Privacy Policy

1. Introduction

Sauh Law ("we", "us", "our") is committed to handling personal information responsibly and in accordance with Malaysian law. This Privacy Policy explains how we collect, use, store, and protect personal data provided to us through our website and in the course of providing pension legal services.

This policy applies to all individuals who contact us, use our website at sauh.live, or engage our services. It should be read alongside our Terms & Conditions and Cookie Policy.

Questions about this policy may be directed to [email protected].

2. Personal Data We Collect

We collect the following categories of personal information:

• Contact information: Name, email address, telephone number, and postal address where provided
• Matter information: Details about your pension situation, fund membership, employment history, and related documents shared with us
• Communication records: Copies of emails, messages, and letters exchanged in connection with an enquiry or engagement
• Website usage data: Browser type, pages visited, time spent on pages, and IP address (collected via cookies and analytics tools where consent is given)

We collect this information through our website contact form, direct email and telephone communications, and documents provided during a legal engagement. We do not collect sensitive personal data beyond what is necessary for the pension legal services we provide.

3. Legal Basis for Processing

We process personal data on the following legal bases under the Personal Data Protection Act 2010 (Malaysia):

• Contractual necessity: To provide the legal services you have engaged us to perform
• Legitimate interests: To communicate about enquiries, manage our practice operations, and improve our services
• Consent: For optional analytics cookies and marketing communications, where you have provided explicit consent
• Legal obligation: Where we are required to retain records under Malaysian law or Bar Council rules

4. How We Use Your Information

Personal data is used for the following purposes:

• Responding to enquiries and providing an initial assessment of your matter
• Delivering the pension legal services outlined in our service agreement
• Corresponding with pension authorities, fund bodies, and government departments on your behalf
• Maintaining records of engagements as required by professional conduct obligations
• Sending service-related communications, including updates on your matter
• Improving our website and understanding how visitors use it (analytics, with consent only)

We do not use your personal data for unsolicited marketing. We do not sell or transfer personal data to third parties for their own marketing purposes.

5. Data Sharing

We share personal data only in the following circumstances:

• Pension authorities and government bodies: Where you have engaged us to correspond on your behalf (EPF, KWAP, relevant ministries)
• Service providers: Third-party tools used to operate our website and manage communications, bound by confidentiality obligations
• Legal requirements: Where disclosure is required by law, court order, or Bar Council direction

All sharing with pension authorities is done with your explicit instruction as part of the engagement.

6. Data Retention

We retain personal data for the following periods:

• Enquiries not resulting in engagement: 12 months from the date of last contact
• Completed engagement files: 7 years from the date of completion, in accordance with Malaysian legal practice requirements
• Website analytics data: Up to 26 months (anonymised)

After the applicable retention period, personal data is securely deleted or anonymised.

7. Data Protection Measures

We take reasonable steps to protect personal data from unauthorised access, loss, or misuse, including:

• Secure email and document management systems
• Access controls limiting file access to the relevant practitioner and support staff
• Physical file security for any paper-based matter documents
• Regular review of data handling practices

In the event of a data breach affecting your personal information, we will notify you and the relevant authority as required by the Personal Data Protection Act 2010.

8. Cookies

Our website uses cookies to function properly and, where you consent, to understand how visitors use the site. Full details of the cookies we use, their purpose, and how to manage your preferences are set out in our Cookie Policy.

9. Your Rights Under Malaysian Law

Under the Personal Data Protection Act 2010 (PDPA), you have the following rights in relation to your personal data held by us:

• Right of access: To request a copy of the personal data we hold about you
• Right of correction: To request that inaccurate or incomplete data be corrected
• Right to withdraw consent: Where processing is based on consent, to withdraw it at any time without affecting prior processing
• Right to limit processing: To request that we restrict use of your data in certain circumstances
• Right to raise a complaint: To raise concerns with the Department of Personal Data Protection Malaysia (JPDP)

To exercise any of these rights, contact us at [email protected]. We will respond within 21 days.

10. Third-Party Links

Our website may contain links to external sites — for example, the EPF or KWAP websites — for your convenience. We are not responsible for the privacy practices of those sites and encourage you to review their policies separately.

11. Children's Privacy

Our services are intended for adults (18 years and over). We do not knowingly collect personal data from individuals under 18. If you believe a minor has provided us with personal information, please contact us and we will take appropriate steps to remove it.

12. Changes to This Policy

We may update this Privacy Policy from time to time. Any material changes will be noted with a revised "Last Updated" date at the top of this page. Continued use of our website or services after an update constitutes acceptance of the revised policy.

13. Contact Information

For any privacy-related enquiry, correction request, or complaint, please contact: