Privacy Policy

1. About Us (Data Controller)

Mesra Bakti is a family law practice operating from Unit 5-2, Solaris Dutamas, Jalan Dutamas 1, 50480 Kuala Lumpur, Malaysia. For privacy-related enquiries, please contact us at [email protected] or by telephone at +60 3-6209 4871.

2. What Personal Data We Collect

We collect personal data that you provide directly to us and data generated through your use of our website:

• Contact information: name, email address, telephone number
• Communication content: messages submitted through our contact form or sent by email
• Matter-related information: details you share in the course of receiving our services
• Technical data: IP address, browser type, pages visited, referring URLs (via cookies and analytics tools)
• Usage preferences: cookie consent choices stored locally in your browser

3. How We Collect Data

• Directly from you through our contact form, telephone calls, or in-person consultations
• Through cookies and analytics tools when you visit our website
• Via email correspondence before, during, or after an engagement

4. Legal Basis for Processing

Under Malaysia's Personal Data Protection Act 2010 (PDPA), we process your personal data on the following grounds:

• Consent: when you submit a contact form or agree to cookies
• Contractual necessity: to provide the legal services you have engaged us for
• Legitimate interest: to respond to enquiries and maintain our website
• Legal obligation: where required by Malaysian law or court order

5. How We Use Your Data

• To respond to your enquiries and schedule consultations
• To provide the family law services you have requested
• To prepare legal documents, correspondence, and case materials on your behalf
• To fulfil our legal and professional obligations as practitioners
• To improve the quality and performance of our website
• To communicate service updates or changes to our terms (where you have consented)

6. Data Retention

Matter-related personal data is retained for a minimum of seven years following the conclusion of a matter, in accordance with professional legal obligations in Malaysia. Website enquiry data is retained for up to two years. Analytics data is retained in aggregated, anonymised form. You may request earlier deletion where this is not precluded by our professional obligations — please see Section 9.

7. Data Sharing

We do not sell personal data. We may share your data with:

• Opposing parties and their legal representatives — only as required by the nature of your matter and with your knowledge
• Courts and regulatory bodies — where required by law or court order
• Website analytics providers — in aggregated, pseudonymous form (e.g. Google Analytics), where you have consented to analytics cookies
• IT service providers — who process data on our behalf under appropriate data processing agreements

8. Data Protection Measures

We take the security of your personal information seriously. Measures in place include encrypted data transmission (HTTPS), restricted access controls, regular security reviews, secure document handling procedures, and staff training on data protection obligations under the PDPA 2010. In the unlikely event of a data breach affecting your rights, we will notify you as required by law.

9. Your Rights Under Malaysian Law

Under the Personal Data Protection Act 2010, you have the right to:

• Access the personal data we hold about you
• Correct inaccurate or incomplete personal data
• Withdraw your consent to processing at any time (where processing is based on consent)
• Request that we cease processing your data for direct marketing purposes
• Lodge a complaint with the Department of Personal Data Protection Malaysia

To exercise any of these rights, please contact us at [email protected]. We will respond within 21 days.

10. Cookies

Our website uses cookies to function and improve your experience. For full details of the cookies we use and how to manage your preferences, please see our Cookie Policy.

11. Third-Party Links

Our website may contain links to external sites. We are not responsible for the privacy practices of those sites and encourage you to review their privacy policies independently.

12. Children's Privacy

Our services are intended for adults aged 18 and above. We do not knowingly collect personal data from individuals under 18 without appropriate parental or guardian consent. If you believe we have inadvertently collected data from a minor, please contact us promptly.

13. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. Any material changes will be communicated via a notice on our website. The date at the top of this page always shows the most recent revision.

14. Contact Us

For any privacy-related questions or to exercise your rights, please reach us at: