Legal & Compliance
Privacy Policy
kencanapad is committed to handling personal data with care and transparency. This policy explains what information we collect, how it is used, and the rights available to individuals under Malaysian data protection law.
Last Updated: 14 April 2026 · Effective Date: 14 April 2026
1. Introduction
kencanapad ("the Firm", "we", "us", "our") is a Malaysian law firm practising in banking and finance law, with its principal office at 36, Persiaran KLCC, 50088 Kuala Lumpur, Malaysia. We are committed to safeguarding the personal data of clients, prospective clients, and visitors to our website in accordance with the Personal Data Protection Act 2010 (PDPA) of Malaysia.
This Privacy Policy governs the collection, processing, storage, and disclosure of personal data in connection with our website at kencanapad.pro and the professional services we provide.
By using our website or submitting an enquiry, you acknowledge that you have read and understood this policy. If you have questions, please contact us at [email protected].
2. Data We Collect
2.1 Information You Provide Directly
When you submit an enquiry through our website contact form, we collect:
- Full name — to address correspondence appropriately
- Email address — as the primary channel for our response
- Telephone number (optional) — should you prefer a call-back
- Message content (optional) — a brief description of the matter you wish to discuss
2.2 Automatically Collected Data
Our website and third-party analytics tools may collect limited technical information, including:
- IP address and general geographic region
- Browser type and operating system
- Pages visited and time spent on each page
- Referring URL
2.3 Legal Basis for Processing
Under the PDPA 2010, we process personal data on the following bases:
- Consent — you have submitted a voluntary enquiry form
- Contractual necessity — to carry out professional services you have engaged us for
- Legitimate interest — to respond to enquiries and improve website functionality
2.4 Retention Periods
| Data Category | Retention Period |
|---|---|
| Enquiry form submissions | 24 months from date of enquiry |
| Client matter records | 7 years after matter close (legal obligation) |
| Analytics data | 14 months (Google Analytics default) |
| Cookie consent records | 12 months |
3. How We Use Your Data
Personal data submitted to kencanapad is used for the following purposes:
- Responding to enquiries — reviewing the nature of your matter and preparing an appropriate response
- Client onboarding — conducting anti-money laundering checks and KYC procedures required under Malaysian law
- Service delivery — corresponding on matters you have engaged us for
- Website improvement — understanding how visitors navigate our site through aggregated analytics
- Legal compliance — meeting obligations under Malaysian law including the Anti-Money Laundering Act 2001 and Legal Profession Act 1976
We do not sell, rent, or trade personal data to third parties for marketing purposes. We do not send unsolicited marketing communications. Any communication from us will be in direct response to an enquiry you have submitted.
4. Data Protection Measures
kencanapad takes reasonable and appropriate steps to protect personal data from unauthorised access, disclosure, alteration, or destruction. Our approach includes:
Encrypted Transmission
Website communications are secured via TLS/SSL encryption (HTTPS).
Access Controls
Only authorised Firm personnel with a need to know may access client data.
Secure Storage
Data is stored on servers with physical and logical security controls in place.
Breach Response
In the event of a data breach, we will notify affected individuals and authorities where required by law.
Third-Party Service Providers
We may share limited data with trusted service providers who assist in operating our website and services. These include:
- Google Analytics — aggregated website usage statistics (data anonymised where possible)
- Email hosting provider — to facilitate delivery of correspondence
- Cloud document storage — for secure matter file management within the Firm
All third-party processors are subject to appropriate data processing agreements and are not permitted to use your data for their own purposes.
6. Your Rights
Under the Personal Data Protection Act 2010, individuals whose personal data we hold have the following rights:
Right of Access
You may request a copy of the personal data we hold about you.
Right to Correction
You may request that inaccurate or incomplete personal data be corrected.
Right to Withdraw Consent
Where processing is based on your consent, you may withdraw it at any time. Withdrawal does not affect the lawfulness of processing prior to withdrawal.
Right to Object
You may object to the processing of your personal data for direct marketing purposes.
Right to Lodge a Complaint
If you believe your data has been mishandled, you may lodge a complaint with the Department of Personal Data Protection (JPDP), Malaysia's data protection supervisory authority.
To exercise any of these rights, please write to us at [email protected]. We will respond within 21 days of receiving a valid request.
7. Third-Party Links
Our website may contain links to external websites, regulatory bodies, or legal databases for reference purposes. kencanapad is not responsible for the privacy practices of those websites and recommends that you review their respective privacy policies before submitting any personal information.
8. Children's Privacy
Our services are directed exclusively at corporate clients and individuals who are at least 18 years of age and have the legal capacity to enter into binding agreements. We do not knowingly collect personal data from minors. If we become aware that personal data from a person under 18 has been submitted without appropriate consent, we will delete it promptly.
9. Policy Updates
We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or the scope of our services. When material changes are made, we will update the "Last Updated" date at the top of this page.
Your continued use of our website after a policy update constitutes your acknowledgement of the revised terms. We encourage you to review this page periodically.
10. Contact Us
For any questions, requests, or concerns regarding this Privacy Policy or our data handling practices, please contact our data protection contact:
kencanapad
- 36, Persiaran KLCC, 50088 Kuala Lumpur, Malaysia
- +60 3-4297 5683
- [email protected]