically through cookies and similar tracking technologies.
3. Purposes of Processing
We process personal data for the following purposes:
- To respond to enquiries and requests submitted through the Site's contact form or via email
- To assess whether we are able to accept instructions and to manage the onboarding of new clients
- To deliver, manage, and administer the legal services for which we have been engaged
- To comply with obligations under the Legal Profession Act 1976, the Anti-Money Laundering, Anti-Terrorism Financing and Proceeds of Unlawful Activities Act 2001, and other applicable regulatory requirements
- To improve the content, structure, and usability of the Site
- To communicate with you regarding appointments, case updates, or administrative matters
4. Disclosure to Third Parties
The Firm does not sell, lease, or trade personal data to any third party for commercial purposes. We may share your data only in the following limited circumstances:
- When you have provided explicit consent for us to do so
- When disclosure is required or authorised by any written law, court order, or directive from a regulatory authority
- With professional advisers, auditors, or service providers engaged by the Firm who are themselves bound by confidentiality obligations
- To the extent necessary for the conduct of litigation or the fulfilment of our professional duties as advocates and solicitors
5. Data Security Measures
We implement reasonable technical and organisational measures to protect personal data held by the Firm against unauthorised or accidental access, processing, erasure, loss, or alteration. These measures include restricting access to personal data on a need-to-know basis, maintaining secure digital storage systems, and enforcing confidentiality obligations on all staff and counsel. Nonetheless, no system connected to the Internet can be guaranteed completely secure, and the Firm cannot warrant absolute security for data transmitted online.
6. Cookies and Tracking Technologies
The Site uses cookies and similar technologies to facilitate navigation, analyse aggregate usage patterns, and enhance the visitor experience. A cookie is a small text file placed on your device by your web browser. You can configure your browser to reject cookies or to alert you when a cookie is being set; however, doing so may affect the functionality of certain parts of the Site. We do not use cookies to collect personally identifiable information without your knowledge.
7. Third-Party Services
The Site incorporates certain third-party services. Google Forms is used for the contact submission form, and Google Analytics may be employed to aggregate and analyse traffic data. Each of these services operates under its own privacy policy, and we encourage you to review those policies if you have concerns about how they handle data. The Firm does not control the data practices of these third-party providers.
8. Your Rights Under the PDPA
The Personal Data Protection Act 2010 grants data subjects specific rights in relation to their personal data. Subject to the provisions of the Act, you are entitled to:
- Request access to your personal data held by the Firm and obtain a copy of such data
- Request the correction of any personal data that is inaccurate, incomplete, or outdated
- Withdraw your consent to the processing of personal data at any time by notifying us in writing, subject to any overriding legal or contractual obligations
To exercise any of these rights, please submit a written request to the contact details provided below. We will endeavour to respond within the timeframe prescribed by the PDPA.
9. Retention of Personal Data
Personal data is retained for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable law or regulatory guidance. Client files are generally retained for a minimum period in line with the Malaysian Bar's recommended practice, after which they are securely destroyed or anonymised.
10. Amendments to This Policy
The Firm reserves the right to update or amend this Privacy Policy at any time. Any revisions will be posted on this page together with the revised effective date. We encourage visitors to review this page periodically to stay informed of any changes.
11. Contact the Firm
For questions or concerns about this Privacy Policy or our handling of personal data, please contact:
Messrs S.K. Song
No. 7A, Jalan Kuning Dua, Taman Pelangi, 80400 Johor Bahru, Johor, Malaysia
Tel: 07-334 2188
Email: permasjaya@sksong.com