Privacy Policy

1. Introduction

Vennwright ("we", "us", "our") is committed to protecting the personal data of individuals who contact or engage with our practice. This Privacy Policy explains how we collect, use, store, and protect personal data in the course of providing legal services and operating our website at vennwright.club.

This policy is prepared in accordance with the Personal Data Protection Act 2010 (Malaysia) ("PDPA") and applies to all personal data processed by Vennwright. Our registered address is Suite 18-03, Menara Binjai, 2 Jalan Binjai, 50450 Kuala Lumpur.

2. Data We Collect

We collect the following categories of personal data:

• Identity data: Full name
• Contact data: Email address, telephone number, postal address
• Matter data: Details you provide about your legal matter, including pension scheme information, employment history, and financial figures relevant to your case
• Technical data: IP address, browser type, pages visited, via cookies and analytics tools
• Correspondence: Emails, messages, and communications submitted through this website or by other means

We collect this data directly from you through our website contact form, by email, by telephone, or in person.

3. Legal Basis and Purpose of Processing

We process personal data on the following legal bases:

• Consent: For website enquiries and communications, where you have provided information voluntarily through this site
• Contractual necessity: Where we have entered into a solicitor-client engagement and need to process your data to fulfil our obligations
• Legitimate interests: For analytics, website improvement, and to respond to general enquiries
• Legal obligation: Where we are required to retain records under applicable professional conduct rules or anti-money laundering regulations

4. Data Retention

We retain personal data for the following periods:

• Enquiries that did not result in engagement: 12 months from date of enquiry
• Client files following conclusion of a matter: 7 years, in accordance with professional conduct requirements
• Website analytics data: 26 months

After the applicable retention period, data is securely deleted or anonymised.

5. Data Sharing

We do not sell or share personal data for commercial purposes. We may share data in limited circumstances:

• With pension administrators, employers, or tribunals where required in the course of handling your legal matter, and with your knowledge
• With IT service providers operating under confidentiality obligations
• Where required by law, regulation, or court order
• With the Bar Council of Malaysia where required by professional conduct rules

6. Data Security

We implement appropriate technical and organisational measures to protect personal data against unauthorised access, loss, or disclosure. These include:

• Encrypted email communications for sensitive client data
• Password-protected and access-controlled document management systems
• Restricted access to client files on a need-to-know basis within the practice
• Physical security measures at our chambers

In the event of a personal data breach that is likely to result in harm, we will notify affected individuals and, where required, the relevant authority, in accordance with applicable law.

7. Cookies

Our website uses cookies for essential functionality and, where consent has been provided, for analytics purposes. Please refer to our Cookie Policy for full details of the cookies used and how to manage your preferences.

8. Your Rights

Under the PDPA 2010, you have the following rights:

• Access: Request a copy of the personal data we hold about you
• Correction: Request correction of inaccurate or incomplete data
• Withdrawal of consent: Where processing is based on consent, you may withdraw it at any time
• Objection: Object to processing based on legitimate interests where you have grounds to do so
• Complaint: Lodge a complaint with the Personal Data Protection Commissioner of Malaysia

To exercise any of these rights, contact us at [email protected]. We will respond within 21 days.

9. Third-Party Links

Our website may contain links to external websites, including court portals, regulatory bodies, and statutory agencies. We are not responsible for the privacy practices of those sites. We recommend reviewing the privacy policy of any third-party site you visit.

10. Children's Privacy

Our services are intended for individuals aged 18 and over. We do not knowingly collect personal data from individuals under 18. If you believe we have inadvertently received data from a minor, please contact us and we will delete it promptly.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be noted on this page with an updated date. We encourage you to review the policy periodically. Continued use of this website following changes constitutes acceptance of the updated policy.

12. Contact

For data protection enquiries, please contact: