Privacy Policy
Last Updated: 20 February 2026
1. Introduction
Netheroak ("we", "us", "our") is committed to protecting the personal data of our clients and website visitors. This Privacy Policy explains what information we collect, why we collect it, and how we handle it. It applies to all personal data processed through our website, our legal services, and any other interactions you have with us.
If you have questions about this policy, please contact us at [email protected].
2. Data We Collect
We collect personal data that you provide directly to us when using our contact forms, engaging our services, or communicating with us by phone, email, or in person. This may include your name, email address, phone number, postal address, identification documents, financial records related to estate matters, and any other information relevant to the services you have requested.
We also collect certain data through our website, such as browser type, IP address, pages visited, and cookies (see our Cookie Policy for details).
3. How We Use Your Data
We use personal data for the following purposes: providing and managing the legal services you have engaged us for, communicating with you about your matter, responding to enquiries submitted through our website, complying with legal and regulatory obligations, improving our website and services, and sending relevant updates about our practice if you have opted in to receive them.
The legal bases for processing your data include: performance of a contract (when we provide services to you), your consent (for marketing communications), compliance with legal obligations (as required by Malaysian law), and our legitimate interests (improving our services and ensuring security).
4. Data Retention
We retain personal data only for as long as necessary to fulfil the purposes for which it was collected. Client files related to legal services are retained for a minimum of seven years following the conclusion of the matter, in line with Malaysian Bar requirements and the Limitation Act 1953. Website analytics data is retained for up to 26 months. Contact form submissions are retained for 12 months if no engagement results.
5. Data Sharing
We do not sell your personal data to third parties. We may share your data with courts and government agencies when required by law, professional service providers who assist with estate administration (such as banks and land offices), analytics providers who help us understand website usage, and IT service providers who maintain our systems. All third parties with whom we share data are required to maintain appropriate security measures.
6. Data Security
We take reasonable steps to protect your personal data against unauthorised access, alteration, disclosure, or destruction. Our security measures include encrypted digital storage, access controls for physical and electronic files, secure communication channels for sensitive documents, regular review of security practices, and staff training on data protection responsibilities.
7. Cookies
Our website uses cookies to improve your browsing experience and to understand how visitors interact with our site. For detailed information about the types of cookies we use and how to manage your preferences, please see our Cookie Policy.
8. Your Rights
Under the Malaysian Personal Data Protection Act 2010 (PDPA), you have the right to access the personal data we hold about you, to request correction of inaccurate data, to withdraw consent for processing where consent is the legal basis, and to request information about how your data is being used. To exercise any of these rights, please contact us at [email protected]. We will respond to your request within 21 days.
9. Third-Party Links
Our website may contain links to external websites. We are not responsible for the privacy practices or content of those sites. We encourage you to review the privacy policies of any third-party sites you visit.
10. Children's Privacy
Our services and website are not directed at individuals under the age of 18. We do not knowingly collect personal data from minors. If we become aware that we have collected such data, we will take steps to delete it promptly.
11. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or applicable laws. Any updates will be posted on this page with a revised "Last Updated" date. We encourage you to review this page periodically.
12. Contact Us
If you have any questions or concerns about this Privacy Policy or our data handling practices, please reach out to us:
Netheroak
26, Jalan Hang Jebat, 75200 Melaka, Malaysia
Email: [email protected]
Phone: +60 6-2834 7196
For complaints regarding data protection, you may also contact the Department of Personal Data Protection (JPDP) Malaysia.