Privacy Policy

1. Introduction

Verdic Lane ("we", "us", "our") is committed to handling personal data responsibly. This Privacy Policy explains how we collect, use, store, and protect personal information provided to us in connection with our legal services, and outlines your rights as a data subject under the Personal Data Protection Act 2010 (PDPA 2010) of Malaysia.

This policy applies to personal data collected through our website at verdiclane.club, through our contact form, by telephone, by email, or in the course of providing legal services. By engaging our services or using this website, you acknowledge that you have read and understood this policy.

2. Data We Collect

We may collect and process the following categories of personal data:

• Identity data: Full name, date of birth, nationality, identification documents (for immigration and notarisation work).
• Contact data: Email address, telephone number, residential or business address.
• Business data: Company name, registration number, business address, and related corporate information (for compliance and corporate engagements).
• Technical data: IP address, browser type, pages visited, and cookies (see our Cookie Policy for further detail).

We collect personal data directly from you — through enquiry forms, email, telephone conversations, or in the course of delivering services. We do not purchase personal data from third parties.

3. How We Use Your Data

We use personal data for the following purposes:

• Delivering the legal services you have engaged us for
• Communicating with you about your matter — by email, phone, or letter
• Preparing and submitting documentation to government agencies or third parties on your behalf
• Maintaining client records as required by professional obligations
• Complying with legal and regulatory requirements
• Improving our website and services through aggregated, anonymised analytics

The legal basis for processing is primarily performance of a contract (delivering services you have engaged), legitimate interests (operating our practice), and compliance with legal obligations. Where consent is relied upon, you may withdraw it at any time.

4. Data Retention

We retain client files for a minimum of seven years following the conclusion of an engagement, as required by professional practice obligations. Website enquiry data not connected to an engagement is held for up to 12 months. Analytics data is retained in aggregated, anonymised form.

After the applicable retention period, data is securely deleted or anonymised.

5. Data Sharing

We share personal data only when necessary:

• With government agencies (e.g. Immigration Department, Expatriate Services Division, company registrars) when handling filings on your behalf
• With third-party service providers (e.g. secure email, analytics) who are contractually bound to protect data
• With professional advisers (e.g. co-counsel, notary equivalents abroad) where required for your matter
• Where required by Malaysian law or a court order

We do not sell personal data. We do not share personal data for marketing purposes with third parties.

6. Data Protection Measures

We maintain appropriate technical and organisational measures to protect personal data, including encrypted storage and transmission, access controls limiting data to staff with a need to access it, and regular review of our data handling practices. In the event of a data breach affecting your rights, we will notify you and the relevant authority as required under applicable law.

7. Cookies

Our website uses cookies to understand how it is used and to improve user experience. You can manage cookie preferences via the banner on our homepage or through our Cookie Policy page. Essential cookies necessary for site function cannot be disabled.

8. Your Rights

Under the PDPA 2010 and applicable Malaysian law, you have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate or incomplete data
• Withdraw consent for processing where consent is the basis
• Request restriction or erasure of data (subject to our professional retention obligations)
• Lodge a complaint with the Personal Data Protection Commissioner of Malaysia

To exercise any of these rights, contact us at [email protected]. We will respond within 21 days.

9. Third-Party Links

Our website may contain links to external websites. We are not responsible for the privacy practices of third-party sites and recommend you review their policies separately.

10. Children

Our services are intended for individuals aged 18 and above. We do not knowingly collect personal data from minors. If you believe a minor has provided us with data, please contact us and we will delete it promptly.