Legal

Privacy Policy

Last Updated: 10 March 2025 | Effective: 10 March 2025

Bondhold ("we", "us", "our") is committed to handling the personal information of those who use our services and contact us through this website with care and in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA). This policy describes what information we collect, how we use it, and the rights available to you in relation to that information.

Questions regarding this policy may be directed to [email protected].

1. Who we are

The data controller for personal information collected through this website is:

Bondhold
27 Jalan Dato Bandar Tunggal
70000 Seremban, Negeri Sembilan, Malaysia
Email: [email protected]
Telephone: +60 6-762 4138

2. Information we collect

We collect personal information in the following circumstances:

Contact form submissions — name, email address, telephone number (if provided), and the content of your message
Direct email or telephone contact — information you provide during communications with us
Website usage data — technical data such as IP address, browser type, pages visited, and time of visit, collected via analytics cookies where consent has been given

We do not collect sensitive personal data (such as financial information or identity documents) through this website. Such information, where required for an engagement, is provided and handled through our secure office procedures.

3. How we use your information

Personal information collected through this website is used for the following purposes:

Responding to enquiries and arranging initial consultations
Administering and performing legal services where an engagement proceeds
Understanding how our website is used, in order to improve it (analytics, where consent is given)
Complying with legal and regulatory obligations applicable to legal practices in Malaysia

We do not use your personal information for automated decision-making or profiling. We do not sell, rent, or otherwise transfer personal information to third parties for marketing purposes.

4. Legal basis for processing

Under the PDPA 2010, we process personal data on the following bases:

Consent — where you have submitted a contact form or provided information voluntarily
Contractual necessity — where processing is necessary to perform services you have engaged us to provide
Legal obligation — where processing is required to comply with our obligations as a legal practice
Legitimate interests — for website analytics and improving our services, where this does not override your rights

5. Data sharing

We may share your personal information in the following limited circumstances:

With third-party service providers who support our practice operations (such as secure email services and document management), under appropriate data processing agreements
With foreign counsel, where coordination is required in the course of a cross-border engagement and you have been informed of this
Where required by law, court order, or by the Malaysian Bar Council in its regulatory capacity

We do not share personal information with advertising networks, data brokers, or social media platforms.

6. Data retention

We retain personal information for the following periods:

Enquiry data (no engagement followed) — 12 months from the date of last contact
Engagement records — 7 years from the close of the engagement, in line with professional obligations
Website analytics data — 26 months from collection

After the applicable retention period, personal information is securely deleted or anonymised.

7. Cookies

This website uses cookies. Essential cookies are necessary for the website to function and cannot be disabled. Other cookies — for analytics and preferences — are set only with your consent. For full details, please see our Cookie Policy.

8. Data security

We take reasonable steps to protect personal information against unauthorised access, disclosure, or loss. These include:

Secure encrypted email communication
Restricted access to client records within the practice
Regular review of data handling procedures

In the event of a data breach that is likely to cause harm to the individuals concerned, we will take appropriate steps in accordance with the PDPA 2010 and notify affected individuals where required.

9. Your rights

Under the PDPA 2010, you have the following rights in relation to your personal information:

Right of access — to request confirmation of what personal data we hold about you
Right to correction — to request correction of inaccurate personal data
Right to withdraw consent — where processing is based on consent, you may withdraw it at any time
Right to prevent processing likely to cause damage or distress

To exercise any of these rights, please contact us at [email protected]. We will respond within 21 days.

You also have the right to submit a complaint to the Personal Data Protection Commissioner of Malaysia if you believe your personal data has not been handled in accordance with the PDPA 2010.

10. Third-party links

This website may contain links to external websites. We are not responsible for the privacy practices of those sites and encourage you to read their privacy policies before providing personal information.

11. Children

This website is not directed at persons under the age of 18. We do not knowingly collect personal information from minors. If you believe we have inadvertently collected information from a person under 18, please contact us so we may take appropriate steps.

12. Changes to this policy

We may update this policy from time to time. The current version will always be published on this page with the date of last update. If changes are material, we will make reasonable efforts to draw attention to them. Continued use of this website after a policy update constitutes acceptance of the updated terms.

13. Contact

For any questions about this policy or about how your personal information is handled:

Bondhold
27 Jalan Dato Bandar Tunggal, 70000 Seremban, Negeri Sembilan, Malaysia
Email: [email protected]
Telephone: +60 6-762 4138