Privacy Policy

Bunga Setia ("we", "us", "our") is a legal advisory practice registered in Sarawak, Malaysia, with offices at 33, Jalan Padungan, 93100 Kuching, Sarawak. We are the data controller for the personal information we collect through our website at https://bungaset.club and in connection with our advisory services.

We take the privacy of everyone who engages with us seriously. Given the nature of family law advisory work, we are particularly aware that the information shared with us is often sensitive. This policy explains what personal information we collect, how we use it, and what rights you have in relation to it.

This policy applies to information collected through our website contact form, email correspondence, telephone enquiries, and in the course of providing our advisory services. It does not apply to information held under legal professional privilege, which is governed by separate professional obligations.

Questions about this policy may be directed to [email protected].

We collect personal information in the following circumstances:

Through our website contact form: name, email address, telephone number (optional), and the content of your message.

Through email and telephone enquiries: the information you provide in your communications with us, including your name and contact details.

Through the provision of our advisory services: information necessary to provide the service, which may include personal details about family circumstances, financial matters, and other information relevant to your legal matter. This information is held under legal professional privilege in addition to the protections described in this policy.

Through our website automatically: technical data including your IP address, browser type, pages visited, and visit duration, collected via cookies and analytics tools. See our Cookie Policy for details.

The legal basis for collecting and processing your personal data is: (a) your consent, where applicable; (b) the performance of a contract or the taking of steps at your request prior to entering a contract; and (c) our legitimate interests in operating a legal practice and maintaining communications with enquirers and clients.

We retain contact enquiry data for a period of two years from last contact. Advisory client files are retained for seven years from the conclusion of the matter, in accordance with professional practice requirements under Malaysian law.

We use the personal information we collect for the following purposes:

• To respond to enquiries submitted through our contact form or by telephone or email
• To provide our legal advisory services to clients who engage us
• To communicate with clients about the progress of their matters
• To comply with our professional obligations and applicable law
• To improve the performance and usability of our website, using aggregated and anonymised analytics data

We do not sell, rent, or trade your personal information to third parties.

We may share your information with third parties only in the following circumstances: (a) with your explicit consent; (b) with other legal or professional advisors involved in your matter, where necessary and with your knowledge; (c) where required by law, regulation, or court order; or (d) with service providers who process data on our behalf under strict data processing agreements (such as our email and file management providers).

We do not send marketing communications. Any communications we send are limited to matters directly relating to your enquiry or engagement.

We take the security of personal information seriously and apply measures appropriate to the sensitivity of the data we hold. These include:

• Encrypted storage of digital files containing personal data
• Access controls limiting file access to authorised personnel directly involved in the relevant matter
• Secure physical storage for paper documents
• Regular review of access rights and security procedures
• Use of password-protected and encrypted communication channels where appropriate

In the event of a personal data breach that is likely to result in risk to your rights and freedoms, we will notify you and, where required, the relevant authority without undue delay and in accordance with our obligations under the Personal Data Protection Act 2010 (Malaysia).

Our website uses cookies — small text files placed on your device — to support basic website functionality, to remember your cookie preferences, and, where you have consented, to collect aggregated analytics data about how the site is used.

You can manage your cookie preferences at any time through our Cookie Policy page. Essential cookies required for the website to function cannot be disabled.

Under the Personal Data Protection Act 2010 (Malaysia) ("PDPA"), you have the following rights in relation to your personal data:

• Right of access: You may request a copy of the personal data we hold about you.
• Right to correction: You may request that inaccurate or incomplete personal data be corrected.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.
• Right to limit processing: In certain circumstances, you may request that we limit the ways in which we use your data.
• Right to prevent processing likely to cause damage or distress: You may object to processing of your personal data in certain circumstances.

Please note that some of these rights are subject to exceptions under the PDPA, including data held under legal professional privilege.

To exercise any of these rights, please contact us at [email protected] or in writing to our office address. We will respond within 21 days.

If you are dissatisfied with our response, you may refer the matter to the Department of Personal Data Protection Malaysia (JPDP).