Legal Document

Privacy Policy

Last Updated: 18 March 2025 | Effective: 18 March 2025

Lentera Pencen ("we", "us", "our") is committed to handling personal data responsibly and in accordance with the Personal Data Protection Act 2010 (Malaysia) ("PDPA"). This Policy explains what personal data we collect, why we collect it, how we use it, and the rights you have in relation to it.

If you have questions about this Policy or about how your data is handled, please contact us at privacy@lenteraped or at our office: No. 47, Jalan Wong Ah Fook, 80000 Johor Bahru, Johor, Malaysia.

1. Information We Collect

We collect personal data in the following circumstances:

1.1 When You Contact Us

Name and contact information (email address, telephone number)
The nature of your enquiry
Any additional details you share with us voluntarily

1.2 During a Client Engagement

Identity documents (as required for legal representation)
Employment and pension history
Financial information relevant to the matter
Family details where relevant to estate or settlement work

1.3 When You Visit Our Website

Technical data collected via cookies (see our Cookie Policy)
Usage data, such as pages visited and time spent

2. Legal Basis for Processing

We process your personal data on the following grounds under the PDPA:

Consent — when you submit a contact form or enquiry
Contract — when processing is necessary to deliver a legal service you have engaged us for
Legitimate interest — for basic website analytics and security
Legal obligation — where Malaysian law requires us to retain certain records

3. How We Use Your Data

To respond to your enquiries and arrange consultations
To deliver legal services you have engaged
To prepare and store documents related to your matter
To communicate with pension authorities or employers on your behalf
To maintain our client records as required by legal professional obligations
To improve our website through aggregated analytics

We do not use your data for unsolicited marketing. We do not sell your data to any third party.

4. Data Sharing

We share personal data only in the following circumstances:

With your explicit consent — for example, when corresponding with a pension authority on your behalf
With professional advisers — such as barristers or notaries, where a matter requires it
With regulatory bodies — where required by Malaysian law or professional rules
With service providers — who assist us in operating our systems (e.g., secure document storage), bound by appropriate data processing agreements

We do not transfer your data outside Malaysia except where required for the specific matter, and only with appropriate safeguards in place.

5. Data Retention

We retain client files for a minimum of seven years following the conclusion of a matter, in accordance with legal professional obligations in Malaysia. Contact enquiries that do not result in an engagement are retained for no longer than twelve months. Website analytics data is retained for a maximum of twenty-four months.

6. Security Measures

We protect your personal data using appropriate technical and organisational measures, including:

Secure, password-protected file management systems
Physical document storage with restricted access
Staff training on confidentiality obligations
Regular review of data handling procedures

In the event of a data breach that presents a material risk to your rights, we will notify affected individuals and the relevant authority as required under Malaysian law.

7. Cookies

Our website uses cookies for basic functionality and analytics. Essential cookies cannot be disabled. You may control optional cookies through our Cookie Policy page.

8. Your Rights

Under the PDPA, you have the following rights in relation to your personal data:

Right of access — to request a copy of the personal data we hold about you
Right of correction — to request that inaccurate or incomplete data be corrected
Right to withdraw consent — where processing is based on consent
Right to make complaints — to the Personal Data Protection Commissioner Malaysia

To exercise any of these rights, please contact us at privacy@lenteraped. We will respond within fourteen working days.

9. Third-Party Links

Our website may contain links to external sites. We are not responsible for the privacy practices of those sites and recommend you review their privacy policies independently.

10. Children

Our services are directed at adults aged 18 and over. We do not knowingly collect personal data from persons under the age of 18 without appropriate parental consent.

11. Changes to This Policy

We may update this Policy periodically to reflect changes in law or our practices. The date at the top of this page will reflect the most recent revision. Continued use of our website or services after an update constitutes acceptance of the revised Policy.

12. Contact

Data controller: Lentera Pencen
Address: No. 47, Jalan Wong Ah Fook, 80000 Johor Bahru, Johor, Malaysia
Email: privacy@lenteraped
Telephone: +60 7-3845 2967