Personal Data Protection Policy

Odenan & Co. (“the Firm”) is committed to protecting the privacy and security of your Personal Data. This Personal Data Protection Policy outlines our practices in accordance with the Personal Data Protection Act 2010 (“PDPA”) of Malaysia, applicable to our operations in Malaysia.

1. Definitions

“Controller”/“Processor” have their ordinary meanings under PDPA.

“Personal Data” means any information about an identified or identifiable individual.

 “Sensitive Personal Data” means Personal Data revealing health, medical records, disability status, biometric data, religion, race, or financial hardship. “Processing” means any collection, use, storage, retrieval, disclosure, erasure or other operation performed on Personal Data.

2. Collection of Personal Data

We collect Personal Data to provide legal services, manage client relationships, and comply with legal obligations. The types of Personal Data we may collect include, but are not limited to:

1. Name;
2. Contact information (e.g., telephone number, email address, postal address);
3. Identification details (e.g., NRIC);
4. Financial information;
5. Sensitive Personal Data (e.g., health, medical history, disability status, financial hardship); and
6. Any other information relevant to our legal services.

3. Lawful Basis and Consent

We process Personal Data with the individual’s informed consent. For Sensitive Personal Data we will obtain explicit consent specifying categories and purposes. Where processing is necessary for performance of a contractual obligation, compliance with a legal requirement, or protecting vital interests in an emergency, we may process Personal Data without consent to the extent permitted by law, and will document the lawful basis for such processing.

4. Purpose of Processing Personal Data

We process Personal Data for the following purposes:

1. To provide legal services including, but not limited to, legal advice, representation, and related case management;
2. To communicate with clients, courts, authorities, and other relevant parties;
3. To manage billing, payments and retainers;
4. To prevent and detect fraud, misuse, or unlawful activities;
5. To monitor, evaluate and report on our service delivery (with anonymized data);
6. To comply with legal and regulatory requirements; and
7. For administrative and record-keeping purposes.

5. Disclosure of Personal Data

We may disclose your Personal Data to the following parties as necessary for the purposes above:

1. Government agencies and regulatory authorities;
2. Courts, tribunals, Ombudsman or legal bodies;
3. External legal or consultancy advisors;
4. Third-party service providers assisting in our operation (including, but not limited to, payment processors, cloud service providers, data hosting and email services); and
5. Other parties with your consent or where required by law.

6. Sources of Personal Data

We collect Personal Data directly from you when you engage in our services or communicate with us, or from third parties such as other legal firms, courts, or authorities involved in your matter.

We may disclose your Personal Data to the following parties as necessary for the purposes above:

7. Google Workspace and Third‑Party Processors

We use Google Workspace (a paid Google service) for email, document storage, collaboration, calendars and related services. Google Workspace acts as a data processor and stores data in Google data centers that may be located inside or outside Malaysia.

8. Security of Personal Data

We are committed to safeguarding your Personal Data by implementing appropriate security measures to prevent unauthorized access, disclosure, or misuse.

9. Access and Correction of Personal Data

You have the right to access and correct your Personal Data held by us. Please contact us to make any requests for access or correction.

10. Retention of Personal Data

We retain Personal Data for as long as necessary for the purpose of legal work or as required by law, after which it will be securely disposed of.

11. Minors and Incapacitated Persons

If a client is a minor or legally incapacitated, we will obtain verifiable parental or guardian consent and any necessary documents before prior to processing their Personal Data.

12. Changes to This Policy

We may update this policy from time to time to reflect amendments in legal requirements or our practices. Updated version will be posted on our website when necessary.

13. Contact Us

If you have any questions or concerns about this policy or your Personal Data, please contact us at:

Email                           : general@odenanco.com         

Phone Number         : +603-7890 4386

14. English Version and Malay Version of Personal Data Protection Policy

We provide the Personal Data Protection Policy in both English and Bahasa Malaysia. In case of any inconsistencies between these two, the English version shall prevail.

15. Applicable Laws

This Personal Data Protection Policy shall be construed and interpreted in accordance with the laws of Malaysia.

Consent

By engaging our legal services or providing your Personal Data to us, you consent to the processing of your Personal Data in accordance with this policy. For Sensitive Personal Data, you confirm that you have given explicit consent for the specific purposes stated.