Privacy Policy

1. Introduction

Foxglove Legal ("we," "us," or "our") is committed to protecting the privacy and personal data of our clients, website visitors, and anyone who communicates with us. This Privacy Policy explains how we collect, use, store, and safeguard your personal information in compliance with the Personal Data Protection Act 2010 (PDPA) of Malaysia.

If you have questions about this policy, please contact us at [email protected].

2. Data We Collect

We may collect the following categories of personal data:

Contact information: Your name, email address, phone number, and postal address when you submit a form on our website or contact us directly.

Engagement details: Information relevant to the legal matter you engage us for, including documents, correspondence, and case-related materials.

Website usage data: Information collected through cookies and analytics tools, such as pages visited, time on site, browser type, and device information.

Communication records: Records of emails, phone calls, and messages exchanged with our office.

3. How We Collect Your Data

We collect personal data through several means: when you fill out the contact form on our website, when you engage us for legal services, when you correspond with us via email or phone, and through cookies placed on your browser when you visit our website. We do not collect personal data from third parties without your knowledge.

4. How We Use Your Data

Your personal data is used for the following purposes:

Service delivery: To provide the legal services you have engaged us for, to communicate with you about your matter, and to manage our client relationship.

Communication: To respond to your enquiries, send relevant updates about your matter, and provide information you have requested.

Website improvement: To understand how visitors use our website and to improve its functionality and content.

Legal compliance: To meet our obligations under Malaysian law, including the Legal Profession Act 1976 and the PDPA 2010.

5. Legal Basis for Processing

We process your personal data based on one or more of the following grounds: your consent (which may be withdrawn at any time), the necessity to perform a contract or engagement with you, compliance with a legal obligation, and our legitimate interests in operating and improving our legal practice, provided those interests do not override your fundamental rights.

6. Data Retention

We retain personal data for as long as necessary to fulfil the purposes outlined in this policy. Client engagement files are retained for a minimum of six years after the conclusion of the matter, in accordance with Malaysian Bar Council guidelines. Website analytics data is retained for up to 26 months. Contact form submissions are retained for up to 12 months if no engagement follows.

7. Data Protection Measures

We take the security of your data seriously and have implemented measures including secure storage systems with restricted access, password-protected digital files and encrypted communications where appropriate, physical security for paper records held at our office, and regular review of our data handling procedures. While we take reasonable steps to protect your information, no method of transmission over the Internet or electronic storage is entirely secure.

8. Cookies

Our website uses cookies to improve your browsing experience. For detailed information about the types of cookies we use and how to manage your preferences, please see our Cookie Policy.

9. Third-Party Sharing

We do not sell or rent your personal data to any third party. We may share your information in limited circumstances: with courts, government bodies, or regulatory authorities when required by law; with professional service providers who assist us in operating our website (such as hosting and analytics providers), subject to appropriate data protection agreements; and with other legal professionals if a referral is necessary and you have given your consent.

10. Your Rights

Under the PDPA 2010, you have the right to access your personal data held by us by making a written request, to correct any personal data that is inaccurate or incomplete, to withdraw your consent for processing at any time (which may affect our ability to continue providing services), and to make a complaint to the Department of Personal Data Protection if you believe your data has been mishandled.

To exercise any of these rights, please contact us at [email protected].

11. Third-Party Links

Our website may contain links to other websites. We are not responsible for the privacy practices of those external sites and encourage you to read their privacy policies separately.

12. Children's Privacy

Our services are not directed at individuals under the age of 18. We do not knowingly collect personal data from minors. If you believe we have inadvertently collected data from a person under 18, please contact us and we will take steps to delete it promptly.

13. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with a revised "Last Updated" date. We encourage you to review this policy periodically.

14. Contact Us

Data Controller: Foxglove Legal

Address: 14 Lorong Kuda, Level 3, Wisma Lim Foo Yoong, 30250 Ipoh, Perak

Email: [email protected]

Phone: +60 5-3182 7465

Supervisory Authority: Department of Personal Data Protection (Jabatan Perlindungan Data Peribadi), Ministry of Communications and Digital, Malaysia.