Legal & Compliance
Privacy Policy
Last Updated: 14 February 2026 | Effective Date: 14 February 2026
seritanahs ("we", "us", "our") takes the privacy of every person who contacts us seriously. This policy describes the personal data we collect, the purposes for which we use it, and the rights available to you under the Personal Data Protection Act 2010 (PDPA) of Malaysia. Please read this carefully before sharing information with us.
1. Data Controller
The data controller responsible for your personal information is:
seritanahs
No. 27, Jalan Molek 1/28, Taman Molek, 81100 Johor Bahru, Johor, Malaysia
Phone: +60 7-3516 8294
Email: [email protected]
2. Personal Data We Collect
Depending on how you interact with us, we may collect the following categories of personal data:
- Identity data: Full name, nationality, NRIC or passport number (where required for legal engagement)
- Contact data: Email address, telephone number, postal or residential address
- Transaction data: Property details, transaction values, land title particulars relevant to your matter
- Communication data: Content of enquiry forms, emails, or messages sent to us
- Technical data: IP address, browser type, device information, and pages visited (via analytics cookies, if consented)
We collect only what is necessary for the purpose at hand. We do not collect sensitive personal data (e.g. health, race, or political opinion) unless strictly required by applicable law for a specific matter.
3. How We Collect Your Data
We collect personal data through the following means:
- Enquiry and contact forms on this website
- Direct email or telephone correspondence
- Client engagement documentation at the start of a legal matter
- Cookies and analytics tools (only where you have consented via the cookie banner on this site)
- Third parties such as referring agents or other parties to a property transaction, where relevant to your matter
4. Legal Basis for Processing
Under the PDPA 2010 and applicable Malaysian law, we process your personal data on the following bases:
Consent
Where you have submitted an enquiry form or opted in to marketing communications, we rely on your consent. You may withdraw consent at any time by contacting us.
Contractual Necessity
Where processing is necessary to perform legal services you have engaged us for, or to take steps at your request before entering a client agreement.
Legal Obligation
Where processing is required to comply with Malaysian law, including the National Land Code, Stamp Act, Legal Profession Act, or Anti-Money Laundering requirements.
Legitimate Interests
For general business administration, service improvement, and fraud prevention, where those interests do not override your rights.
5. How We Use Your Data
Personal data collected is used for the following purposes:
- Responding to your enquiries and providing quotations
- Delivering conveyancing and legal advisory services you have engaged
- Preparing and filing legal documents on your behalf with Land Offices, State Authorities, and LHDN
- Sending matter progress updates and milestone notifications
- Issuing invoices and recording payments
- Maintaining client records as required by law or professional standards
- Improving our website and understanding how visitors use it (with consent)
We will not use your data for automated profiling, unsolicited marketing to third parties, or any purpose incompatible with those listed above.
7. Data Retention Periods
We retain personal data for as long as necessary given the purpose for which it was collected:
| Data Category | Retention Period | Basis |
|---|---|---|
| Client matter files (conveyancing) | 7 years from completion | Legal Profession (Practice & Etiquette) Rules |
| Accounting and financial records | 7 years | Companies Act / Income Tax Act |
| Enquiry form submissions (no engagement) | 12 months | Legitimate interest |
| Website analytics data | Up to 26 months | Consent |
| Marketing communications (if opted in) | Until consent withdrawn | Consent |
On expiry of the retention period, data is securely deleted or anonymised.
8. Data Security
We implement appropriate technical and organisational measures to protect your personal data, including:
- TLS/SSL encryption for data transmitted via this website
- Password-protected and access-restricted document systems
- Role-based access controls — staff access only data needed for their function
- Physical security for document storage at our premises
- Regular review of data handling practices
In the unlikely event of a data breach that creates a risk to your rights, we will notify you and the relevant authorities in accordance with applicable requirements.
10. Your Rights
Under the PDPA 2010 and other applicable Malaysian legislation, you have the following rights regarding your personal data:
Right of Access
You may request a copy of the personal data we hold about you.
Right of Correction
You may request correction of inaccurate or incomplete personal data.
Right to Withdraw Consent
Where processing is based on consent, you may withdraw it at any time. This does not affect the lawfulness of processing before withdrawal.
Right to Limit Processing
You may request that we cease using your data for direct communication purposes.
Right to Lodge a Complaint
If you believe we have not handled your data appropriately, you may lodge a complaint with the Personal Data Protection Commissioner of Malaysia (Department of Personal Data Protection, Cyberjaya).
To exercise any of these rights, please contact us at [email protected]. We will respond within 21 working days.
11. Children's Privacy
Our services are intended for adults aged 18 and above. We do not knowingly collect personal data from minors. If you believe a minor has provided us with personal data without appropriate consent, please contact us at [email protected] and we will take steps to remove the information.
12. Third-Party Links
This website may contain links to external sites — for example, government portals such as the National Land Code registry or LHDN. These external sites have their own privacy policies, and we have no responsibility or liability for their content or practices. We encourage you to review the privacy notice of any third-party site you visit.
13. Policy Updates
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or applicable law. When we do, the "Last Updated" date at the top of this page will be revised. Where changes are material, we will take reasonable steps to notify you — for example, by placing a notice on our website. Continued use of our services after the revised policy is posted indicates your acceptance of the updated terms.
14. Contact Us
If you have questions, concerns, or requests regarding this Privacy Policy or the handling of your personal data, please get in touch:
seritanahs — Data Privacy Enquiries
Email: [email protected]
Phone: +60 7-3516 8294
Address: No. 27, Jalan Molek 1/28, Taman Molek, 81100 Johor Bahru, Johor
Office Hours: Monday–Friday, 9:00 am – 5:30 pm (MYT)