Privacy Policy

Last Updated: 18 June 2025 • Payung Restu, Shah Alam, Selangor

1. Introduction

Payung Restu ("we", "us", "our") is committed to handling all personal information with care and discretion. As a provider of pension protection legal services, we understand that the information you share with us is often sensitive, and we take our responsibility to protect it seriously.

This Privacy Policy describes what personal data we collect, why we collect it, how we use it, and your rights in relation to it. It applies to all individuals who contact us, visit our website at payungredas.biz, or engage any of our services.

Our practices are governed by the Personal Data Protection Act 2010 (PDPA) of Malaysia and the professional confidentiality obligations of the Malaysian Bar.

2. Data Controller

The data controller for information collected through this website and through our services is:

• Payung Restu
• No. 3, Persiaran Perbandaran, Seksyen 14, 40000 Shah Alam, Selangor, Malaysia
• Email: [email protected]
• Telephone: +60 3-5518 2694

3. What Personal Data We Collect

We collect personal data in the following situations:

3.1 When You Use Our Contact Form

• Full name
• Email address
• Telephone number (if provided)
• Content of your message, which may include details about your pension situation

3.2 When You Engage Our Services

• Identity documents where required (IC number, passport)
• Pension-related documents and correspondence you share with us
• Financial information relevant to your pension matter
• Details of third parties where relevant to your case (e.g. pension fund details, employer records)

3.3 When You Visit Our Website

• Cookies and browsing data (see Section 7 and our Cookie Policy)
• IP address and browser type (collected automatically by hosting infrastructure)

4. How We Use Your Personal Data

We use the personal data you provide for the following purposes:

• To respond to your enquiry and arrange an initial consultation
• To deliver the legal service you have engaged — including reviewing documents, drafting correspondence, and representing your position
• To communicate updates on the progress of your matter
• To maintain records required by professional legal practice obligations
• To comply with applicable laws and regulatory requirements
• To improve the functioning of our website (analytics data, aggregated and non-identifiable)

We do not use your personal data for marketing purposes, and we do not send unsolicited communications. We do not sell or rent your personal data to any third party.

Legal Basis for Processing

• Contractual necessity: Data processed to deliver the service you have engaged
• Consent: Where you have provided information voluntarily via our contact form
• Legal obligation: Where we are required to retain records under Malaysian law or professional rules
• Legitimate interests: For basic website analytics and fraud prevention

5. Data Retention

We retain personal data for as long as is necessary for the purpose for which it was collected, or as required by law or professional practice rules:

• Enquiry data (no engagement): 12 months from last contact
• Client matter files: 7 years from closure of the matter, in line with Malaysian legal practice standards
• Website analytics: 26 months on an aggregated basis

When data is no longer needed, it is securely deleted or anonymised.

6. Data Sharing

We do not share your personal data with third parties except in the following circumstances:

• Where necessary to advance your legal matter — for example, submitting correspondence to pension authorities on your behalf. This is done only with your knowledge and consent.
• Where required by law or court order
• Where necessary to protect the rights, property, or safety of Payung Restu or others, in accordance with applicable law

Any third parties involved in advancing your matter are bound by confidentiality. We do not engage advertising networks, data brokers, or social media platforms in relation to client data.

7. Cookies

Our website uses cookies to function properly and to understand how visitors use the site. Essential cookies are necessary for the website to work. Optional cookies (analytics, preferences) are only set with your consent.

For full details, please see our Cookie Policy.

8. Data Security

We take appropriate technical and organisational measures to protect your personal data from unauthorised access, loss, or disclosure. These include:

• Secure password-protected storage for client files
• Encrypted email communications where sensitive documents are exchanged
• Access to client data restricted to staff directly involved in the matter
• Physical security measures at our Shah Alam office
• Annual review of data security practices

In the event of a data breach that may affect your rights, we will notify you and the relevant authorities in accordance with PDPA requirements.

9. Your Rights

Under the Personal Data Protection Act 2010 (Malaysia), you have the following rights in relation to your personal data:

• Right of access: To request a copy of the personal data we hold about you
• Right of correction: To request that inaccurate or incomplete data be corrected
• Right to withdraw consent: Where processing is based on your consent, you may withdraw it at any time
• Right to prevent processing: To object to processing that is causing you damage or distress
• Right to lodge a complaint: With the Department of Personal Data Protection Malaysia if you believe your data rights have been violated

To exercise any of these rights, please contact us at [email protected] or by post to our office address above. We will respond within 21 days.

10. Third-Party Links

Our website may contain links to external resources or third-party websites. We are not responsible for the privacy practices of those sites. We encourage you to read the privacy policies of any external site you visit.

11. Children's Privacy

Our services are intended for individuals aged 18 and above. We do not knowingly collect personal data from children under the age of 18. If you believe a minor has submitted personal data to us, please contact us immediately and we will remove it.

12. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last Updated" date at the top of this page. Significant changes will be noted prominently. We encourage you to review this page periodically.

13. Contact for Privacy Enquiries

For any questions about this policy or the way we handle your personal data, please contact us:

• Email: [email protected]
• Address: No. 3, Persiaran Perbandaran, Seksyen 14, 40000 Shah Alam, Selangor
• Telephone: +60 3-5518 2694