Legal Documentation
Privacy Policy
Last Updated: 28 March 2026 · Meridian Counsel · Kuala Lumpur, Malaysia
Meridian Counsel ("we", "our", or "the firm") is committed to handling personal data responsibly. This policy describes how we collect, use, store, and protect information provided to us, in accordance with the Personal Data Protection Act 2010 (PDPA) of Malaysia.
If you have questions about this policy or how your data is handled, please contact us at [email protected].
1. Data Controller
The data controller for personal information collected through this website and our engagement processes is Meridian Counsel, 22 Jalan Raja Chulan, 50200 Kuala Lumpur, Malaysia.
2. What Personal Data We Collect
We may collect the following personal data when you contact us or engage our services:
- Full name
- Email address
- Telephone number
- Business name and role (where relevant)
- Details of your legal enquiry or matter (provided voluntarily)
- Technical data: IP address, browser type, and pages visited (via cookies and analytics)
We collect only the information that is reasonably necessary for the purpose of responding to your enquiry or delivering the agreed services.
3. How We Collect Data
Personal data is collected through the following means:
- Contact forms submitted on this website
- Direct email or telephone communications
- In-person meetings and consultations
- Cookies and analytics tools on this website (see Section 7)
4. Legal Basis for Processing
We process personal data on the following lawful bases under the PDPA 2010:
- Consent: Where you have submitted your details through our contact form or requested information.
- Contract: Where processing is necessary to deliver agreed legal services.
- Legitimate interests: For purposes such as maintaining client records and improving our services, where these interests are not overridden by your rights.
- Legal obligation: Where required by applicable Malaysian law or professional regulatory requirements.
5. How We Use Your Data
Personal data collected is used for the following purposes:
- Responding to enquiries and arranging consultations
- Delivering the legal services you have engaged us for
- Maintaining records required under professional and regulatory obligations
- Communicating relevant updates about your matter
- Improving the functionality of our website (anonymised analytics data only)
We do not use personal data for unsolicited marketing communications without your prior consent.
6. Data Sharing
We do not sell or trade personal data. Information may be shared with third parties only in the following circumstances:
- With service providers who assist in operating this website or our practice (e.g., hosting providers), under data processing agreements
- With regulatory bodies, courts, or government authorities where required by law
- With other parties where you have given explicit consent
All third parties who handle personal data on our behalf are required to do so in compliance with applicable data protection laws.
7. Cookies
This website uses cookies to support basic functionality and to understand how visitors interact with our content. For detailed information on the types of cookies used and your management options, please refer to our Cookie Policy.
8. Data Security
We take reasonable technical and organisational steps to protect personal data from unauthorised access, disclosure, alteration, or destruction. These measures include secure servers, access controls, and confidentiality obligations on all staff who handle client data.
In the event of a data breach that is likely to affect your rights or interests, we will notify affected individuals and the relevant authority in accordance with applicable requirements.
9. Data Retention
Personal data collected through enquiry forms is retained for up to 12 months from the date of last contact, unless a legal engagement has commenced, in which case data is retained for the duration of the engagement and for a period of seven years thereafter, as required under applicable professional rules.
10. Your Rights Under the PDPA 2010
Under Malaysian data protection law, you have the right to:
- Access the personal data we hold about you
- Request correction of inaccurate or incomplete data
- Withdraw consent to processing at any time (where processing is consent-based)
- Request that we cease processing your data for direct marketing purposes
- Lodge a complaint with the Personal Data Protection Commissioner
To exercise any of these rights, please write to us at [email protected].
11. Children's Privacy
Our services are directed at individuals aged 18 and above. We do not knowingly collect personal data from minors. If you believe a minor has submitted data to us, please contact us promptly so that we may take appropriate steps.
12. Third-Party Links
This website may contain links to external websites. We are not responsible for the privacy practices of those sites and encourage you to review their policies independently.
13. Changes to This Policy
We may update this policy from time to time to reflect changes in our practices or legal requirements. The "Last Updated" date at the top of this page will be revised accordingly. Continued use of this website following an update constitutes acceptance of the revised policy.
14. Contact
For any questions or requests relating to this privacy policy or your personal data, please contact:
Meridian Counsel
22 Jalan Raja Chulan, 50200 Kuala Lumpur, Malaysia
Email: [email protected]
Tel: +60 3-2078 5194