Privacy Policy
Last Updated: 25 June 2025
1. Introduction
Baka Legal (registered at 33, Jalan Bunga Raya, 75100 Melaka, Malaysia) is committed to protecting the personal data you share with us. This policy explains what data we collect, why we collect it, how we use it, and the choices available to you.
This policy applies to personal data collected through our website at bakalega.cyou and through direct contact with our office. It is written in plain terms. If anything is unclear, please write to us at [email protected].
2. Data We Collect
When you contact us through the website form or by email, we may collect:
- Your name and contact details (email address, phone number)
- The content of your message or enquiry
- Technical data such as your browser type and approximate location (collected automatically via server logs)
- Cookie consent preferences stored locally in your browser
When you become a client, we collect additional information necessary to carry out the legal services you have engaged us for. That data handling is governed separately by our client engagement terms.
3. How We Use Your Data
We use the data collected from this website to:
- Respond to your enquiries and arrange consultations
- Operate and improve this website (via anonymised analytics)
- Comply with our legal and professional obligations
We do not use your contact details for marketing purposes without your explicit consent. We do not sell personal data to third parties under any circumstances.
Legal basis for processing (Malaysia PDPA 2010): We process personal data with your consent (given by submitting the contact form or corresponding with us) and for the purposes of legal services delivery where you have engaged us.
4. Data Retention
Enquiry data (name, email, message) is retained for up to 12 months from the date of last contact, after which it is deleted unless a client relationship has commenced. Client matter files are retained for 7 years from the date of file closure, in accordance with professional obligations under Malaysian law. Analytics data is retained in anonymised form for up to 24 months.
5. Data Protection Measures
- This website is served over HTTPS (encrypted connection)
- Access to personal data within our office is limited to staff who require it to handle your matter
- We do not store payment card data through this website
- In the event of a data breach that affects your personal data, we will notify you without undue delay
6. Cookies
This website uses cookies to remember your consent preferences and to support basic website analytics. No marketing or tracking cookies are set without your agreement. For full details, please see our Cookie Policy.
7. Third-Party Services
This website may load resources from:
- Google Fonts — for typography (no personal data shared)
- Font Awesome CDN — for icons (no personal data shared)
- Picsum Photos — for placeholder images (no personal data shared)
- Google Maps — for our embedded location map (subject to Google's privacy policy)
We are not responsible for the privacy practices of third-party services. Links from this website to external sites are provided for convenience; those sites have their own privacy policies.
8. Your Rights Under the PDPA 2010
Under Malaysia's Personal Data Protection Act 2010, you have the right to:
- Access the personal data we hold about you
- Correct inaccurate or incomplete personal data
- Withdraw consent for processing (subject to legal and contractual obligations)
- Request that we stop using your data for direct marketing (we do not conduct direct marketing)
- Lodge a complaint with the Department of Personal Data Protection Malaysia
To exercise any of these rights, please write to [email protected]. We will respond within 21 days.
9. Children's Privacy
Our services are intended for adults aged 18 and above. We do not knowingly collect personal data from persons under 18. If you believe we have received data from a minor, please contact us so that we can delete it promptly.
10. Policy Updates
We may update this policy from time to time. The "Last Updated" date at the top of this page will reflect any changes. Continued use of this website after an update constitutes acceptance of the revised policy. For significant changes, we will display a notice on the homepage.
11. Contact
Data Controller: Baka Legal
33, Jalan Bunga Raya, 75100 Melaka, Malaysia