Privacy Policy

1. Introduction

Paxelis ("we", "us", "our") operates from 14 Lebuh Pantai, 10200 George Town, Penang, Malaysia. We are committed to handling personal data with the care and transparency that our clients and website visitors deserve.

This policy explains what personal information we collect, why we collect it, how it is used, and the rights available to you under the Personal Data Protection Act 2010 (PDPA) of Malaysia.

If you have questions about this policy, please contact us at [email protected].

2. Data We Collect

We collect personal information in the following ways:

• Contact forms: Name, email address, telephone number, and the content of your message when you submit an enquiry through our website.
• Client engagements: Identification documents, employment records, business registration information, and other documents relevant to the matter you have engaged us for.
• Website analytics: Anonymised technical data such as pages visited, browser type, and visit duration — collected via analytics cookies where you have given consent.

We do not collect sensitive personal data (such as medical records or biometric data) unless it is directly relevant to a matter you have engaged us for.

3. How We Use Your Data

Personal data collected is used for the following purposes:

• To respond to enquiries submitted through our website
• To provide the legal services you have engaged us for
• To communicate progress updates and relevant developments in your matter
• To maintain records required by the Legal Profession Act 1976 and related regulations
• To comply with any legal obligation to which we are subject
• To improve our website and services using anonymised analytics data

4. Legal Basis for Processing

We process personal data on the following legal bases under the PDPA 2010:

• Consent: Where you have given explicit consent for us to collect and use your data (e.g. optional analytics cookies).
• Contract: Where data processing is necessary to fulfil our obligations under the engagement letter you have entered into with us.
• Legal obligation: Where processing is required to comply with a legal obligation applicable to us.
• Legitimate interests: Where we have a legitimate business interest in processing the data that is not overridden by your rights.

5. Data Sharing

We do not sell or rent your personal data to third parties. We may share your data in the following limited circumstances:

• With government bodies (MyIPO, Immigration Department of Malaysia, Industrial Court) where required to carry out the services you have engaged us for.
• With third-party service providers who assist with our operations (e.g. secure document storage), bound by confidentiality obligations.
• Where required by law or a court order.

6. Data Retention

We retain personal data for as long as is necessary for the purpose for which it was collected, subject to the following guidelines:

• Client matter files: retained for a minimum of seven years from the close of the matter, in accordance with professional practice requirements.
• Website enquiry data: retained for up to twelve months if no engagement results from the enquiry.
• Analytics data: retained in anonymised form for up to twenty-four months.

7. Data Protection Measures

We take the security of your data seriously and implement the following measures:

• Encrypted document transmission channels
• Access controls limiting data access to team members working on your matter
• Secure storage for physical documents
• Regular review of data handling procedures
• Incident response procedures in the event of a data breach

8. Cookies

Our website uses cookies to function correctly and to help us understand how visitors interact with our pages. You can manage your cookie preferences at any time. For detailed information, please refer to our Cookie Policy.

9. Your Rights

Under the Personal Data Protection Act 2010 (Malaysia), you have the following rights in relation to your personal data:

• Right of access: To request a copy of the personal data we hold about you.
• Right of correction: To request correction of inaccurate or incomplete personal data.
• Right to withdraw consent: To withdraw consent where processing is based on consent, without affecting the lawfulness of prior processing.
• Right to limit processing: To request that we limit the processing of your data in certain circumstances.
• Right to complain: To lodge a complaint with the Personal Data Protection Commissioner of Malaysia.

To exercise any of these rights, please contact us at [email protected].

10. Third-Party Links

Our website may contain links to external websites. We are not responsible for the privacy practices of those websites and encourage you to review their own privacy policies.

11. Children's Privacy

Our services are intended for persons aged 18 and above. We do not knowingly collect personal data from minors. If we become aware that data has been collected from a person under 18 without appropriate consent, we will take steps to remove that data.

12. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be indicated by an updated date at the top of this page. Continued use of our website following such changes constitutes acceptance of the revised policy.

13. Contact

For any privacy-related enquiries: