Privacy Policy

1. Introduction

Tiang Law ("we", "us", "our") is committed to protecting the personal data of individuals who contact us, engage our services, or visit this website. This policy explains what personal data we collect, how we use it, and your rights under Malaysia's Personal Data Protection Act 2010 (PDPA).

This policy applies to all personal data processed by Tiang Law in connection with our legal services for pension and retirement fund matters. For questions about this policy, please contact us at [email protected].

2. What Personal Data We Collect

We may collect the following categories of personal data:

• Full name, identity card number (where necessary for legal proceedings)
• Contact details: email address, phone number, postal address
• Pension and retirement fund records, employment history, and financial data relevant to your matter
• Correspondence with you and with third-party authorities on your behalf
• Website usage data (via cookies — see Section 6 below)

We collect personal data directly from you when you complete our contact form, attend a consultation, or provide documents for review. We do not collect sensitive data beyond what is strictly necessary for the legal matter.

3. Legal Basis for Processing

We process personal data on the following legal bases under the PDPA 2010:

• Consent: Where you have given explicit consent for us to process your data (e.g., by submitting the website contact form).
• Contract: Where processing is necessary to perform a legal engagement agreement with you.
• Legal obligation: Where we are required to retain or share data under applicable Malaysian law.
• Legitimate interest: For internal record-keeping, quality assurance, and security purposes.

4. How We Use Your Personal Data

Personal data collected is used for the following purposes:

• To respond to enquiries submitted through our website or by phone
• To deliver the legal services agreed under your engagement letter
• To communicate with pension authorities and government bodies on your behalf
• To prepare submissions, assessments, and correspondence related to your matter
• To comply with record-keeping obligations under the Legal Profession Act 1976
• To improve our website and services through aggregated, anonymised analytics

We do not use your data for direct marketing. We will not send promotional communications without your explicit consent.

5. Data Sharing

We share personal data only where necessary and only with:

• Pension authorities, government agencies, or retirement funds as instructed by you
• Professional service providers (e.g., secure document storage) under appropriate confidentiality obligations
• Regulatory or law enforcement authorities where required by Malaysian law

We do not sell, rent, or trade personal data to any third party. All third-party providers we engage are required to process data only for the specific purpose instructed and in compliance with the PDPA.

6. Data Retention

Client files and associated personal data are retained for seven years from the date of completion of the engagement, in accordance with legal professional record-keeping requirements. Website enquiry data not resulting in an engagement is retained for twelve months and then deleted securely.

7. Cookies

This website uses cookies to maintain basic functionality and, where consent is given, to collect anonymous analytics data. You can manage your cookie preferences at any time via our Cookie Policy page. Essential cookies cannot be disabled as they are required for the site to function.

8. Data Protection Measures

We take the security of personal data seriously. Our measures include:

• Access controls limiting data access to authorised staff only
• Secure, encrypted transmission for digital communications where possible
• Physical document security for paper files held at our office
• Regular review of our data handling procedures

In the event of a data breach that affects your rights or interests, we will notify you and, where required, the relevant supervisory authority, within the timeframes required under applicable law.

9. Your Rights Under the PDPA 2010

Under Malaysia's Personal Data Protection Act 2010, you have the right to:

• Access: Request a copy of the personal data we hold about you.
• Correction: Request that inaccurate or incomplete data be corrected.
• Withdrawal of consent: Withdraw consent for processing where consent was the legal basis. This will not affect processing already carried out.
• Object: Object to processing for purposes other than those described in this policy.
• Complaint: Lodge a complaint with the Department of Personal Data Protection (JPDP) if you believe your rights have been infringed.

To exercise any of these rights, please write to us at [email protected] or by post to our registered address. We will respond within thirty days.

10. Third-Party Links

This website may contain links to external websites, including government portals and legal resources. We are not responsible for the privacy practices of those sites and encourage you to review their policies independently.

11. Children's Privacy

Our services are directed at adults (18 years and above). We do not knowingly collect personal data from individuals under the age of 18. If you believe a minor has provided us with personal data, please contact us so we can arrange its deletion.

12. Changes to This Policy

We may update this policy from time to time to reflect changes in our practices or in applicable law. The revised policy will be published on this page with an updated "Last Updated" date. We encourage you to review this page periodically.

13. Contact

For all data protection enquiries, please contact: