Privacy Policy

1. Introduction

Mata Pusaka ("we", "us", "our") is a legal practice registered in Malaysia and located at No. 23, Jalan Datuk Sulaiman, 60000 Taman Tun Dr Ismail, Kuala Lumpur. We are committed to handling the personal information of our clients and website visitors responsibly and in accordance with the Personal Data Protection Act 2010 (PDPA 2010) of Malaysia.

This policy explains what personal data we collect, why we collect it, how it is used, and what rights you hold in relation to it. If you have questions about this policy, please contact us at privacy@matapusad.

2. Data We Collect

We collect personal data in the following circumstances:

• Enquiry and contact forms: Name, email address, and telephone number. Message content you provide.
• Client engagement: Identity documents, pension and KWSP statements, EPF records, family and estate information shared with us in the course of legal work.
• Website use: Browser type, pages visited, and approximate location — collected via analytics cookies where you have consented.
• Correspondence: Emails, letters, and notes from telephone conversations you initiate.

We do not collect sensitive personal data (such as health information) unless it is directly relevant to a legal matter you have instructed us on, in which case we obtain your explicit consent.

3. How We Use Your Data

Personal data is used to:

• Respond to your enquiry and arrange an initial consultation
• Deliver the legal services you have engaged us to provide
• Correspond with pension authorities and government bodies on your behalf, with your consent
• Maintain legal file records required under Malaysian Bar Council rules
• Send administrative communications about your matter (never marketing without your consent)
• Improve our website using aggregated, anonymised analytics data

The legal basis for processing under PDPA 2010 is: your consent, the performance of a legal services contract, and our legitimate interest in maintaining proper professional records.

4. Data Retention

Client files are retained for a minimum of seven years after the conclusion of a matter, in accordance with Malaysian Bar Council professional obligations. Website enquiry data not resulting in a legal engagement is deleted within twelve months. Analytics data is retained in aggregate form only.

5. Data Sharing

We do not sell or rent your personal data. We share data only in the following circumstances:

• With your explicit consent: For example, when corresponding with the Employees Provident Fund, the Pensions Division, or Amanah Raya Berhad on your behalf.
• Service providers: Our secure file storage provider operates under a data processing agreement and does not access client data for its own purposes.
• Legal obligation: Where disclosure is required by Malaysian law or a court order.

6. Data Security

Client files are stored in access-controlled systems. Physical documents are held in locked cabinets accessible only to the legal team. Email communications containing sensitive information are sent using encrypted connections. We conduct periodic reviews of our data handling practices. In the event of a data breach affecting your personal information, we will notify you and the relevant authority as required by law.

7. Cookies

Our website uses essential cookies to function and, where you have consented, optional analytics cookies to understand how the site is used. We do not use advertising or tracking cookies. For full details, please read our Cookie Policy.

8. Your Rights Under PDPA 2010

Under the Personal Data Protection Act 2010, you have the right to:

• Access the personal data we hold about you
• Correct inaccurate or incomplete personal data
• Withdraw consent for optional processing (such as analytics cookies)
• Request information about how your data is being used
• Lodge a complaint with the Department of Personal Data Protection (JPDP) if you believe your rights have not been respected

To exercise any of these rights, please write to us at privacy@matapusad. We aim to respond within 21 days.

9. Third-Party Links

Our website may contain links to external sites, including government portals (EPF, KWSP, MyGov). We are not responsible for the privacy practices of those sites and encourage you to read their respective policies.

10. Children's Privacy

Our services are intended for adults aged 18 and above. We do not knowingly collect personal data from individuals under 18. If you believe we have inadvertently done so, please contact us at the address below and we will delete the information promptly.

11. Changes to This Policy

We may update this policy from time to time to reflect changes in law or our practices. The updated policy will be published on this page with a revised "Last Updated" date. We will notify active clients of material changes by email or post.

12. Contact

Data Controller: Mata Pusaka
No. 23, Jalan Datuk Sulaiman, 60000 Taman Tun Dr Ismail, Kuala Lumpur
Email: privacy@matapusad
Phone: +60 13-487 5926