Privacy Policy

1. Introduction

Khunacad ("the firm", "we", "us") is committed to handling your personal data with care and in accordance with the Personal Data Protection Act 2010 (PDPA) of Malaysia. This policy explains what data we collect, how we use it, how long we retain it, and what rights you have in relation to it.

This policy applies to individuals who visit our website, submit enquiries through our contact form, or engage with the firm through correspondence. By using our website or contacting us, you acknowledge this policy.

Questions about this policy should be directed to [email protected].

2. Data We Collect

Personal data you provide directly

When you submit an enquiry through our contact form or write to us by email, we collect:

• Your name
• Your email address
• Your telephone number (if provided)
• The content of your message or enquiry

Data collected automatically

When you visit our website, certain technical data may be collected automatically, including your IP address, browser type, pages visited, and the time and date of your visit. This data is used for website maintenance and security purposes only.

Cookies

Our website uses cookies to manage your preferences and improve your experience. See our Cookie Policy for full details.

Legal basis for processing

We process your personal data on the following legal bases: (a) your consent, given when you submit a contact form; (b) legitimate interest, in operating and improving our website; and (c) performance of a contract, where an engagement has been agreed.

Retention periods

Enquiry data is retained for up to 24 months from the date of first contact, unless an engagement is entered, in which case correspondence and engagement records are retained for seven years from the conclusion of the engagement, in accordance with applicable record-keeping obligations.

3. How We Use Your Data

We use your personal data for the following purposes:

• To respond to your enquiry and assess whether an engagement may be suitable
• To correspond with you during an active engagement
• To maintain records of our engagement as required by law
• To improve the performance and usability of our website
• To comply with legal obligations

Marketing communications

We do not send marketing communications. We do not share your contact details with third parties for marketing purposes. If we were to publish a newsletter or similar communication in future, we would seek your explicit consent before including you.

Data sharing

We do not sell, rent, or share your personal data with third parties, except: (a) where required by law or a regulatory authority; (b) with professional advisors (such as legal counsel) under obligations of confidentiality; or (c) in connection with a merger or transfer of the firm's business, with appropriate protections in place.

4. Data Protection Measures

We take the security of personal data seriously. Measures in place include:

• Encrypted transmission of data via HTTPS
• Access to personal data restricted to partners and staff with a need to process it
• Digital correspondence stored on password-protected, access-controlled systems
• Regular review of data security practices

Data breach notification

In the event of a data breach that is likely to result in a risk to your rights and freedoms, we will notify the relevant supervisory authority and affected individuals as required under applicable Malaysian law and any other applicable obligations within the timeframes required.

5. Cookies

Our website uses essential cookies to function and optional cookies for analytics and preferences. You may accept or decline non-essential cookies when you first visit the site. For a full description of the cookies we use and how to manage them, please read our Cookie Policy.

6. Your Rights

Under Malaysia's Personal Data Protection Act 2010, you have the following rights in relation to your personal data:

• Right to access: You may request a copy of the personal data we hold about you.
• Right to correction: You may request that inaccurate or incomplete data be corrected.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw it at any time. Withdrawal does not affect the lawfulness of processing prior to withdrawal.
• Right to limit processing: In certain circumstances, you may request that we restrict processing of your data.
• Right to object: You may object to processing based on legitimate interest.

To exercise any of these rights, write to [email protected]. We will respond within 21 days.

Supervisory authority

If you believe your data has been handled unlawfully, you may lodge a complaint with the Personal Data Protection Department of Malaysia (Jabatan Perlindungan Data Peribadi), which is the supervisory authority for data protection in Malaysia.

7. Third-Party Links

Our website may contain links to external websites. We are not responsible for the privacy practices or content of those sites. We encourage you to review the privacy policies of any external sites you visit.

8. Children's Privacy

Our services are intended for individuals aged 18 and over. We do not knowingly collect personal data from persons under 18. If you believe we have inadvertently collected data from a minor, please contact us at [email protected] and we will delete it promptly.

9. Changes to This Policy

We may update this policy from time to time to reflect changes in our practices or in applicable law. When we do, we will revise the "Last Updated" date at the top of this page. Where changes are material, we will notify active clients by correspondence. Continued use of the website after changes take effect constitutes acceptance of the revised policy.

10. Contact

For any questions, requests, or concerns about this policy or the handling of your personal data: