Privacy Policy
Last Updated: 30 January 2026
1. Introduction
Amaranth Law ("we," "us," or "our") is committed to safeguarding the privacy and personal data of our clients, website visitors, and other individuals whose information we process. This Privacy Policy explains what personal data we collect, how we use it, and what rights you have in relation to your data.
This policy applies to all personal data collected through our website, contact forms, email correspondence, telephone communications, and in-person consultations. It is governed by the Personal Data Protection Act 2010 (PDPA) of Malaysia.
For questions regarding this policy or your data, please contact us at [email protected].
2. Data We Collect
We may collect the following categories of personal data: your full name, email address, telephone number, and any additional information you provide through our contact form or during consultations. When you visit our website, we may also collect technical data such as your IP address, browser type, and pages visited through the use of cookies and analytics tools.
In the course of providing legal services, we may also collect information relevant to your legal matter, which is handled under the additional protections of solicitor-client privilege.
3. How We Collect Data
We collect personal data directly from you when you fill out our contact form, send us an email, call our office, or meet with us in person. We also collect data indirectly through cookies and analytics tools when you browse our website. Third-party services such as Google Analytics may collect anonymised usage data to help us understand how visitors interact with our site.
4. How We Use Your Data
We use your personal data for the following purposes: to respond to your enquiries and provide the legal services you have engaged us for; to communicate with you about your matter or our services; to comply with our legal and professional obligations; to improve our website and services based on usage patterns; and to maintain our client records and accounts.
The legal basis for processing your data includes: your consent (which you may withdraw at any time), the performance of a contract or pre-contractual steps, compliance with legal obligations, and our legitimate interests in operating our practice and improving our services.
5. Data Sharing
We do not sell or trade your personal data to third parties. We may share your data with trusted third-party service providers who assist us in operating our website and conducting our business, provided they agree to keep your information confidential. These may include web hosting providers, analytics services, and email service providers.
We may also disclose your data when required by law, court order, or regulatory authority, or when necessary to protect our legal rights or the safety of others.
6. Data Protection Measures
We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These include encrypted communications, secure server environments, access controls limiting data access to authorised personnel, and regular reviews of our security practices. In the event of a data breach, we will notify affected individuals and the relevant authorities in accordance with the PDPA.
7. Data Retention
We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, including legal, accounting, and regulatory requirements. Contact form submissions are retained for up to 24 months. Client engagement records are retained for a minimum of seven years following the conclusion of an engagement, in accordance with professional obligations and Malaysian regulatory requirements.
8. Cookies
Our website uses cookies to enhance your browsing experience and to collect anonymised usage data. For detailed information about the types of cookies we use and how to manage your preferences, please see our Cookie Policy.
9. Your Rights
Under the Personal Data Protection Act 2010, you have the following rights in relation to your personal data: the right to access the personal data we hold about you; the right to request correction of inaccurate or incomplete data; the right to withdraw your consent to processing at any time; the right to request that we limit the processing of your data; and the right to make a complaint to the Personal Data Protection Commissioner if you believe your data has been mishandled.
To exercise any of these rights, please contact us at [email protected]. We will respond to your request within 21 days.
10. Third-Party Links
Our website may contain links to external websites that are not operated by us. We are not responsible for the privacy practices of these third-party sites and encourage you to review their privacy policies before providing any personal information.
11. Children's Privacy
Our services are not directed at individuals under the age of 18. We do not knowingly collect personal data from minors. If we become aware that we have inadvertently collected data from a person under 18, we will take steps to delete that information promptly.
12. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. Any changes will be posted on this page with an updated "Last Updated" date. We encourage you to review this policy periodically.
13. Contact Information
Data Controller: Amaranth Law
Address: 25 Jalan Dato Onn, Level 8, Persada Johor International Convention Centre, 80000 Johor Bahru, Malaysia
Email: [email protected]
Supervisory Authority: Personal Data Protection Department (JPDP), Ministry of Communications and Digital, Malaysia