Legal
Privacy Policy
Last updated: 12 May 2026
01
Who we are
WAWL Chambers is an Advocates & Solicitors firm practising in Malaysia (“we”, “us”, “our”). We operate the website at wawlchambers.com and the free will-drafting service available on that site.
This Privacy Policy explains how we collect, use, store, and protect personal data you provide to us, and the rights you have under the Personal Data Protection Act 2010 (PDPA) of Malaysia.
02
Data we collect
When you use our website or will-drafting service, we may collect the following categories of personal data:
- Identity data: full name, date of birth, identity card or passport number.
- Contact data: email address, telephone number, mailing address.
- Will-related data: details of your assets, beneficiaries, executors, trustees, and testamentary wishes as entered into the drafting questionnaire.
- Account data: email address and hashed password used to access your draft will.
- Usage data: pages visited, browser type, device identifiers, IP address, and timestamps collected via standard server logs.
- Communications: enquiries submitted via our contact form and any subsequent correspondence.
03
How we use your data
We process your personal data only for the purposes for which it was collected:
- To generate and store your draft will document.
- To create and manage your account on the will-drafting platform.
- To communicate with you regarding your draft, your enquiry, or a booked Witness Session.
- To send you service-related notifications (e.g. when your draft is ready or approaching its annual review).
- To improve the website and the drafting tool based on aggregated, anonymised usage patterns.
- To comply with our legal and regulatory obligations as an Advocates & Solicitors firm.
04
Legal basis for processing
We process your personal data on the following grounds under the PDPA 2010:
- Your consent — provided when you accept our Terms of Service and tick the acceptance checkbox before using the drafting tool.
- Performance of a contract — where you have engaged us for the paid Witness Session.
- Legitimate interests — for internal analytics and improving the Service, where such interests are not overridden by your rights.
- Legal obligation — where processing is necessary to comply with applicable Malaysian law or court orders.
05
Data retention
We retain your personal data for as long as your account remains active and for a period of seven (7) years thereafter, in order to comply with record-keeping requirements applicable to legal practitioners in Malaysia.
Will-related data (the questionnaire responses and the generated draft) is retained for the same period to allow you to retrieve earlier versions and to support any future Witness Session or legal review.
You may request deletion of your data at any time (see section 08). Where deletion would conflict with our legal obligations, we will inform you accordingly and retain only the minimum data required.
06
Sharing of your data
We do not sell, rent, or trade your personal data. We may share it with:
- Service providers who process data on our behalf under strict contractual obligations (e.g. cloud hosting, email delivery). These providers are not permitted to use your data for any purpose beyond providing the service to us.
- Courts, regulators, or law enforcement agencies where we are required to do so by law or court order.
- Our professional indemnity insurer, strictly on a need-to-know basis in connection with a claim or potential claim.
07
Cookies and tracking
We use strictly necessary session cookies to keep you signed in to the will-drafting platform. We do not use advertising or behavioural tracking cookies.
We may use first-party analytics to understand aggregate usage patterns (e.g. which pages are visited most). Any such data is anonymised and cannot be used to identify you.
08
Your rights
Under the PDPA 2010 and applicable law, you have the right to:
- Access the personal data we hold about you.
- Correct inaccurate or incomplete personal data.
- Withdraw your consent at any time (this will not affect the lawfulness of processing carried out before withdrawal).
- Request deletion of your personal data, subject to our legal retention obligations.
- Object to processing carried out on the basis of our legitimate interests.
- Receive a copy of your data in a structured, machine-readable format.
To exercise any of these rights, please contact us via the enquiry form on the main website. We will respond within thirty (30) days. We may need to verify your identity before processing your request.
09
Security
We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These include encrypted data transmission (TLS), hashed password storage, and access controls that limit data access to authorised personnel only.
Despite these measures, no internet transmission is completely secure. If you believe your account has been compromised, please contact us immediately.
10
Children
The Service is intended for adults (18 years and above). We do not knowingly collect personal data from persons under the age of 18. If you believe a minor has provided us with personal data, please contact us so we can delete it.
11
Changes to this Policy
We may update this Privacy Policy periodically. Where changes are material, we will notify registered users by email or by posting a notice on the website. The updated Policy will take effect on the date indicated at the top of the page.
Your continued use of the Service after that date constitutes your acknowledgement of the revised Policy.
12
Contact and complaints
If you have questions about this Policy or wish to exercise your rights, please reach us via the enquiry form on the main website.
If you are not satisfied with our response, you may refer your complaint to the Personal Data Protection Commissioner of Malaysia.