Legal Information
Privacy Policy
Last Updated: 28 March 2026 | Suveren, 16 Jalan Padungan, 93100 Kuching, Sarawak, Malaysia
Suveren is committed to handling personal data with care and in accordance with applicable Malaysian law, including the Personal Data Protection Act 2010 (PDPA). This Privacy Policy explains what data we collect, how we use it, and the rights you hold in relation to that data.
If you have any questions about this policy, please contact us at [email protected].
1. Data We Collect
We collect personal data in the following ways:
Information You Provide
- Name, email address, and phone number submitted via our contact form
- Details of your legal matter provided in correspondence or during consultations
- Identity documents or supporting materials submitted in connection with an engagement
Automatically Collected Information
- Browser type, device type, and IP address (collected via analytics cookies, where consented)
- Pages visited and time spent on our website
- Cookie preference data stored in your browser's local storage
2. How We Use Your Data
- To respond to your enquiry and assess whether your matter falls within our scope
- To carry out legal advisory services where an engagement is agreed
- To communicate updates about your matter throughout an engagement
- To understand how our website is used and to make improvements (analytics, where consented)
- To comply with our professional obligations under Malaysian law and the Malaysian Bar
We do not use your personal data for unsolicited marketing and do not share it with third parties for commercial purposes.
3. Legal Basis for Processing
- Consent — for analytics cookies and optional communications
- Contractual necessity — for carrying out legal engagements
- Legitimate interest — for responding to enquiries and maintaining records
- Legal obligation — for compliance with professional conduct rules and applicable law
4. Data Retention
Enquiry data (where no engagement follows) is retained for up to 12 months. Matter-related data for completed engagements is retained for 7 years, in line with professional obligations and legal record-keeping requirements. Analytics data is retained for up to 26 months, subject to consent.
5. Data Sharing
We do not sell or share your personal data with third parties for commercial purposes. We may share data in the following limited circumstances:
- With courts, regulatory authorities, or opposing parties where required by the legal matter or by law
- With professional advisors (e.g. barristers, surveyors) engaged to assist with your matter, under confidentiality obligations
- With analytics service providers (e.g. Google Analytics), where you have consented to analytics cookies
6. Data Protection Measures
- Access to client files is limited to Suveren personnel directly involved in each matter
- Electronic documents are stored on access-controlled systems
- Physical documents are stored securely and disposed of appropriately
- Data breaches, if they occur, are assessed and reported in accordance with our professional obligations
7. Cookies
We use cookies on our website. For full details, please refer to our Cookie Policy. You can manage your cookie preferences at any time via the cookie settings on our site.
8. Your Rights Under the PDPA (Malaysia)
Under the Personal Data Protection Act 2010, you have the following rights in relation to personal data we hold about you:
- Right of access — to request a copy of the personal data we hold about you
- Right of correction — to request that inaccurate data be corrected
- Right to withdraw consent — for processing based on consent (e.g. analytics cookies)
- Right to limit processing — in certain circumstances
To exercise any of these rights, contact us at [email protected]. We will respond within 21 days.
9. Legal Professional Privilege
Communications between Suveren and clients in connection with legal matters are protected by legal professional privilege. This protection applies separately from and in addition to this Privacy Policy. Privileged communications will not be disclosed except where required by law or with client consent.
10. Third-Party Links
Our website may contain links to third-party sites. Suveren is not responsible for the privacy practices of those sites. We recommend reviewing their privacy policies before providing any personal information.
11. Children's Privacy
Our services are directed at individuals aged 18 and above. We do not knowingly collect personal data from minors. If you believe a minor has submitted data to us, please contact us and we will take appropriate steps.
12. Changes to This Policy
We may update this Privacy Policy from time to time. Material changes will be noted on this page with an updated date. Continued use of our website following changes constitutes acceptance of the updated policy.
13. Contact
For any privacy-related questions or to exercise your data rights, please contact:
- Email: [email protected]
- Address: Suveren, 16 Jalan Padungan, 93100 Kuching, Sarawak, Malaysia