Privacy Policy

1. Introduction

Juara Partners is committed to handling personal data responsibly and in compliance with Malaysia's Personal Data Protection Act 2010 (PDPA) and any applicable guidelines issued by the Personal Data Protection Commissioner. This policy explains how we collect, use, store, and protect personal data in connection with our advisory services and this website. By engaging our services or using this website, you acknowledge you have read this policy. Questions may be directed to [email protected].

2. Data We Collect

We collect personal data through our website contact form, direct correspondence, and in the course of conducting advisory engagements. Categories of data collected include:

• Name and contact details (email address, telephone number, business address)
• Corporate identification information (company name, registration number, directorship details)
• Transaction-related information provided during an engagement
• Communications and correspondence sent to us
• Technical data collected automatically by our website (IP address, browser type, pages visited) via cookies and analytics tools where consent has been given

We do not collect sensitive personal data (as defined under the PDPA) unless it is directly relevant to an engagement and you have provided it voluntarily.

3. Legal Basis and Purpose

We process personal data on the following legal bases:

• Consent — for website analytics, marketing communications, and non-essential cookies
• Contract performance — to deliver advisory services under an engagement scope letter
• Legitimate interests — for conflict checking, compliance monitoring, and engagement management
• Legal obligation — where processing is required by Malaysian law or professional conduct rules

Specific purposes include: responding to enquiries, scoping and conducting advisory engagements, conflict-of-interest checking, billing and record keeping, compliance with Bar Council Malaysia obligations, and internal quality review.

4. Data Retention

Enquiry data not converted to an engagement is retained for up to twelve months. Engagement files are retained for a minimum of seven years from completion of the engagement, in accordance with professional record-keeping requirements under the Legal Profession Act 1976. Website analytics data is retained for up to twenty-four months.

5. Data Sharing

We do not sell personal data. We may share data in the following circumstances:

• With professional advisers engaged as co-advisers on a transaction (accountants, tax advisers, regulatory specialists), under appropriate confidentiality arrangements
• With technology service providers who process data on our behalf (document management, email hosting), under data processing agreements
• Where required by Malaysian law, court order, or regulatory authority
• With the Bar Council Malaysia in the exercise of its regulatory functions

Where data is transferred outside Malaysia, we ensure appropriate safeguards are in place consistent with the PDPA's cross-border transfer provisions.

6. Data Protection Measures

Personal data is stored on access-controlled systems. Physical documents containing personal data are stored in secured premises. Our team is subject to confidentiality obligations that extend to personal data. We do not transmit sensitive transaction data over unencrypted channels. In the event of a data breach that poses a material risk to data subjects, we will notify affected individuals and, where required, the relevant authority.

7. Cookies

Our website uses cookies to understand usage patterns and improve the site. Essential cookies are required for the site to function. Analytics and preference cookies are only placed with your consent. You may manage your cookie preferences at any time via our Cookie Policy page.

8. Your Rights Under the PDPA

Under the Personal Data Protection Act 2010, you have the following rights:

• Right of access — to request a copy of personal data we hold about you
• Right of correction — to request correction of inaccurate or incomplete data
• Right to withdraw consent — to withdraw consent for processing based on consent
• Right to prevent processing for direct marketing — to object to use of your data for marketing purposes
• Right to limit processing — to request that we limit processing in certain circumstances

To exercise any of these rights, contact us at [email protected]. We will respond within 21 days. Some requests may be subject to identity verification. Where we are required to retain data for legal or professional reasons, we will explain this to you.

9. Third-Party Links

This website may contain links to third-party websites. We are not responsible for the privacy practices of those sites. We encourage you to review the privacy policies of any third-party site before providing personal data to it.

10. Children

Our services are directed at adults engaged in commercial transactions. We do not knowingly collect personal data from persons under 18 years of age. If you believe a minor has provided personal data to us, please contact [email protected] and we will arrange for its deletion.

11. Policy Updates

We may update this policy from time to time. Material changes will be communicated to active clients by email. The most current version of this policy is always available on this page. Continued use of our services following an update constitutes acceptance of the revised policy.

12. Contact and Supervisory Authority

For data protection enquiries: [email protected]

If you are not satisfied with our handling of a data protection concern, you may lodge a complaint with the Department of Personal Data Protection Malaysia (JPDP), the supervisory authority under the PDPA, at www.pdp.gov.my.