Privacy Policy

Waris Amanah ("we", "us", "our") is a legal services firm operating from Level 10, Menara Hap Seng, Jalan P. Ramlee, 50250 Kuala Lumpur, Malaysia. We are the data controller for personal information collected through this website and through our legal instruction process.

This policy applies to personal data collected via our website at waisanked.biz, through telephone enquiries, email correspondence, and in the course of providing legal services. It does not apply to third-party websites linked from our pages.

We comply with Malaysia's Personal Data Protection Act 2010 (PDPA) in all aspects of personal data handling. Questions about this policy may be directed to [email protected].

We collect only the personal data necessary to respond to enquiries and provide legal services. This includes:

• Contact information: full name, email address, telephone number
• Matter details: information about the estate or inheritance matter you describe to us
• Identity documents: where required to verify identity for legal instruction purposes
• Correspondence records: emails, letters, and notes from telephone conversations
• Website usage data: IP address, browser type, pages visited (collected via cookies with consent)

We do not collect sensitive personal data (such as health information, financial account numbers, or religious affiliation) except where directly relevant to a legal matter and with your explicit awareness.

Legal Basis for Processing

• Performance of a contract: where we have accepted a legal instruction from you
• Legitimate interests: responding to enquiries and maintaining client records
• Legal obligation: where Malaysian law requires us to retain records
• Consent: for optional communications and non-essential cookies

Data Retention

Client matter files are retained for seven years from the date the matter closes, in line with standard Malaysian legal practice requirements. Website enquiry data not resulting in an instruction is held for twelve months. Cookie data is retained according to cookie-specific durations described in our Cookie Policy.

Personal data collected is used for the following purposes:

• Responding to enquiries and assessing how we may be of assistance
• Delivering legal services under an engagement agreement
• Corresponding with you, other parties, and relevant institutions in the course of a matter
• Maintaining accurate client records and complying with professional obligations
• Improving the function and content of this website (aggregate, anonymised analytics only)

Marketing Communications

We do not send marketing communications without explicit consent. If you have consented to receive updates from us, you may withdraw that consent at any time by writing to [email protected].

Sharing with Third Parties

We do not sell personal data. We may share data in the following limited circumstances:

• With courts, land offices, financial institutions, and regulatory bodies as required by your matter
• With professional indemnity insurers as required by our Bar Council obligations
• With website hosting and analytics service providers who process data on our behalf under data processing agreements
• Where required by Malaysian law or court order

We maintain appropriate technical and organisational measures to protect personal data from unauthorised access, loss, or disclosure:

• Website data is transmitted via TLS (HTTPS) encryption
• Digital client records are held on password-protected, access-controlled systems
• Physical documents are stored in locked filing facilities within our office
• Access to personal data is restricted to personnel who require it for their role
• In the event of a data breach affecting your rights, we will notify you and the relevant authority as required by the PDPA

This website uses cookies to function and to understand how visitors use it. Essential cookies are required for basic operation. Optional analytics and preference cookies are used only with your consent.

Full details of the cookies we use, their purpose, and how to manage them are set out in our Cookie Policy.

Under Malaysia's Personal Data Protection Act 2010, you have the following rights in respect of personal data we hold about you:

To exercise any of these rights, write to us at [email protected]. We will respond within 21 days. You also have the right to lodge a complaint with the Department of Personal Data Protection Malaysia (JPDP) if you believe we have not handled your data appropriately.

For any questions about this policy, to exercise your data rights, or to raise a concern about how we have handled your personal information, please contact us: