Legal · Privacy
Privacy Policy
Pravum is committed to handling the personal information of everyone who contacts us with care and discretion. This policy explains what data we collect, how it is used, and what choices are available to you.
Contents
01
Data We Collect
When you interact with Pravum — whether through our contact form, telephone, or email — we may collect the following categories of personal data:
- Identity data: Your name and, where relevant to your matter, identification details.
- Contact data: Email address, telephone number, and postal address where provided.
- Matter-related data: Information you share concerning your legal situation during consultations or in correspondence.
- Technical data: IP address, browser type, and pages visited, collected automatically when you access our website.
- Cookie data: Preferences stored via browser cookies or local storage.
Legal Basis
Data is collected under your consent (e.g., contact form submission), for the performance of legal services you have requested, or to comply with obligations under Malaysian law, including the Personal Data Protection Act 2010 (PDPA).
Retention
Matter-related data is retained for a minimum of seven years following the conclusion of an engagement, in line with professional obligations. General enquiry data is retained for up to 24 months unless you request earlier deletion.
02
How We Use Your Data
Personal data collected is used solely for purposes directly connected to our work with you or the operation of this website:
- Responding to enquiries submitted via the contact form or by telephone.
- Providing criminal defence consultation and representation services as agreed in an engagement letter.
- Complying with obligations imposed by the Malaysian Bar, the courts, or applicable legislation.
- Improving the performance and usability of this website through aggregated, anonymised analytics data.
- Sending you correspondence relevant to a matter you have engaged us on.
We do not sell personal data to third parties, nor do we share it for marketing purposes. Disclosure to third parties occurs only where required for the conduct of your legal matter (e.g., senior counsel, court officers) or as required by law.
03
Data Protection
We apply appropriate technical and organisational measures to protect the personal data we hold:
Encrypted Transmission
All data transmitted via this website is protected using TLS encryption.
Secure Storage
Client files are stored on access-controlled systems with restricted authorisation.
Access Controls
Only staff members involved in a matter have access to the corresponding client data.
Breach Response
In the event of a data breach, affected individuals will be notified promptly in accordance with applicable requirements.
05
Your Rights
Under the Personal Data Protection Act 2010 (Malaysia) and applicable data protection principles, you have the right to:
Access
Request a copy of the personal data we hold about you.
Rectification
Request correction of inaccurate or incomplete data.
Erasure
Request deletion of your data where it is no longer necessary for the purpose it was collected, subject to our professional and legal obligations to retain certain records.
Objection
Object to processing carried out on the basis of legitimate interest.
Withdrawal of consent
Withdraw consent at any time where processing is based on consent, without affecting the lawfulness of prior processing.
Complaint
Lodge a complaint with the Department of Personal Data Protection Malaysia (JPDP) if you believe your data rights have been infringed.
To exercise any of these rights, please contact us at [email protected].
06
Third-Party Links
This website may contain links to external resources such as court websites, legal databases, or government portals. Pravum is not responsible for the privacy practices of those sites. We encourage you to review the privacy notice of any external site before providing personal information.
07
Children's Privacy
Our services are directed at individuals aged 18 and above. We do not knowingly collect personal data from persons under 18 without the involvement and consent of a parent or legal guardian. If you believe a minor's data has been submitted to us in error, please contact us so that we may address the matter appropriately.
08
Policy Updates
This policy is reviewed periodically and updated as our practices change or as legal requirements evolve. The date at the top of this page reflects when the policy was last revised. Material changes will be noted prominently. Continued use of this website after any revision constitutes acceptance of the updated terms.
09
Contact
For any questions regarding this policy, to make a data subject request, or to raise a concern about how your information has been handled, please use the contact details below.