Privacy Policy

1. Introduction

Ironpact ("we", "us", "our") is committed to handling personal data responsibly and in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA). This Privacy Policy explains what personal information we collect, how we use it, and the rights available to individuals in relation to their data. It applies to all visitors to this website and to individuals who contact us or engage our legal services.

If you have questions about this policy, please contact us at [email protected].

2. Data We Collect

We collect personal data in the following categories:

• Contact information: name, email address, telephone number, and business address provided through our contact form or direct communication.
• Matter information: details about your legal enquiry or engagement, which may include information about your business, directors, or proposed transaction.
• Website usage data: IP address, browser type, pages visited, and duration of visit — collected through analytics cookies where you have given consent.
• Communication records: emails, call notes, and meeting records related to an enquiry or active engagement.

3. How We Collect Data

We collect personal data when you complete our contact form, contact us by telephone or email, engage our services, or visit our website. Website analytics data is collected through cookies, subject to your consent preferences.

4. Legal Basis for Processing

We process personal data on the following bases:

• Consent: for optional cookies and marketing communications.
• Contractual necessity: where processing is required to perform legal services you have instructed.
• Legitimate interest: for maintaining client records, improving our services, and responding to enquiries.
• Legal obligation: where Malaysian law requires us to retain or disclose certain records.

5. How We Use Your Data

• To respond to legal enquiries and provide legal services
• To manage ongoing client engagements and related communications
• To comply with Malaysian Bar requirements for client record-keeping
• To improve the performance and usability of this website
• To send relevant service updates where you have consented to receive them

We do not sell, rent, or share personal data with third parties for marketing purposes.

6. Data Retention

We retain client matter files for a minimum of seven years following the conclusion of an engagement, in compliance with Malaysian Bar and PDPA requirements. Website enquiry data not resulting in an engagement is retained for up to 12 months. Analytics data is retained in aggregate form for up to 24 months.

7. Data Protection Measures

We apply appropriate technical and organisational measures to protect personal data, including access controls, encrypted storage for digital records, and restricted internal access to active matter files. Physical documents are stored securely in accordance with Malaysian Bar client file retention standards.

8. Cookies

This website uses cookies for essential functionality and, with your consent, for analytics purposes. See our Cookie Policy for a full explanation of the cookies we use and how to manage your preferences.

9. Third-Party Services

We may use the following third-party services in connection with this website and our practice: Google Analytics (where you have consented to analytics cookies), secure email hosting, and document management systems. These providers are selected on the basis of their data security standards and are not permitted to use your data for their own purposes.

10. Your Rights

Under Malaysia's Personal Data Protection Act 2010, you have the following rights in relation to personal data we hold about you:

• Right to access personal data held about you
• Right to correct inaccurate or incomplete data
• Right to withdraw consent for optional data processing
• Right to limit processing of your data in certain circumstances
• Right to enquire about the purposes for which your data is being processed

To exercise any of these rights, please contact us at [email protected]. We will respond within 21 days.

11. Third-Party Links

This website may contain links to external websites. We are not responsible for the privacy practices of those sites and encourage you to review their privacy policies independently.

12. Children's Privacy

Our services are directed at businesses and individuals aged 18 and over. We do not knowingly collect personal data from minors. If you believe a minor has submitted information to us, please contact us and we will remove it promptly.

13. Policy Updates

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. The updated date at the top of this page will reflect the most recent revision. We encourage you to review this page periodically.

14. Contact

If you have any questions or concerns about this Privacy Policy or how we handle personal data, please contact our privacy team: