Privacy Policy

1. Introduction

ironbopa ("we", "us", "our") is committed to protecting the privacy and personal data of our clients and website visitors. This Privacy Policy explains how we collect, use, store, and safeguard your information in accordance with the Personal Data Protection Act 2010 (PDPA) of Malaysia.

This policy applies to all personal data collected through our website, contact forms, email communications, and in-person consultations. If you have any questions about this policy, please contact us at [email protected].

2. Data We Collect

We may collect the following categories of personal data:

Contact Information: Your name, email address, phone number, and postal address when you submit an enquiry through our contact form or communicate with us directly.

Engagement Information: Details related to the legal services we provide to you, including case files, correspondence, and supporting documents you share with us.

Website Usage Data: Technical information collected through cookies and analytics tools, such as your IP address, browser type, pages visited, and time spent on our site.

Payment Information: Billing details provided for the purpose of invoicing and payment processing, handled through secure third-party payment providers.

3. How We Use Your Data

We use your personal data for the following purposes:

Service Delivery: To provide legal services, respond to your enquiries, and communicate about your engagement with us.

Legal Compliance: To fulfil our obligations under Malaysian law and professional regulations set by the Malaysian Bar Council.

Website Improvement: To analyse how our website is used and to improve its functionality and content.

Communication: To send you updates related to your matter or, with your consent, information about our services that may be relevant to you.

4. Legal Basis for Processing

We process your personal data on the following legal grounds under the PDPA 2010:

Consent: Where you have provided your explicit consent, such as when submitting a contact form or agreeing to receive communications.

Contractual Necessity: Where processing is necessary for the performance of a contract with you or to take steps at your request before entering into a contract.

Legal Obligation: Where we are required to process your data to comply with Malaysian law or professional duties.

Legitimate Interest: Where processing is necessary for our legitimate interests, such as improving our services, provided this does not override your rights.

5. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected. Contact form submissions are retained for up to twelve months unless you become a client, in which case engagement records are retained for a period of seven years following the conclusion of your matter, in line with the Malaysian Bar Council's record-keeping requirements. Website analytics data is retained for up to twenty-four months.

6. Data Security

We take appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These measures include encrypted communications, secure file storage, restricted access to client records, and regular security reviews of our systems and processes.

7. Cookies

Our website uses cookies to enhance your browsing experience and to collect analytical data about site usage. You can manage your cookie preferences through our cookie settings or by adjusting your browser settings. For more details, please refer to our Cookie Policy.

8. Third-Party Sharing

We do not sell or rent your personal data to third parties. We may share your data with trusted service providers who assist us in operating our website and conducting our business, such as hosting providers and analytics platforms. These parties are contractually required to keep your data confidential and to use it only for the purposes we specify. We may also disclose your data where required by law or by order of a Malaysian court.

9. Your Rights

Under the Personal Data Protection Act 2010, you have the following rights in respect of your personal data:

Right of Access: You may request a copy of the personal data we hold about you.

Right to Correction: You may request that we correct any inaccurate or incomplete data.

Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time.

Right to Limit Processing: In certain circumstances, you may request that we restrict how we process your data.

To exercise any of these rights, please contact us at [email protected]. We will respond to your request within the timeframe prescribed by the PDPA.

10. Third-Party Links

Our website may contain links to external websites. We are not responsible for the privacy practices or content of those sites. We encourage you to review the privacy policies of any third-party sites you visit.

11. Children's Privacy

Our services are not directed at individuals under the age of eighteen. We do not knowingly collect personal data from minors. If we become aware that we have collected data from a person under eighteen without appropriate consent, we will take steps to delete that data promptly.

12. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or in applicable law. Any significant changes will be communicated through our website. We encourage you to review this page periodically.

13. Contact Us

Data Controller: ironbopa

Address: 42 Persiaran Gurney, Suite 8-3, Gurney Tower, 10250 George Town, Penang, Malaysia

Email: [email protected]

If you are not satisfied with how we handle your personal data, you have the right to lodge a complaint with the Department of Personal Data Protection Malaysia (JPDP).