Privacy Policy

1. Introduction

Harmoni Chambers ("we", "us", "our") is committed to handling personal data with care and in compliance with the Personal Data Protection Act 2010 (Malaysia) ("PDPA"). This policy explains what data we collect, how we use it, how we protect it, and the rights available to you in relation to it.

This policy applies to personal data collected through our website at harmonic.cyou, through telephone enquiries, and through our legal services engagement process. For questions about this policy, please write to [email protected].

2. Data We Collect

Information you provide directly

• Full name and contact details (telephone, email address)
• Nature of your legal enquiry or matter
• Correspondence and documents shared in connection with a legal matter
• Information provided through our website contact form

Information collected automatically

• Browser type, device type, and IP address
• Pages visited and time spent on our website
• Cookie data (see Section 6 below)

Legal basis for processing

• Consent — for marketing communications and non-essential cookies
• Performance of a contract — when we engage to provide legal services
• Legitimate interests — for website analytics and security
• Legal obligation — where we are required to retain records by law or professional rules

Retention periods

• Enquiry data (not resulting in engagement): deleted after 12 months
• Client matter files: retained for a minimum of 7 years after matter closure, in line with professional obligations under the Legal Profession Act 1976
• Website analytics data: retained for up to 26 months

3. How We Use Your Data

• To respond to your enquiry and arrange consultations
• To deliver legal services we have been engaged to provide
• To comply with our professional obligations as solicitors under Malaysian law
• To improve our website and understand how it is used
• To send you service-related communications (e.g. appointment confirmations)
• To send you marketing information, only where you have expressly consented

We do not sell your personal data to third parties. We do not share your data with advertising networks. Information shared with us in the context of a legal matter is protected by legal professional privilege in addition to the provisions of this policy.

4. Data Sharing

We may share data in the following limited circumstances:

• Courts and government bodies — where required in the conduct of your legal matter
• Professional advisors — barristers, valuers, or expert witnesses engaged in connection with your matter, with your knowledge
• IT service providers — who process data on our behalf for website hosting and analytics, under strict data processing agreements
• Legal or regulatory requirement — if we are required to disclose information by law or a valid court order

5. Data Protection Measures

• Client files are stored in secure, access-controlled systems with restricted staff access
• Website data is transmitted using standard SSL/TLS encryption
• We conduct periodic reviews of our data handling and security procedures
• In the event of a data breach affecting your personal data, we will notify you promptly and take appropriate steps to limit any harm

6. Cookies

Our website uses cookies to support basic functionality and to understand how visitors use the site. You can manage your cookie preferences at any time through our Cookie Policy page, which also provides full detail on the types of cookies used and their purposes.

7. Your Rights

Under the Personal Data Protection Act 2010 (Malaysia), you have the following rights in relation to your personal data held by us:

• Right of access — to request a copy of the personal data we hold about you
• Right of correction — to request that inaccurate or incomplete data be corrected
• Right to withdraw consent — at any time, where processing is based on consent (this does not affect processing already carried out)
• Right to limit processing — to request that we limit how we use your data in certain circumstances

To exercise any of these rights, please contact us at [email protected] or write to us at our office address. We will respond within 21 days. Requests to access data may be subject to a processing fee as permitted under the PDPA.

If you believe your data has been mishandled, you may lodge a complaint with the Department of Personal Data Protection Malaysia (pdp.gov.my).

8. Third-Party Links

Our website may contain links to external websites. We are not responsible for the privacy practices of those sites and encourage you to review their privacy policies separately. A link from our site does not constitute endorsement of any third-party service or its data handling practices.

9. Children's Privacy

Our services are intended for adults (persons aged 18 and over). We do not knowingly collect personal data from children. If you believe a child has provided personal data to us, please contact us and we will take steps to remove it promptly.

10. Changes to This Policy

We may update this policy from time to time to reflect changes in law or our practices. The date at the top of this page will be updated accordingly. Continued use of our website or services following any update constitutes acceptance of the revised policy.

11. Contact

Data Controller: Harmoni Chambers
Address: 41, Jalan Dato Onn Jaafar, 30300 Ipoh, Perak, Malaysia
Telephone: +60 5-253 8471
Privacy enquiries: [email protected]