Legal Document
Privacy Policy
Last Updated: 10 April 2025 | Effective: 10 April 2025
This Privacy Policy explains how Cipta Partners ("we", "us", "our") collects, uses, and protects personal data provided to us through this website and in the course of our professional engagements. We are committed to handling personal data in accordance with the Personal Data Protection Act 2010 (Malaysia) (PDPA).
Questions about this policy may be directed to: [email protected]
1. Data Controller
Cipta Partners is the data controller in respect of personal data collected through this website. Our address is 14-2, Jalan SS2/24, 47300 Petaling Jaya, Selangor, Malaysia. Contact email: [email protected].
2. Data We Collect
We may collect the following categories of personal data:
- Identification data: Full name, email address, telephone number, as provided through our contact form or email enquiry.
- Communication data: Content of enquiries, correspondence, and instructions submitted to us.
- Technical data: IP address, browser type, device information, and pages visited — collected automatically when you use this website.
- Cookie data: Information stored via cookies as described in our Cookie Policy.
3. How We Collect Data
Personal data is collected when you: (a) submit an enquiry through our contact form; (b) send us an email; (c) call our office; (d) engage us as a client. Technical data is collected automatically through standard website logging and analytics tools.
4. How We Use Personal Data
We use personal data for the following purposes:
- Responding to enquiries and providing legal advice and services
- Managing client engagements and matter files
- Complying with legal and professional obligations
- Improving the functionality and content of this website (using anonymised analytics data)
- Sending occasional updates about our practice, where consent has been given
The legal basis for processing is: consent (for marketing communications); performance of a contract (for client engagements); and legitimate interests (for website analytics and responding to enquiries).
5. Data Retention
Client matter files are retained for a minimum of seven years following completion of an engagement, in accordance with professional conduct obligations. Enquiry data where no engagement follows is retained for 12 months. Website technical data is retained for 13 months.
6. Data Sharing
We do not sell personal data. We may share data with:
- MyIPO and WIPO: Where necessary to file or prosecute IP applications on your behalf.
- Foreign associates: Where your matter involves international filing or proceedings.
- Service providers: Email hosting, website analytics, and document management — under data processing agreements.
- Regulatory authorities: Where required by law or professional conduct rules.
7. Data Security
We maintain technical and organisational measures to protect personal data against unauthorised access, disclosure, or loss. These include encrypted transmission (HTTPS), access controls on matter management systems, and regular reviews of data handling procedures. In the event of a data breach affecting your rights or interests, we will notify you as required by applicable law.
8. Cookies
This website uses cookies. For full details of the cookies we use and how to manage your preferences, see our Cookie Policy.
9. Your Rights Under Malaysian Law
Under the PDPA 2010, you have the following rights in relation to your personal data:
- Right to access your personal data held by us
- Right to correct inaccurate or incomplete data
- Right to withdraw consent where processing is based on consent
- Right to prevent processing likely to cause damage or distress
- Right to lodge a complaint with the Personal Data Protection Commissioner
To exercise any of these rights, please contact us at [email protected]. We will respond within 21 days.
10. Third-Party Links
This website may contain links to third-party sites. We are not responsible for the privacy practices of those sites and recommend reviewing their respective privacy policies.
11. Children
This website is directed at adults aged 18 and above. We do not knowingly collect personal data from persons under 18.
12. Changes to This Policy
We may update this policy from time to time. The current version is always published on this page with the date of last update. Continued use of this website following any update constitutes acceptance of the revised policy.
13. Contact
For data protection queries: [email protected]
Cipta Partners, 14-2, Jalan SS2/24, 47300 Petaling Jaya, Selangor, Malaysia.