Privacy Policy — Sahaja Counsel

1. Introduction

Sahaja Counsel ("we", "us", "our") is committed to handling personal information with care and transparency. This Privacy Policy explains what personal data we collect, why we collect it, how we use and protect it, and what rights you have in relation to it.

This policy applies to all personal data collected through our website at sahajaj.live and through direct engagement with our practice. Our services are governed by Malaysian law, and data handling follows the requirements of the Personal Data Protection Act 2010 (PDPA).

If you have any questions about this policy, please contact us at [email protected].

2. Data We Collect

2.1 Information you provide directly

Full name
Email address
Phone number (if provided)
The content of any message you send through our contact form
Any documents or information shared during a consultation

2.2 Information collected automatically

Browser type and version
Approximate geographic location (country/region level)
Pages visited and time spent on each page
Referring website

2.3 Legal basis for processing

We process personal data on the following bases under the PDPA 2010:

Consent — when you submit the contact form or agree to cookies
Contractual necessity — to deliver the legal services you engage us for
Legitimate interest — to improve our website and respond to general enquiries
Legal obligation — to comply with applicable professional and regulatory requirements

3. How We Use Your Data

To respond to your enquiry and manage your matter
To provide the legal services you have engaged
To send relevant communications about your matter
To maintain records as required by professional regulations
To improve the functionality and content of our website

We do not use personal data for unsolicited marketing. We do not sell, rent, or trade your personal information to any third party.

3.1 Data sharing

We may share limited personal data in the following circumstances:

With the courts or relevant authorities as required in the course of legal proceedings you have engaged us for
With third-party service providers who support our website operations (analytics, hosting), each of whom is bound by appropriate data processing agreements
Where required by law or court order

3.2 Data retention

Contact form submissions are retained for up to 24 months unless a formal engagement commences. Client matter files are retained for a minimum of 7 years following closure of a matter, in line with Malaysian legal professional obligations. You may request deletion of non-legally required data at any time.

4. Data Protection Measures

All data transmitted through our website is encrypted using TLS (HTTPS)
Access to client data is restricted to team members directly involved in the relevant matter
Physical documents containing personal data are stored securely in locked facilities
Digital records are held on password-protected systems with access logging
In the event of a data breach affecting your personal information, we will notify you within a reasonable period and take steps to mitigate harm

5. Cookies

Our website uses cookies to function correctly and to understand how it is used. Cookies are small text files stored on your device. We use:

Essential cookies — required for the site to operate and cannot be disabled
Analytics cookies — to understand page usage patterns (optional, requires your consent)
Preference cookies — to remember your cookie choices (optional)

You can manage cookie preferences at any time via our Cookie Policy page.

6. Your Rights Under the PDPA 2010

Under the Personal Data Protection Act 2010 (Malaysia), you have the following rights in relation to personal data we hold about you:

Right to access — you may request a copy of the personal data we hold about you
Right to correction — you may request that inaccurate data be corrected
Right to withdraw consent — you may withdraw consent to non-essential processing at any time
Right to object to processing — you may object to processing based on legitimate interest
Right to lodge a complaint — you may direct complaints to the Personal Data Protection Commissioner, Malaysia

To exercise any of these rights, please write to us at [email protected]. We will respond within 21 days.

7. Third-Party Links

Our website may contain links to external websites. We are not responsible for the privacy practices of those sites. We encourage you to review the privacy policy of any external site before submitting personal information.

8. Children's Privacy

Our services are intended for adults aged 18 and above. We do not knowingly collect personal data from individuals under 18. If you believe a minor has provided us with personal data, please contact us and we will take steps to remove it.

9. Policy Updates

We may update this policy from time to time to reflect changes in our practices or applicable law. The "Last updated" date at the top of this page will reflect any revision. Continued use of our website following an update constitutes acceptance of the revised policy. For significant changes, we will make reasonable efforts to notify affected users directly.

10. Contact for Privacy Matters

Sahaja Counsel
Unit 12A, Wisma UOA II, 21 Jalan Pinang, 50450 Kuala Lumpur, Malaysia
Email: [email protected]
Phone: +60 3-8924 6173