Privacy Policy

1. Introduction

Cerulean Pact ("we", "us", "our") is committed to protecting the privacy of individuals who use our website and engage our legal services. This Privacy Policy explains how we collect, use, store, and protect your personal data in accordance with the Personal Data Protection Act 2010 (PDPA) of Malaysia.

This policy applies to all personal data we receive through our website at https://cerulops.live, via email, telephone, or through in-person consultations at our office in Johor Bahru. If you have any questions about this policy, you may contact us at [email protected].

2. Data We Collect

We may collect the following types of personal data when you interact with our website or engage our services: your name and contact details (email address, phone number, mailing address), information you submit through our contact form or by email, details related to your legal matter as shared during consultations, payment and billing information when you engage our services, and technical data such as IP address, browser type, and pages visited on our website.

We collect this information directly from you when you fill in our contact form, correspond with us, or provide documents and instructions for a legal engagement. We also collect certain technical data automatically through cookies and similar technologies when you browse our website.

3. Legal Basis for Processing

Under the PDPA, we process your personal data based on one or more of the following grounds: your consent (which you may withdraw at any time), the necessity of processing to perform a contract with you or to take steps at your request before entering into a contract, compliance with legal obligations that apply to our practice, and our legitimate interests in operating and improving our legal services, provided those interests do not override your fundamental rights.

4. How We Use Your Data

We use the personal data we collect for the following purposes: to respond to your enquiries submitted through our contact form or other channels, to provide legal services you have engaged us for, to communicate with you about your matter and any updates relevant to our engagement, to process payments and maintain accurate billing records, to comply with our professional and legal obligations as a Malaysian law practice, and to improve our website and the quality of our services.

We do not use your personal data for marketing purposes unless you have given us your prior consent to do so. If you do consent to receiving communications from us, you may withdraw that consent at any time by contacting us at [email protected].

5. Data Sharing

We do not sell, rent, or trade your personal data to third parties. We may share your data in limited circumstances: with third-party service providers who assist with our website hosting, analytics, or payment processing (these providers are contractually required to protect your data), with regulatory authorities or courts where required by law, or with your explicit consent when referral to another professional is appropriate for your matter.

6. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected. For legal engagement records, we retain files for a minimum of seven years after the conclusion of a matter, in accordance with professional practice standards and the Limitation Act 1953. Contact form submissions that do not proceed to an engagement are retained for up to 12 months before being deleted. Technical data collected through cookies is retained in accordance with our Cookie Policy.

7. Data Security

We take reasonable measures to protect your personal data from unauthorised access, loss, misuse, or alteration. These measures include secure storage systems with restricted access, encryption of sensitive data in transit and at rest, regular review of our data handling procedures, and staff training on data protection obligations. While we strive to protect your personal data, no method of electronic storage or transmission is completely secure, and we cannot assure absolute security.

8. Cookies

Our website uses cookies to improve your browsing experience and to help us understand how visitors use our site. For detailed information about the types of cookies we use, their purposes, and how to manage your cookie preferences, please refer to our Cookie Policy.

9. Your Rights

Under the PDPA, you have the following rights in relation to your personal data: the right to access the personal data we hold about you, the right to request correction of inaccurate or incomplete data, the right to withdraw consent for processing where consent is the legal basis, and the right to request that we cease processing your data in certain circumstances.

To exercise any of these rights, please contact us at [email protected]. We will respond to your request within a reasonable timeframe and in accordance with the requirements of the PDPA. If you are unsatisfied with our response, you have the right to lodge a complaint with the Department of Personal Data Protection (JPDP) in Malaysia.

10. Third-Party Links

Our website may contain links to external websites that are not operated by Cerulean Pact. We are not responsible for the privacy practices or content of those third-party sites. We encourage you to review the privacy policies of any external sites you visit.

11. Children's Privacy

Our services are not directed at individuals under the age of 18. We do not knowingly collect personal data from minors. If we become aware that we have inadvertently collected personal data from a person under 18 without appropriate parental consent, we will take steps to delete that information.

12. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or in applicable law. Any changes will be posted on this page with an updated "Last Updated" date. We encourage you to review this policy periodically. Continued use of our website after changes are posted constitutes acceptance of the revised policy.

13. Contact Us

If you have any questions or concerns about this Privacy Policy or our data handling practices, please contact us: