Legal

Privacy Policy

Last Updated: 28 March 2026  ·  Threshold Advocates

1. Introduction

Threshold Advocates ("we", "us", "our") is committed to handling personal data with care and in accordance with the Personal Data Protection Act 2010 (PDPA) of Malaysia. This Privacy Policy explains what personal data we collect, why we collect it, how we use it, and your rights in relation to it.

This policy applies to personal data collected through our website at https://thresholda.info and through the provision of our legal services. If you have questions about this policy, contact us at [email protected].

2. Data We Collect

Information you provide

• Name, email address, and phone number submitted through our contact form
• Any information you include in your message or enquiry
• Communications exchanged during the course of an engagement

Information collected automatically

• Browser type, device information, and IP address (via analytics tools if consented)
• Pages visited and time spent on site (analytics cookies, where consented)
• Cookie preferences stored in your browser

Legal basis for processing

We process personal data on the following bases under the PDPA: your consent (for website analytics and marketing communications), the performance of a contract or pre-contractual steps (for enquiries and engagements), and our legitimate interest in managing our practice and communications.

3. How We Use Personal Data

• To respond to your enquiries and arrange consultations
• To carry out legal work under an engagement agreement
• To send administrative communications about your matter
• To analyse and improve our website (analytics, where consented)
• To comply with legal obligations applicable to a legal practice in Malaysia

We do not sell personal data to third parties. We do not use your data for automated decision-making.

4. Data Retention

Enquiry data not leading to an engagement is retained for up to 12 months. Data relating to client engagements is retained for a minimum of 7 years following the conclusion of the matter, in accordance with professional obligations under the Legal Profession Act 1976 and Bar Council guidelines. Analytics data is retained in accordance with the applicable analytics provider's terms.

5. Data Sharing

We may share personal data with:

• Third-party service providers who support our operations (e.g. IT services, email hosting) under appropriate data processing arrangements
• Regulatory bodies, courts, or authorities where required by law or professional obligation
• Other parties in a matter where disclosure is necessary to conduct the legal work you have instructed

We do not transfer personal data outside Malaysia except where necessary for the conduct of a specific engagement and with your awareness.

6. Data Protection Measures

• Access to client data is limited to practitioners and staff with a need to handle it
• Electronic files are stored on password-protected systems
• External communications involving sensitive personal data are handled with appropriate care
• We maintain internal protocols for responding to any data breach in a timely manner

7. Cookies

Our website uses cookies. Essential cookies are necessary for the site to function. Analytics and preference cookies are used only where you have provided consent via our cookie consent tool. For full details, see our Cookie Policy.

8. Your Rights Under the PDPA

Under the Personal Data Protection Act 2010, you have the right to:

• Access personal data we hold about you
• Correct inaccurate or incomplete personal data
• Withdraw consent to processing (where processing is based on consent)
• Request the cessation of processing of your data in certain circumstances

To exercise any of these rights, write to us at [email protected]. We will respond within a reasonable period and in any event within 21 days. We may need to verify your identity before processing your request.

If you are dissatisfied with our handling of your data, you may lodge a complaint with the Department of Personal Data Protection Malaysia.

9. Third-Party Links

Our website may contain links to external sites. We are not responsible for the privacy practices of those sites. We encourage you to review the privacy policies of any external website you visit.

10. Children's Privacy

Our services are directed at adults aged 18 and above. We do not knowingly collect personal data from minors. If you believe a minor has submitted data through our website, please contact us so we can remove it promptly.

11. Changes to This Policy

We may update this Privacy Policy from time to time. The "Last Updated" date at the top of this page reflects the date of the most recent revision. Continued use of our website or services following an update constitutes acceptance of the revised policy.

12. Contact

For questions or requests relating to this Privacy Policy:

• Email: [email protected]
• Address: 9 Jalan Semantan, Damansara Heights, 50490 Kuala Lumpur
• Phone: +60 3-2095 3782