Privacy Policy

1. About This Policy

Kinabalu Advocates, Advocates & Solicitors, is a legal practice registered and operating in Sabah, Malaysia. Our office is located at Level 9, Wisma Sabah, Jalan Tun Razak, 88000 Kota Kinabalu, Sabah.

This Privacy Policy describes how we handle personal data submitted to us through our website, our contact form, and through the course of providing legal services. It applies to all visitors to our website at kinabalu.live and to individuals who make contact with us for legal advice or representation.

We handle personal information in accordance with the Personal Data Protection Act 2010 (PDPA) of Malaysia and applicable professional obligations governing advocates and solicitors in Sabah.

2. Information We Collect

We may collect the following categories of personal information:

• Contact details including your name, telephone number, and email address
• Information you provide when completing our consultation request form
• Details of the matter you wish to discuss, as provided voluntarily by you
• Technical data collected automatically when you visit our website, such as IP address, browser type, and pages visited
• Any additional documents or information you choose to share with us during the course of our engagement

We do not collect sensitive personal data unless it is directly relevant to the legal matter you have brought to us, and only with your knowledge.

3. How We Use Your Information

The information we collect is used for the following purposes:

• To respond to consultation requests and communicate with you about your matter
• To provide legal advice and representation as instructed by you
• To maintain accurate records in connection with our professional obligations
• To improve the usability and content of our website
• To comply with legal and regulatory requirements applicable to legal practitioners in Malaysia

We do not use your personal information for unsolicited marketing communications, and we do not sell or otherwise commercially transfer your data to third parties.

4. Legal Basis for Processing

Under the PDPA and our professional obligations, we process personal data on the following bases:

• Your consent, given when you submit information through our website or contact us directly
• The performance of legal services you have engaged us to provide
• Compliance with legal obligations applicable to advocates and solicitors in Sabah
• Our legitimate interests in maintaining the security and functionality of our website

5. Confidentiality and Privilege

Information shared with Kinabalu Advocates in the context of seeking or receiving legal advice is subject to legal professional privilege and solicitor-client confidentiality obligations. This protection is separate from and in addition to the safeguards described in this Privacy Policy.

We take our confidentiality obligations seriously and maintain appropriate internal controls to ensure that client information is not disclosed without authorisation.

6. Disclosure to Third Parties

We may share your personal information in the following limited circumstances:

• With courts, tribunals, or regulatory bodies, where required in connection with your matter
• With third-party service providers who assist us in operating our website or practice management systems, subject to appropriate data processing agreements
• Where we are required to do so by law or by a valid legal process
• With your express consent

We do not share information with parties outside Malaysia except where this is necessary to conduct your matter and where appropriate safeguards are in place.

7. Data Retention

We retain personal information only for as long as is necessary for the purposes described in this Policy, or for the period required by our professional obligations and applicable law. Information relating to completed legal matters is generally retained for seven years from the close of the matter, in line with standard professional practice.

Website enquiries that do not lead to an engagement are retained for a shorter period and reviewed periodically for deletion.

8. Website Analytics and Cookies

Our website may use cookies and similar tracking technologies to understand how visitors use the site. This helps us ensure the website functions as intended and allows us to make improvements over time.

You can control cookie preferences through the cookie consent banner displayed when you first visit our website, or through your browser settings. For full details, please see our Cookie Policy.

9. Your Rights

Subject to applicable Malaysian law, you have the right to:

• Request access to the personal information we hold about you
• Request correction of inaccurate or incomplete data
• Withdraw consent to processing where consent was the basis for collection
• Request deletion of data, subject to our professional and legal retention obligations

To exercise any of these rights, please contact us in writing at the address below or by email at [email protected]. We will respond within a reasonable period and in accordance with our obligations under the PDPA.

10. Security

We maintain reasonable technical and organisational measures to protect personal information from unauthorised access, disclosure, or loss. These include access controls, secure communications where appropriate, and internal procedures for handling sensitive client data.

No transmission of information over the internet can be entirely without risk. If you have concerns about submitting sensitive information through our contact form, you are welcome to contact us by telephone first.

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. Where changes are material, we will update the "last updated" date at the top of this page. We encourage you to review this page periodically.

12. Contact Us

If you have any questions about this Privacy Policy or our handling of your personal information, please reach out to us: