Privacy Policy
Last Updated: 15 February 2026 · Cahaya Green
1. Introduction
Cahaya Green ("we", "us", "our") is committed to handling your personal information with care and in accordance with the Personal Data Protection Act 2010 (PDPA) of Malaysia. This Privacy Policy explains what personal data we collect, why we collect it, how we use it, and what rights you have in relation to that data.
This policy applies to personal data collected through our website at cahayagr.biz and through direct enquiries made to our office. By using our website or submitting an enquiry, you acknowledge that you have read and understood this policy.
For questions about this policy, please contact us at: [email protected]
2. Data Controller
The data controller responsible for your personal data is:
Cahaya Green
Level 10, Wisma Sabah, Jalan Tun Fuad Stephens
88000 Kota Kinabalu, Sabah, Malaysia
Email: [email protected]
Tel: +60 88-246 3718
3. Personal Data We Collect
We collect the following categories of personal data:
Data you provide directly
- Full name
- Email address
- Phone number (if provided)
- Details of your enquiry or matter (as provided in the message field)
Data collected automatically
- IP address and browser type
- Pages visited on our website and time of visit
- Referring website (if applicable)
- Cookie identifiers (see Section 7)
4. Legal Basis for Processing
We process your personal data on the following legal grounds under the PDPA 2010:
- Consent — where you have submitted an enquiry form or accepted optional cookies
- Legitimate interests — for website analytics that help us improve our service, where these interests do not override your rights
- Legal obligation — where we are required to retain certain records under Malaysian law
5. How We Use Your Data
- To respond to enquiries submitted through our contact form
- To assess whether we are able to assist with the matter described
- To communicate with you about our advisory services
- To comply with our obligations under the Legal Profession Act 1976 and Bar Council conduct rules
- To analyse website usage and improve the user experience (analytics cookies, if consented)
We do not use your personal data for unsolicited marketing purposes, and we do not sell your data to third parties.
6. Data Sharing
We may share your personal data with the following categories of recipients, strictly as required:
- IT service providers — for website hosting, email, and technical support, under confidentiality obligations
- Analytics providers — including Google Analytics (where analytics cookies are accepted), subject to data processing agreements
- Regulatory authorities — where disclosure is required by law or court order under Malaysian jurisdiction
We do not transfer personal data outside Malaysia without adequate safeguards in place.
7. Cookies
Our website uses cookies to function and to understand how it is used. Essential cookies are necessary for basic website operation and are always active. Optional analytics and marketing cookies are only used with your consent. For full details, please see our Cookie Policy.
8. Data Retention
We retain personal data for as long as is necessary for the purposes described in this policy, subject to the following periods:
- Enquiry records: up to 2 years from the date of initial contact, unless an engagement is entered into
- Client matter records: in accordance with Malaysian legal professional conduct requirements (typically 7 years from matter closure)
- Website analytics data: as determined by the analytics provider's data retention settings (typically 26 months)
9. Data Protection Measures
We apply the following measures to protect your personal data:
- HTTPS encryption for all data transmitted through our website
- Access to personal data restricted to staff who require it for their role
- Third-party service providers subject to data processing agreements
- Internal review of data handling practices periodically
If we become aware of a data breach that poses a risk to your rights, we will take appropriate steps to mitigate the risk and notify affected individuals as required under applicable law.
10. Your Rights
Under the Personal Data Protection Act 2010 (Malaysia) and, where applicable, the GDPR, you have the following rights in relation to your personal data:
- Right to access — to request a copy of the personal data we hold about you
- Right to correction — to request that inaccurate data be corrected
- Right to withdraw consent — at any time, where processing is based on consent (this does not affect the lawfulness of processing before withdrawal)
- Right to object — to processing of your data for legitimate interests purposes
- Right to erasure — to request deletion of your data, subject to any overriding legal retention obligations
To exercise any of these rights, please contact us at [email protected]. We will respond within 30 days of receipt of a valid request.
If you are dissatisfied with how we handle your personal data, you may lodge a complaint with the Department of Personal Data Protection (PDPD) Malaysia.
11. Third-Party Links
Our website may contain links to external websites, including government portals and regulatory bodies. We are not responsible for the privacy practices of those websites and encourage you to review their privacy policies before providing any personal data to them.
12. Children's Privacy
Our advisory services are provided to businesses and professionals. Our website is not directed at individuals under the age of 18, and we do not knowingly collect personal data from minors. If you believe we have inadvertently collected data from a minor, please contact us so that we may delete it.
13. Changes to This Policy
We may update this Privacy Policy from time to time. The updated version will be posted on this page with a revised "Last Updated" date. Continued use of our website after a policy update constitutes acceptance of the revised terms.
14. Contact
For any questions relating to this Privacy Policy or to exercise your rights, please contact:
[email protected]
Cahaya Green, Level 10, Wisma Sabah, Jalan Tun Fuad Stephens, 88000 Kota Kinabalu, Sabah