Privacy Policy

1. Introduction

Wasiat Seri ("we", "us", "our") is a legal practice registered in Sabah, Malaysia, providing pension legal services. We are committed to handling all personal information we receive with care, discretion, and in full compliance with the Personal Data Protection Act 2010 (PDPA 2010) of Malaysia.

This Privacy Policy explains what personal data we collect, how we use it, and the rights available to you. It applies to all individuals who contact us, engage our services, or visit our website at wasiatseri.club.

For questions about this policy, contact us at: [email protected]

2. Data We Collect

We may collect the following categories of personal data:

• Identity data: Full name, date of birth, identity card number
• Contact data: Phone number, email address, postal address
• Employment and pension data: Employer history, contribution records, pension scheme details, scheme reference numbers
• Family data: Details of nominees or family members included in protection arrangements (with their consent where required)
• Correspondence: Emails, written communications, and notes from consultations
• Technical data: IP address, browser type, and visit data collected via website cookies

We collect this data directly from you (via our contact form, in-person consultations, or telephone), from relevant pension bodies where you have authorised us to act on your behalf, and automatically from your browser when you visit our website.

3. How We Use Your Data

We use personal data for the following purposes:

• Providing the legal services you have engaged us to perform
• Communicating with you about your matter, including progress updates
• Preparing and submitting legal documents to the relevant authorities
• Complying with our legal and professional obligations under Malaysian law
• Maintaining records of our legal engagement as required by professional rules
• Improving our website and services based on anonymised usage data

We do not use personal data for unsolicited marketing, and we do not share it with third parties for advertising purposes.

4. Legal Basis for Processing

Our legal basis for processing personal data under PDPA 2010 and applicable principles includes:

• Consent: Where you provide data via our contact form or during consultation
• Contract: Where processing is necessary to deliver the legal service you have engaged
• Legal obligation: Where we are required by law or professional rules to retain records
• Legitimate interest: For basic website analytics and service improvement

5. Data Retention

We retain personal data for as long as necessary to fulfil the purposes described in this policy, and in compliance with professional obligations. Legal files are typically retained for a minimum of seven years following the close of a matter, in accordance with standard legal practice requirements in Malaysia. Anonymised website analytics data is retained for up to twelve months.

6. Data Sharing

We share personal data only where necessary:

• Pension authorities: EPF, KWAP, and other relevant bodies, where we have been engaged to act on your behalf
• Regulatory bodies: Bar Council Malaysia or the Sabah Law Association, if required for professional compliance
• Professional advisors: Accountants or other legal professionals, only with your prior consent

We do not sell or rent personal data to any third party.

7. Data Security

We implement appropriate physical and digital security measures to protect your data, including:

• Secure document storage with restricted access
• Password-protected digital systems
• Encrypted email for sensitive communications where applicable
• Staff access limited to those handling your matter

In the event of a data breach affecting your rights, we will notify you and the relevant authority in accordance with applicable obligations.

8. Cookies

Our website uses cookies to understand how visitors navigate the site. These are described in our Cookie Policy. You may manage your cookie preferences at any time via that page.

9. Your Rights

Under the PDPA 2010, you have the following rights regarding your personal data:

• Right of access: Request a copy of the personal data we hold about you
• Right to correction: Request correction of inaccurate or incomplete data
• Right to withdraw consent: Withdraw consent for processing, where consent is the basis
• Right to prevent processing for direct marketing: We do not conduct direct marketing; this right applies as a matter of principle
• Right to make inquiries: Ask questions about how your data is handled

To exercise any of these rights, contact us at [email protected]. We will respond within 21 days.

10. Third-Party Links

Our website may contain links to external sites, including pension bodies and government portals. We are not responsible for the privacy practices of those sites and recommend you review their policies independently.

11. Children's Privacy

Our services are intended for adults aged 18 and above. We do not knowingly collect personal data from individuals under 18. If you believe a minor has provided data to us, contact us so we can take appropriate steps.

12. Updates to This Policy

We may update this Privacy Policy from time to time. The date at the top of this page reflects when the policy was last revised. Continued use of our services after a revision constitutes acceptance of the updated policy.

13. Contact

For all data protection enquiries, contact: