Legal
Privacy Policy
Last updated: April 2026
This Privacy Policy explains how Selwynford ("we", "us", "our") collects, uses, discloses, and manages personal data in connection with our website and legal services. We are committed to handling personal data in accordance with the Personal Data Protection Act 2010 of Malaysia (PDPA 2010).
By using this website or engaging our services, you acknowledge that you have read and understood this policy.
1. Data Controller
The data controller for personal data collected through this website is Selwynford, Suite 14-05, Menara Atlan, 161B Jalan Ampang, 50450 Kuala Lumpur. You may contact us at [email protected] or by telephone at +60 3 2162 5847 with any data-related enquiries.
2. Personal Data We Collect
We may collect and process the following categories of personal data:
Contact and enquiry information
- Name and preferred form of address
- Email address and telephone number
- The subject matter and content of your enquiry
- Any other information you voluntarily provide when contacting us
Client matter information
- Identity documents and verification records required by law
- Financial information relevant to estate matters (asset descriptions, valuations)
- Information about third parties provided in the course of instructions (beneficiaries, deceased persons, other parties)
- Correspondence and records of instructions
Website usage data
- IP address and browser type (where analytics are enabled by your cookie preferences)
- Pages visited and approximate time spent on the site
3. How We Use Your Personal Data
We process personal data for the following purposes:
- To respond to your enquiries and assess whether we are able to assist with your matter
- To provide legal services and advice where a client relationship is established
- To comply with our legal and regulatory obligations, including anti-money laundering requirements under the Anti-Money Laundering, Anti-Terrorism Financing and Proceeds of Unlawful Activities Act 2001
- To maintain accurate records of our professional engagements
- To improve the functionality and content of this website, where consent to analytics cookies has been given
We do not use personal data for unsolicited marketing purposes without your consent.
4. Legal Basis for Processing
We rely on the following bases for processing personal data under the PDPA 2010:
- Consent: Where you have provided personal data in connection with an enquiry or accepted non-essential cookies
- Contractual necessity: Where processing is required to deliver legal services following engagement
- Legal obligation: Where processing is required to comply with applicable Malaysian law
- Legitimate interests: For purposes such as maintaining records and improving our services, where these interests are not overridden by your rights
5. Disclosure of Personal Data
We do not sell personal data to third parties. We may share personal data in the following circumstances:
- With regulatory bodies, courts, or government agencies where required by law or court order
- With third-party service providers who assist in operating this website or our practice (such as hosting providers), subject to appropriate data processing terms
- With other professional advisers (such as accountants or financial advisers) where instructed to do so as part of a client matter
- With counterparties to legal transactions where necessary and appropriate to the matter
Any disclosure to third parties is limited to what is necessary for the stated purpose.
6. Retention of Personal Data
We retain personal data for as long as necessary to fulfil the purposes for which it was collected, and to meet our legal and regulatory obligations. In practice:
- Enquiry records where no engagement was established: typically deleted after 12 months
- Client matter files: retained for a minimum of seven years following conclusion of the matter, in accordance with professional obligations
- Certain identity verification records: retained as required by anti-money laundering legislation
7. Your Rights
Under the PDPA 2010 and applicable law, you have the right to:
- Request access to personal data we hold about you
- Request correction of inaccurate personal data
- Withdraw consent to processing where consent is the basis relied upon (noting this may affect our ability to continue providing services)
- Lodge a complaint with the Personal Data Protection Commissioner of Malaysia
To exercise these rights, please contact us at [email protected]. We will respond within 21 days of receiving a valid request.
8. Security
We implement reasonable technical and organisational measures to protect personal data against unauthorised access, loss, or destruction. This includes secure storage of client files, restricted access to matter information, and encrypted communication where available. No method of transmission over the internet is entirely secure; we cannot warrant absolute security.
9. Cookies
This website uses cookies. Please refer to our Cookie Policy for full details of the cookies used and how to manage your preferences.
10. Third-Party Links
This website may contain links to external websites. We are not responsible for the privacy practices of those websites and recommend that you review their privacy policies independently.
11. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in law, our practices, or the services we offer. The date at the top of this document indicates when it was last reviewed. Continued use of this website following any update constitutes acknowledgment of the revised policy.
12. Contact
For any questions regarding this Privacy Policy or our handling of personal data, please contact us at:
Selwynford
Suite 14-05, Menara Atlan, 161B Jalan Ampang
50450 Kuala Lumpur
T: +60 3 2162 5847
E: [email protected]