Privacy Policy

1. Introduction

quoruopa ("we", "our", or "us") is committed to protecting the privacy and personal data of our clients, website visitors, and anyone who engages with our services. This Privacy Policy explains how we collect, use, store, and protect your personal information in accordance with the Personal Data Protection Act 2010 (PDPA) of Malaysia.

This policy applies to all personal data collected through our website, contact forms, consultations, and any other interactions with our firm. If you have questions about this policy, please contact us at [email protected].

2. Data We Collect

We may collect the following categories of personal data:

Contact information: Your name, email address, phone number, and postal address when you submit an enquiry or contact us.

Advisory engagement data: Documents, correspondence, and information you provide during the course of a legal advisory engagement.

Website usage data: Technical information such as your IP address, browser type, pages visited, and time spent on our website, collected through cookies and analytics tools.

Communication records: Records of our correspondence with you, including emails, meeting notes, and phone call summaries.

3. How We Use Your Data

We use the personal data we collect for the following purposes:

Service delivery: To provide legal advisory services, respond to your enquiries, and manage our professional relationship with you.

Communication: To send you relevant information about your matter, appointment confirmations, and follow-up correspondence.

Website improvement: To understand how visitors use our website and to improve its functionality and content.

Legal compliance: To comply with legal obligations, regulatory requirements, and professional standards applicable to our practice.

4. Legal Basis for Processing

Under the PDPA, we process your personal data on the following legal bases:

Consent: When you submit a contact form or provide information during a consultation, you consent to our use of that data for the stated purposes.

Contractual necessity: Processing required to perform our advisory services as agreed with you.

Legitimate interest: Processing that is necessary for our legitimate business interests, such as maintaining records and improving our services, provided it does not override your rights.

5. Data Retention

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected. Contact form submissions are retained for up to 24 months. Advisory engagement files are retained for a minimum of seven years after the conclusion of the engagement, in accordance with professional record-keeping requirements in Malaysia. Website analytics data is retained for up to 26 months.

After these periods, data is securely deleted or anonymised.

6. Data Protection Measures

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or misuse. These measures include encrypted file storage systems, access controls limiting data access to authorised personnel, secure communication channels for sensitive information, regular review of security practices, and physical security measures at our office premises.

In the unlikely event of a data breach, we will notify affected individuals and the relevant authorities in accordance with PDPA requirements.

7. Cookies

Our website uses cookies to improve your browsing experience and to gather usage analytics. For detailed information about the types of cookies we use and how to manage your preferences, please refer to our Cookie Policy.

8. Third-Party Sharing

We do not sell, trade, or rent your personal data to third parties. We may share data with trusted service providers who assist us in operating our website or conducting our practice, provided they agree to keep your information confidential. We may also disclose personal data when required by law, court order, or regulatory authority.

9. Your Rights

Under the PDPA, you have the following rights regarding your personal data:

Right of access: You may request a copy of the personal data we hold about you.

Right to correction: You may request that we correct any inaccurate or incomplete personal data.

Right to withdraw consent: You may withdraw your consent to our processing of your personal data at any time.

Right to prevent processing: You may request that we stop processing your personal data in certain circumstances.

To exercise any of these rights, please contact us at [email protected]. We will respond to your request within 21 days.

10. Third-Party Links

Our website may contain links to external websites. We are not responsible for the privacy practices or content of those sites. We encourage you to review the privacy policies of any third-party websites you visit.

11. Children's Privacy

Our services are not directed at individuals under the age of 18. We do not knowingly collect personal data from minors. If you believe a minor has provided us with personal data, please contact us and we will take steps to delete that information.

12. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated "Last Updated" date. We encourage you to review this policy periodically. Continued use of our website after changes constitutes acceptance of the updated policy.

13. Contact Information

Data Controller: quoruopa

Email: [email protected]

Address: 11 Jalan Telawi 3, Level 2, Bangsar Village II Office Suite, 59100 Kuala Lumpur

Supervisory Authority: For complaints regarding data protection, you may contact the Department of Personal Data Protection (JPDP), Malaysia.