Privacy Policy

1. Introduction

Quorum Stead (referred to in this Policy as "we", "us", or "our") is committed to handling your personal data responsibly and in compliance with the Personal Data Protection Act 2010 (PDPA 2010) of Malaysia. This Privacy Policy describes what personal data we collect, how we use it, the basis on which we process it, how long we retain it, and your rights in relation to it. It applies to personal data collected through our website at quorumstea.info and through direct engagement with us in connection with legal services. For questions about this Policy, contact us at [email protected].

2. Data We Collect

We may collect the following categories of personal data:

• Contact information: name, email address, telephone number, business address
• Enquiry details: the subject matter and content of enquiries submitted through our contact form
• Communication records: correspondence by email, telephone, or in writing in connection with an engagement
• Identity and legal matter information: where required in connection with a legal engagement, documents or information you provide
• Technical data: browser type, IP address, pages visited, and session duration collected through website analytics

We collect personal data when you submit an enquiry form, contact us directly, or engage our services. We do not collect sensitive personal data unless specifically required for a legal engagement and with your knowledge.

3. How We Use Your Data

We use your personal data for the following purposes:

• To respond to enquiries and assess whether we are able to assist with your matter
• To perform and manage legal services engagements, including maintaining client files and correspondence
• To fulfil our legal and regulatory obligations as a Malaysian legal practice
• To issue invoices and manage payment records
• To improve our website and understand how it is used

The legal bases for processing are: your consent (where provided), performance of a contract or engagement, compliance with a legal obligation, and legitimate interests in operating and improving our legal practice.

4. Data Retention

Enquiry records are held for up to 12 months if no engagement follows. Where an engagement is entered into, client matter files are retained for a minimum of seven years from the conclusion of the matter, in accordance with professional practice requirements. Technical and analytics data is retained for no longer than 13 months.

5. Data Security

We maintain technical and organisational measures to protect personal data against unauthorised access, loss, or disclosure. Client matter files are held on access-controlled systems. Electronic communications are transmitted via encrypted channels where reasonably practicable. In the event of a data breach that is likely to result in harm, we will notify affected individuals as required under applicable law.

6. Cookies

Our website uses cookies to maintain basic functionality and to understand how visitors use the site. You may manage your cookie preferences at any time through our Cookie Policy page or through your browser settings. Essential cookies required for the website to function cannot be disabled through our cookie preference tool.

7. Third-Party Disclosure

We do not sell, rent, or trade personal data. We may share personal data with third parties in the following limited circumstances: service providers who assist in operating our systems (such as hosting and analytics providers), courts or regulatory bodies where required by law, and where you have given explicit consent. Any third-party service providers are required to process personal data only as instructed and in accordance with applicable data protection law.

8. Your Rights

Under the PDPA 2010 and applicable law, you have the following rights in respect of your personal data held by us:

• Right of access — to request a copy of the personal data we hold about you
• Right of correction — to request correction of inaccurate or incomplete data
• Right to withdraw consent — where processing is based on consent, you may withdraw it at any time
• Right to limit processing — to request that we restrict the use of your data in certain circumstances
• Right to complain — to lodge a complaint with the Personal Data Protection Commissioner of Malaysia

To exercise any of these rights, please contact us at [email protected]. We will respond within 21 days of a valid request.

9. Third-Party Links

Our website may contain links to external websites. We are not responsible for the privacy practices of those sites and recommend you review their privacy policies independently.

10. Children's Privacy

Our services are directed at organisations and individuals who are at least 18 years of age. We do not knowingly collect personal data from persons under 18. If we become aware that personal data from a minor has been submitted without appropriate consent, we will take steps to remove it.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be noted on our website. Continued use of our website or services following notification of changes constitutes acceptance of the updated Policy. The current version is always available at quorumstea.info/privacy-policy.html.

12. Contact

Data controller: Quorum Stead, 28 Persiaran KLCC, 50088 Kuala Lumpur, Malaysia. Email: [email protected]. Telephone: +60 3-2381 7526.