Privacy Policy | Hikmah Syarie

1. Introduction

Hikmah Syarie ("we", "our", "the firm") is committed to protecting the personal information of individuals who contact us, retain our services, or visit our website. This Privacy Policy sets out how we collect, use, store, and protect personal data in compliance with the Personal Data Protection Act 2010 (Malaysia) ("PDPA") and our professional obligations as legal practitioners.

Questions about this policy may be directed to: [email protected]

2. Data We Collect

We may collect the following categories of personal data:

Identification data: Full name, identity card number (where required for court filings), date of birth.
Contact data: Email address, telephone number, residential or correspondence address.
Matter-specific data: Information about your legal matter, family circumstances, asset details, and documentation relevant to your engagement with us.
Website data: IP address, browser type, pages visited, and session duration, collected through cookies and analytics tools.
Correspondence data: Content of emails, messages, and consultations with our team.

3. How Data Is Collected

Data is collected through: the contact form on our website; direct correspondence by email or telephone; consultation sessions (in-person or remote); court filings and related documentation where you engage us for representation; and automatically through cookies and website analytics tools when you visit our website.

4. Legal Basis for Processing

Under the PDPA, we process personal data on the following bases: your consent (for marketing communications and website analytics); performance of a contract or engagement (for service delivery); compliance with our legal and professional obligations (for court filings and regulatory requirements); and our legitimate interests as a legal practice (for business administration, file management, and client communication).

5. How We Use Personal Data

To respond to your enquiry and provide legal consultation
To manage and progress your matter, including court filings and communications with third parties such as Amanah Raya Berhad, state Jabatan Agama Islam, and opposing parties where instructed
To comply with professional obligations and court orders
To send you relevant updates about your matter by email or telephone
To improve the functionality and content of our website
For internal business administration, invoicing, and record-keeping

6. Data Retention

Client matter files are retained for a minimum of seven years following closure of a matter, consistent with standard legal practice obligations. Website enquiry data not resulting in an engagement is retained for up to twelve months. Analytics data is retained for up to twenty-four months. Upon expiry of the relevant retention period, data is securely destroyed.

7. Data Sharing

We do not sell personal data. We share personal data only as necessary:

With state Syariah courts and judicial bodies as required for your matter
With Amanah Raya Berhad, Wasiat Shariah, or similar bodies where you have instructed us to coordinate registration
With civil court solicitors where parallel proceedings require coordination
With our analytics service provider (Google Analytics, used on our website)
With professional advisers (accountants, IT service providers) who are bound by confidentiality
Where required by law, court order, or regulatory authority

8. Data Security

We implement appropriate technical and organisational measures to protect personal data against unauthorised access, loss, alteration, or disclosure. These include: encrypted email communications for sensitive matters; access-controlled file management systems; staff training on data handling obligations; and regular review of security practices. In the event of a data breach affecting your personal data, we will notify you as required under the PDPA.

9. Cookies

Our website uses cookies to improve your experience and analyse site usage. For full details of the cookies we use and how to manage your preferences, please see our Cookie Policy.

10. Your Rights Under the PDPA

Under the Personal Data Protection Act 2010, you have the right to:

Access personal data we hold about you
Correct inaccurate or incomplete personal data
Withdraw consent for processing (where processing is based on consent)
Request that we cease processing your data for direct marketing purposes
Lodge a complaint with the Department of Personal Data Protection Malaysia

To exercise any of these rights, please contact us at [email protected]. We will respond within the timeframe required by the PDPA.

11. Third-Party Links

Our website may contain links to external sites. We are not responsible for the privacy practices or content of those sites. We encourage you to review their privacy policies before providing any personal data.

12. Children

Our services are directed at adults (18 and above). We do not knowingly collect personal data from individuals under 18. If you believe we have inadvertently collected such data, please contact us so we can take appropriate steps.

13. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated by posting the updated policy on our website with a revised "Last Updated" date. Continued use of our website or services following such changes constitutes acceptance of the updated policy.

14. Contact

Data controller: Hikmah Syarie
Level 6, Block 4A, Plaza Sentral, Persiaran Perdana, Presint 2, 62100 Putrajaya, Malaysia
Email: [email protected]
Phone: +60 3 8887 4163