Privacy notice

Issued under the Personal Data Protection Act 2010 · Last updated 6 January 2026

Halim Ng & Pillai (“the firm”, “we”) processes personal data in accordance with the Personal Data Protection Act 2010 and the confidentiality obligations of the Legal Profession Act 1976, which in most respects exceed statutory data protection requirements.

What we collect

Contact details and matter information you provide when enquiring or engaging us; identification documents required for client due diligence under applicable anti-money-laundering obligations; and information necessary to the conduct of your matter. Website analytics are collected in anonymised form only.

How we use it

To check conflicts, conduct your matter, bill for it, and comply with our regulatory obligations. We do not use client data for marketing without separate consent, and we never sell or trade personal data.

Privilege and confidentiality

Information you give us in contemplation of legal advice attracts legal professional privilege and the advocate-and-solicitor’s duty of confidence — protections that continue after a matter ends and that operate independently of, and beyond, the PDPA.

Retention and your rights

Matter files are retained for a minimum of seven years after closure per Bar Council guidance, and longer where the matter warrants. You may request access to or correction of your personal data by writing to enquiries@hnplaw.my; we respond within 21 days as the PDPA requires, subject to privilege and conflict considerations.