Privacy Policy

1. Introduction

Sablecroft ("we", "us", or "our") is committed to handling personal data responsibly and in accordance with applicable Malaysian data protection law, including the Personal Data Protection Act 2010 (PDPA). This Privacy Policy explains how we collect, use, store, and protect personal data in connection with our arbitration, mediation, and legal advisory services, as well as through this website.

By using this website or engaging our services, you acknowledge that you have read and understood this policy. If you have questions, you may contact us at privacy@sablecroft.

2. Who We Are

Data Controller: Sablecroft
Address: 8 Jalan Conlay, 50450 Kuala Lumpur, Malaysia
Email: privacy@sablecroft
Phone: +60 3-6284 1597

3. Data We Collect

We may collect the following categories of personal data:

• Contact information: name, email address, telephone number, postal address
• Enquiry and matter information: details of the dispute or legal matter you provide to us
• Website usage data: IP address, browser type, pages visited, time on site (collected via analytics cookies, if consented)
• Communications: email correspondence, contact form submissions, and notes from meetings or calls

We collect only the personal data that is necessary for the purpose for which it is collected. We do not collect sensitive personal data (as defined under the PDPA) unless specifically required for a legal matter and with your explicit consent.

4. How We Collect Data

• Directly from you — via enquiry forms on this website, email, telephone, or in person
• From third parties — where a client provides data about other parties involved in a dispute, or where we receive referrals
• Automatically — through cookies and analytics tools when you use this website (see Section 8)

5. Legal Basis for Processing

Under the Personal Data Protection Act 2010 (Malaysia), we process your personal data on one or more of the following bases:

• Consent: where you have provided explicit consent, such as for marketing communications or optional cookies
• Contract: where processing is necessary to perform a legal services agreement with you
• Legitimate interests: where we have a legitimate business interest that is not overridden by your rights, such as maintaining matter records and improving our services
• Legal obligation: where processing is required by law, including professional regulatory obligations under the Legal Profession Act 1976

6. How We Use Your Data

• To respond to your enquiries and provide the legal services you have requested
• To manage our client relationship and maintain accurate matter records
• To comply with our professional obligations as members of the Malaysian Bar
• To communicate with you about your matter, including by email and telephone
• To improve this website and our service offering (using anonymised analytics data)
• To send service-related updates — you may opt out at any time

We do not use your personal data for automated decision-making or profiling that produces legal or similarly significant effects.

7. Data Sharing

We do not sell, rent, or trade your personal data. We may share your data with:

• Arbitral institutions (AIAC, ICC) or courts as required by the proceedings in which we represent you
• Opposing parties or their counsel, to the extent required by applicable procedural rules
• Third-party service providers who assist in operating this website (subject to data processing agreements)
• Professional advisers, including barristers, experts, or translators engaged on your matter
• Regulatory authorities or law enforcement bodies, where required by law

All third parties with whom we share data are required to handle it in accordance with applicable data protection law.

8. Cookies

This website uses cookies. Essential cookies are necessary for the website to function and cannot be disabled. Optional cookies (analytics and preferences) are used only with your consent. You may manage your cookie preferences at any time via our Cookie Policy page.

9. Data Retention

We retain personal data for as long as is necessary for the purposes for which it was collected, subject to our professional obligations. In general:

• Client matter records are retained for a minimum of seven (7) years following conclusion of the matter, consistent with Malaysian professional standards
• Enquiry data where no engagement results is retained for up to twelve (12) months
• Website analytics data is retained in anonymised form only

10. Data Security

We implement appropriate technical and organisational security measures to protect your personal data against unauthorised access, loss, or disclosure. These include restricted access to client files, encrypted email communications for sensitive documents, and regular review of our internal data handling practices.

In the event of a data breach that is likely to result in a risk to your rights and freedoms, we will notify the relevant regulatory authority and, where appropriate, you, in accordance with applicable law.

11. Your Rights Under the PDPA

Under the Personal Data Protection Act 2010, you have the following rights in relation to your personal data:

• Right of access: to request a copy of the personal data we hold about you
• Right of correction: to request that inaccurate or incomplete data be corrected
• Right to withdraw consent: where processing is based on consent, to withdraw that consent at any time
• Right to limit processing: to request that we limit the use of your data in certain circumstances

To exercise any of these rights, please contact us at privacy@sablecroft. We will respond within 21 days. Note that some rights may be limited by our legal professional obligations.

12. Third-Party Links

This website may contain links to external websites. We are not responsible for the privacy practices of those sites. We encourage you to review the privacy policies of any third-party sites you visit.

13. Children's Privacy

Our services are directed at commercial parties and professionals aged 18 and above. We do not knowingly collect personal data from individuals under 18. If you believe a minor has submitted personal data to us, please contact us so that it can be removed.

14. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated by posting the updated policy on this website with a revised effective date. Your continued use of the website following any such change constitutes acceptance of the revised policy.

15. Contact

For any privacy-related queries or to exercise your data rights, please contact:
Email: privacy@sablecroft
Post: Sablecroft, 8 Jalan Conlay, 50450 Kuala Lumpur, Malaysia