Privacy Policy

1. Introduction

Oakhelm Legal Advisory ("Oakhelm", "we", "us", or "our") is committed to handling your personal data responsibly and transparently. This Privacy Policy explains what personal data we collect, why we collect it, how we use it, and what rights you have in relation to it.

This policy applies to personal data collected through our website, by telephone, by email, and through our legal advisory services. If you have any questions, please contact us at privacy@oakhelm.

2. Data Controller

The data controller responsible for your personal data is Oakhelm Legal Advisory, 42 Jalan Ampang, 50450 Kuala Lumpur, Malaysia. For data-related enquiries, please write to privacy@oakhelm.

3. Data We Collect

We collect personal data only where necessary for the purposes described in this policy. The types of personal data we may collect include:

• Name, email address, and telephone number (provided via contact form or by telephone)
• Postal address and identification details (required for legal engagement)
• Financial and property information relevant to your matter
• Correspondence and documentation related to your legal matter
• Website usage data collected via cookies and analytics tools (see Cookie Policy)

4. Legal Basis for Processing

We process personal data on the following legal bases in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA 2010):

• Consent: Where you have provided consent, such as via our contact form or cookie consent.
• Contract: Where processing is necessary to fulfil our legal advisory engagement with you.
• Legal obligation: Where we are required to retain or process data by Malaysian law.
• Legitimate interest: For operational purposes such as internal record-keeping and security.

5. How We Use Your Data

• To respond to enquiries submitted via our contact form or by telephone
• To provide, manage, and document our legal advisory services
• To prepare court documents, applications, and correspondence on your behalf
• To comply with professional obligations under Malaysian Bar rules
• To comply with applicable laws and regulations
• To send service-related communications (not marketing communications)

6. Data Sharing

We do not sell your personal data. We may share data only in the following circumstances:

• With courts, opposing counsel, or government bodies as required by your matter
• With third-party service providers who assist our operations (e.g., secure cloud storage), under data processing agreements
• Where required by Malaysian law or a valid legal order

All third parties with whom we share data are required to handle it securely and only for the purposes described.

7. Data Retention

We retain client matter files for a minimum of seven years following the conclusion of a matter, as required by professional practice standards in Malaysia. Website enquiry data is retained for 12 months unless a legal engagement has commenced. Analytics data is retained for 26 months. You may request earlier deletion where this does not conflict with our legal obligations.

8. Data Security

We implement appropriate technical and organisational security measures to protect personal data from unauthorised access, alteration, or disclosure. These include encrypted file storage, access controls limited to named personnel, and regular review of security practices. In the event of a data breach that is likely to result in risk to your rights, we will notify you without undue delay.

9. Cookies

Our website uses cookies to improve functionality and analyse usage. Essential cookies are necessary for the site to operate. Optional cookies (analytics, marketing, preferences) require your consent. For full details, please see our Cookie Policy.

10. Your Rights

Under Malaysia's PDPA 2010, you have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate or incomplete data
• Request deletion of data we are no longer entitled to retain
• Withdraw consent where processing is based on consent
• Object to processing in certain circumstances

To exercise any of these rights, please write to privacy@oakhelm. We will respond within 21 working days. If you are not satisfied with our response, you may refer the matter to Malaysia's Personal Data Protection Department (PDPD).

11. Third-Party Links

Our website may contain links to external websites. We are not responsible for the privacy practices of those sites and encourage you to review their policies before sharing personal data.

12. Children's Privacy

Our services are intended for individuals aged 18 and above. We do not knowingly collect personal data from minors. If you believe a minor has submitted data to us, please contact us promptly so that we may address it.

13. Changes to This Policy

We may update this Privacy Policy from time to time. Where changes are material, we will indicate the updated date at the top of this page. Continued use of our website or services following any update constitutes acceptance of the revised policy.

14. Contact Us

For any privacy-related questions or requests, please contact:

• Email: privacy@oakhelm
• Address: Oakhelm Legal Advisory, 42 Jalan Ampang, 50450 Kuala Lumpur, Malaysia