Privacy Policy

1. Introduction

Bumi Chambers ("we", "us", "our") is a construction law practice located at 41, Jalan Tun H.S. Lee, 50000 Kuala Lumpur, Malaysia. We are committed to protecting the personal data of individuals who contact us, instruct us, or otherwise interact with our website and services.

This Privacy Policy explains how we collect, use, store, and protect personal data in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA) and its subsidiary regulations. Please read this policy together with our Terms and Conditions and Cookie Policy.

For questions or requests related to this policy, contact us at: [email protected]

2. Data We Collect

Information you provide directly

• Full name and contact details (email address, telephone number)
• Business name, role, and address where provided
• Matter description and contract details submitted via our contact form
• Correspondence sent to us by email or post

Information collected automatically

• IP address and browser type when you visit our website
• Pages visited, time and date of visit, referring URL
• Cookie data as described in our Cookie Policy

Information we do not collect

We do not collect sensitive personal data (such as financial account details, health information, or identification document numbers) through our website contact form. If such data becomes relevant in the course of an engagement, it is handled under a separate matter-specific confidentiality arrangement.

3. How We Use Personal Data

We process personal data for the following purposes:

• Responding to enquiries: To assess and respond to matter outlines and contact form submissions.
• Providing legal services: To fulfil our obligations to clients under an engagement letter or scope of instructions.
• Conflict checking: To identify and manage professional conflicts of interest before accepting instructions.
• Compliance with legal obligations: Including anti-money laundering obligations under the Anti-Money Laundering, Anti-Terrorism Financing and Proceeds of Unlawful Activities Act 2001 (AMLATFPUAA).
• Website analytics: To understand how visitors use our website and to improve it. Analytics data is aggregated and not used to identify individuals.
• Communications: To respond to queries and, where consent has been given, to send updates relevant to our services.

We process personal data on the legal bases of: contractual necessity (for client engagements), legitimate interests (for conflict checks and enquiry responses), legal compliance (for regulatory obligations), and consent (for optional communications and analytics cookies).

4. Data Retention

We retain personal data for the following periods:

• Enquiry data not resulting in an engagement: 12 months from the date of enquiry.
• Matter files for completed engagements: 7 years from the date the matter concluded, in accordance with Malaysian legal professional requirements.
• Conflict check records: 7 years from the date the check was conducted.
• Website analytics data: As configured in our analytics tool, typically 26 months.

After the applicable retention period, personal data is deleted or anonymised.

5. Data Sharing

We do not sell, rent, or trade personal data. We may share data with third parties only in the following circumstances:

• Service providers: Third-party providers who assist us in operating our website or managing communications, subject to confidentiality obligations (e.g. hosting providers, email service providers).
• Professional advisors: Where required in connection with a client engagement, such as co-counsel, barristers, or expert witnesses, under professional confidentiality obligations.
• Regulatory bodies: Where disclosure is required by law, court order, or a competent regulatory authority.
• Adjudicators and arbitrators: In the course of dispute proceedings where the client has instructed us to act.

6. Data Security

We implement appropriate technical and organisational measures to protect personal data against unauthorised access, loss, or destruction. These include:

• Encrypted transmission of data between your browser and our website (HTTPS).
• Access controls limiting internal access to personal data to those who need it for their role.
• Secure storage of matter files and correspondence.
• Regular review of security practices.

In the event of a personal data breach that is likely to result in a risk to affected individuals, we will notify those individuals and the relevant authorities as required under applicable law.

7. Cookies

Our website uses cookies to maintain basic functionality and to understand site usage through analytics. Cookies are small text files stored on your device. For full details on the cookies we use and how to manage your preferences, please read our Cookie Policy.

8. Your Rights Under PDPA 2010

Under the Personal Data Protection Act 2010 (Malaysia), you have the following rights in relation to your personal data:

• Right of access: To request a copy of the personal data we hold about you.
• Right of correction: To request correction of inaccurate or incomplete personal data.
• Right to withdraw consent: Where processing is based on consent, to withdraw that consent at any time.
• Right to limit processing: To request that we limit how we use your personal data in certain circumstances.
• Right to prevent processing for direct marketing: To opt out of receiving marketing communications.

To exercise any of these rights, contact us at [email protected]. We will respond within 21 days. We may need to verify your identity before processing a request.

If you are dissatisfied with our handling of a data protection complaint, you may contact the Department of Personal Data Protection Malaysia (PDPD) at www.pdp.gov.my.

9. Third-Party Links

Our website may contain links to external sites including court portals, regulatory bodies, and professional associations. We are not responsible for the privacy practices of third-party websites. We encourage you to read their privacy policies before providing personal data to them.

10. Children

Our services are directed at legal entities and adults in a professional capacity. We do not knowingly collect personal data from individuals under the age of 18. If we become aware that personal data from a minor has been submitted through our website, we will delete it promptly.

11. Changes to This Policy

We may update this Privacy Policy from time to time. The updated version will be published on this page with a revised "Last Updated" date. Where changes are material, we will take reasonable steps to bring them to your attention. Continued use of our website after the effective date of any change constitutes acceptance of the updated policy.

12. Contact

For all privacy-related queries, requests, or complaints, please contact:

Bumi Chambers
41, Jalan Tun H.S. Lee
50000 Kuala Lumpur, Malaysia
Email: [email protected]
Telephone: +60 3-6419 7852