Privacy Policy

1. Introduction

indigo pa ("we", "our", "us") is committed to protecting the personal data of our clients and website visitors. This Privacy Policy explains how we collect, use, store, and protect your personal information in accordance with the Personal Data Protection Act 2010 (PDPA) of Malaysia.

This policy applies to all personal data collected through our website, contact forms, email correspondence, and in-person consultations. By using our website or engaging our services, you acknowledge that you have read and understood this policy.

For questions regarding this policy, please contact us at [email protected].

2. Data We Collect

We collect personal data that you provide directly to us, including your name, email address, phone number, and any details you share about your legal matter through our contact form or during consultations. We also collect technical data through cookies and analytics tools, such as IP addresses, browser type, and pages visited.

We do not collect sensitive personal data unless it is directly relevant to the legal service you have engaged us to provide, and only with your explicit consent.

3. How We Use Your Data

We use your personal data for the following purposes: to respond to your enquiries and provide the legal services you have requested, to communicate with you about your matter, to comply with our legal and regulatory obligations as a Malaysian legal practice, and to improve our website and services through aggregated analytics.

We will not use your personal data for marketing purposes unless you have given us specific consent to do so. You may withdraw this consent at any time.

4. Legal Basis for Processing

Under the PDPA, we process your personal data on the following grounds: your consent, which you provide when submitting a contact form or engaging our services; the necessity of processing for the performance of a contract between us; compliance with legal obligations applicable to our practice; and our legitimate interest in operating and improving our services.

5. Data Sharing

We do not sell, trade, or rent your personal data to third parties. We may share your data with courts, government agencies (such as LHDN), or other parties only when necessary for the provision of your legal service and with your knowledge, or when required by law.

Our website may use third-party analytics services (such as Google Analytics) which process anonymised usage data. These services have their own privacy policies.

6. Data Protection Measures

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These include encrypted digital storage systems, password-protected access controls, and secure physical filing for any hard-copy documents. We regularly review our security practices and update them as necessary.

7. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected. For client engagement records, we follow the retention periods required by the Malaysian Bar Council and applicable legislation, which is typically seven years after the conclusion of a matter. Contact form submissions from non-clients are retained for up to 12 months.

8. Cookies

Our website uses cookies to improve your browsing experience and to collect anonymised analytics data. For detailed information about the cookies we use and how to manage your preferences, please see our Cookie Policy.

9. Your Rights

Under the PDPA, you have the right to access the personal data we hold about you, to request correction of any inaccurate data, to withdraw consent for processing where consent was the basis, and to request that we limit or cease processing of your data in certain circumstances.

To exercise any of these rights, please contact us at [email protected]. We will respond to your request within 21 days as required by the PDPA.

10. Third-Party Links

Our website may contain links to third-party websites. We are not responsible for the privacy practices or content of those sites. We encourage you to read the privacy policies of any external websites you visit.

11. Children's Privacy

Our services are intended for individuals aged 18 and above. We do not knowingly collect personal data from children under 18. If you believe we have inadvertently collected such data, please contact us so that we can take appropriate action.

12. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated revision date. We encourage you to review this policy periodically. Continued use of our website or services after any changes constitutes your acceptance of the updated policy.

13. Contact Information

If you have questions or concerns about this Privacy Policy or how we handle your personal data, please contact us:

indigo pa
20 Jalan Hang Jebat, Level 7, The Weld, 50150 Kuala Lumpur
Email: [email protected]
Phone: +60 3-2174 5896

If you are not satisfied with our response, you may lodge a complaint with the Department of Personal Data Protection (JPDP), which is the supervisory authority under the PDPA in Malaysia.