Privacy Policy

Caskwell ("we", "us", "our") is committed to handling personal data responsibly and in compliance with the Personal Data Protection Act 2010 (PDPA) of Malaysia. This Privacy Policy describes how we collect, use, store, and protect information provided to us through this website and in the course of providing our legal services.

If you have questions about this policy, please contact us at [email protected].

1. Data Controller

The data controller for personal data collected through this website and in connection with our services is:

Caskwell
45 Jalan Ampang, 50450 Kuala Lumpur, Malaysia
Email: [email protected]

2. Data We Collect

We may collect the following categories of personal data:

• Contact information — name, email address, telephone number, and postal address provided via our enquiry form or in correspondence.
• Matter-related information — details you provide in connection with a legal matter (property details, identification documents, company information, and similar).
• Website usage data — IP address, browser type, pages visited, and time spent on pages, collected via cookies and analytics tools.

We collect this data through our website contact form, email correspondence, telephone conversations, and in-person consultations.

3. Legal Basis for Processing

We process personal data on the following grounds:

• Contractual necessity — to perform services you have engaged us to provide.
• Legitimate interests — to operate our website, respond to enquiries, and improve our service delivery.
• Legal obligation — where we are required to retain or process data under Malaysian law.
• Consent — where you have explicitly agreed, such as for marketing communications or analytics cookies.

4. How We Use Your Data

• Responding to your enquiries and arranging consultations.
• Providing and administering legal services you have engaged.
• Complying with professional obligations under the Legal Profession Act 1976 and related legislation.
• Analysing website usage to improve content and user experience.
• Sending service-related communications (not marketing, unless separately consented).

5. Data Retention

We retain personal data for as long as necessary for the purposes described above, or as required by law. Client matter files are typically retained for a minimum of seven years following the conclusion of the matter, consistent with professional practice obligations. Website enquiry data not resulting in an engagement is retained for up to twelve months.

6. Data Sharing

We do not sell or rent personal data to third parties. We may share data in the following circumstances:

• Professional advisers and authorities — land offices, SSM, financial institutions, and other parties necessarily involved in the delivery of your legal matter.
• Service providers — third-party providers who assist with website hosting and analytics, bound by appropriate data processing agreements.
• Legal obligation — if required to do so by applicable Malaysian law or court order.

7. Data Security

We implement appropriate technical and organisational measures to protect personal data against unauthorised access, loss, or misuse. These include access controls, secure storage practices, and encrypted communications where applicable. In the event of a data breach that may affect your rights, we will notify you and the relevant authorities as required by law.

8. Cookies

This website uses cookies to improve your experience and to collect anonymous analytics data. You can manage your cookie preferences at any time via our Cookie Policy page.

9. Your Rights Under the PDPA

Under the Personal Data Protection Act 2010, you have the right to:

• Request access to personal data we hold about you.
• Request correction of inaccurate or incomplete personal data.
• Withdraw consent for processing based on consent (this does not affect prior lawful processing).
• Request information about how your data is being used.

To exercise any of these rights, please contact us at [email protected]. We will respond within a reasonable period consistent with our obligations under the PDPA.

10. Third-Party Links

This website may contain links to external websites. We are not responsible for the privacy practices of those sites and encourage you to review their respective policies.

11. Children's Privacy

Our services are directed at individuals aged 18 and above. We do not knowingly collect personal data from minors. If you believe a minor has submitted personal data to us, please contact us and we will take appropriate steps.

12. International Transfers

Where we use third-party services that involve data being processed outside Malaysia, we take appropriate steps to ensure that such transfers are subject to adequate safeguards consistent with the PDPA.

13. Policy Updates

We may update this Privacy Policy from time to time. The updated version will be posted on this page with a revised "Last Updated" date. Continued use of our website following any changes constitutes your acknowledgement of the updated policy.

14. Contact for Privacy Matters

For questions, access requests, or concerns regarding this Privacy Policy, please contact us at:

Email: [email protected]
Address: 45 Jalan Ampang, 50450 Kuala Lumpur, Malaysia