Privacy Policy

1. Introduction

Fenworth (referred to as "we", "us", or "our") is the data controller for personal data collected through this website at fenworth.live and through client engagement processes. We are a legal practice based at 7 Jalan Kia Peng, 50450 Kuala Lumpur, Malaysia.

This Privacy Policy is governed by the Personal Data Protection Act 2010 (Malaysia) (PDPA). By using this website or engaging our services, you acknowledge that you have read and understood this policy.

2. Data We Collect

We may collect the following categories of personal data:

• Contact information: name, email address, telephone number, postal address.
• Enquiry details: the subject matter and content of messages submitted via our contact form.
• Client matter data: information provided during a legal engagement, including documents, correspondence, and case details. This may include sensitive categories of data where relevant to your matter.
• Website usage data: IP address, browser type, pages visited, and visit duration — collected via analytics tools where you have provided consent.
• Marketing interaction data: whether you interacted with a digital advertisement before visiting this website, where consent has been given.

We only collect data that is necessary for the purposes described in this policy. We do not collect personal data from individuals under the age of 18.

3. How We Use Your Data

We use the personal data we collect for the following purposes:

• To respond to enquiries submitted via the contact form or by email or telephone.
• To provide legal services where a formal engagement is established.
• To maintain client records and comply with our professional obligations as lawyers.
• To improve the content and functionality of this website, using anonymised analytics data.
• To measure the effectiveness of digital advertising campaigns, where consent has been obtained.
• To fulfil legal or regulatory obligations that apply to us as a legal practice in Malaysia.

We will not use your personal data for any purpose that is incompatible with the reasons for which it was collected, unless we have your consent or are required to do so by law.

4. Legal Basis for Processing

We process personal data on the following bases under the PDPA and applicable principles:

• Consent: for analytics and marketing cookie data, and for marketing communications.
• Contract: for data processed in connection with a legal engagement.
• Legitimate interests: for responding to general enquiries and for basic website security.
• Legal obligation: where we are required to process or retain data to comply with Malaysian law or regulatory requirements applicable to legal practitioners.

5. Data Sharing

We do not sell, rent, or trade personal data. We may share data in the following limited circumstances:

• Service providers: third-party technology providers that host our website or provide analytics services, under appropriate data processing arrangements.
• Legal or regulatory authorities: where disclosure is required by law, court order, or regulatory obligation.
• Professional advisers: where required to obtain specialist legal or professional input in connection with a client matter, subject to confidentiality obligations.

Where data is shared with third-party analytics or advertising platforms (Google, Microsoft, Meta) pursuant to your cookie consent, those platforms process data under their own privacy policies.

6. Data Retention

We retain personal data for as long as is necessary for the purpose for which it was collected, taking into account our legal and professional obligations:

• Enquiry data (non-client): up to 12 months from the date of the enquiry, or until no longer needed.
• Client matter files: at least 7 years from the conclusion of the engagement, in accordance with professional practice requirements.
• Analytics and marketing data: subject to the retention periods set by the relevant third-party platform (typically 13–26 months).

When data is no longer required, it is securely deleted or anonymised.

7. Data Security

We take reasonable and appropriate measures to protect personal data from unauthorised access, disclosure, alteration, or destruction. These measures include:

• Secure, password-protected systems for storing client files.
• Restricted internal access to personal data on a need-to-know basis.
• Use of HTTPS encryption for data transmitted through this website.
• Regular review of our data handling practices.

No method of transmission or storage is entirely free from risk. In the event of a data breach that is likely to result in a risk to the rights of individuals, we will notify the relevant authorities and affected individuals as required by law.

8. Cookies

This website uses cookies. Details of the types of cookies used, their purposes, and how to manage your preferences are set out in our Cookie Policy.

9. Your Rights

Under the Personal Data Protection Act 2010 (Malaysia), you have the right to:

• Request access to the personal data we hold about you.
• Request correction of inaccurate or incomplete personal data.
• Withdraw your consent to the processing of your personal data (where processing is consent-based).
• Request that we limit or cease processing your personal data in certain circumstances.
• Lodge a complaint with the Department of Personal Data Protection Malaysia if you believe your rights have been infringed.

To exercise any of these rights, please contact us using the details in Section 13 below. We will respond within a reasonable timeframe and in accordance with our obligations under the PDPA.

Please note that some rights may be subject to limitations — for example, where data must be retained to fulfil a legal obligation or to protect the rights of another person.

10. Children's Privacy

This website is not directed at individuals under the age of 18. We do not knowingly collect personal data from minors. If you believe that a child has submitted personal data to us, please contact us and we will take steps to delete that data.

11. External Links

This website may contain links to external websites. Fenworth is not responsible for the privacy practices of those websites and we encourage you to review their privacy policies before providing personal data.

12. Updates to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with a revised effective date. We encourage you to check this page periodically. Continued use of this website after any update constitutes acceptance of the revised policy.

13. Contact

For any questions about this Privacy Policy, to exercise your rights, or to raise a data protection concern:

• Fenworth
• 7 Jalan Kia Peng, 50450 Kuala Lumpur, Malaysia
• Telephone: +60 3-2753 0614
• Email: [email protected]