Privacy Policy

1. Introduction

verdantid is committed to protecting the personal data of individuals who engage with our practice. This Privacy Policy explains what personal data we collect, how we use it, the legal basis for that use, and the rights you have in relation to it. It applies to all personal data collected through our website and in the course of our legal advisory engagements.

verdantid operates in Malaysia and processes personal data in accordance with the Personal Data Protection Act 2010 (PDPA 2010). For questions about this policy, contact us at [email protected].

2. Data We Collect

We collect the following categories of personal data:

• Contact information: name, email address, telephone number, and business address where provided.
• Engagement information: details about the legal matter you have engaged us to advise on, including commercial background, ownership arrangements, and related business information.
• Website usage data: technical data collected through cookies and analytics tools about how you interact with our website.
• Communication records: emails, written summaries, and other correspondence arising from an engagement.

Data is collected through the contact form on our website, during intake conversations, and through the course of the engagement itself.

3. How We Use Your Data

We use personal data for the following purposes:

• To respond to enquiries and conduct the intake stage of an engagement.
• To prepare and deliver the legal advisory services you have engaged us to provide.
• To maintain records of engagements for legal and professional obligation purposes.
• To understand how our website is used so we can improve its content and functionality (analytics cookies, where consented).

We do not use personal data for marketing purposes without separate consent and we do not sell personal data to third parties.

4. Legal Basis for Processing

We process personal data on the following legal bases under the PDPA 2010:

• Consent: where you have submitted a contact form or provided personal data voluntarily.
• Contract: where processing is necessary to perform the legal advisory engagement you have agreed to.
• Legal obligation: where processing is required to comply with professional obligations or applicable law.

5. Data Retention

Engagement records are retained for seven years following the close of the engagement in accordance with applicable professional obligations. Contact enquiries that do not result in an engagement are retained for twelve months. Website usage data is retained in accordance with the retention periods of the analytics tools used, typically no longer than 26 months.

6. Data Security

We apply appropriate technical and organisational measures to protect personal data against unauthorised access, disclosure, or loss. Document exchange with clients is conducted through access-controlled channels. Our systems are reviewed periodically and access is restricted to personnel who require it for their work.

In the event of a personal data breach that is likely to affect your interests, we will notify you without undue delay in accordance with our obligations under the PDPA 2010.

7. Third Parties

We do not share personal data with third parties for marketing or commercial purposes. Where third parties are engaged to assist with service delivery (such as secure document storage or analytics tools), we ensure that appropriate data processing arrangements are in place. We may be required to share data with regulatory or legal authorities where obligated by law.

Our website may contain links to external sites. We are not responsible for the privacy practices of those sites and recommend reviewing their privacy policies.

8. Cookies

We use cookies to understand how visitors use our website. Details of the cookies we use and how to manage your preferences are set out in our Cookie Policy.

9. Your Rights

Under the PDPA 2010, you have the following rights in relation to your personal data:

• Right of access: to request a copy of the personal data we hold about you.
• Right of correction: to request correction of inaccurate personal data.
• Right to withdraw consent: where processing is based on consent, to withdraw that consent at any time without affecting the lawfulness of processing before withdrawal.
• Right to prevent processing: to request that we cease processing your data for specific purposes where that processing is causing distress or likely to cause damage.

To exercise any of these rights, contact us at [email protected]. We will respond within 21 days.

10. Children's Privacy

Our services are directed at businesses and individuals aged 18 and over. We do not knowingly collect personal data from individuals under the age of 18.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Where changes are material, we will notify clients by email where we hold contact details. Continued use of our website following a policy update constitutes acknowledgement of the revised policy.

12. Contact

Data controller: verdantid, Suite 18-03, Menara Hap Seng, Jalan P. Ramlee, 50250 Kuala Lumpur.

Email: [email protected]

Telephone: +60 3-2783 4621