Confidential legal representation in Kuala Lumpur, Selangor & selected areas in Malaysia
White-Collar and Commercial Crime · Cyber Crime · AMLA / Money Laundering · Family Law · Legal Aid
Request Consultation
Contact

Privacy Policy

Last updated: 3 October 2026

1. Introduction

This website, www.aaronlau.com.my, is operated by Aaron Lau Advocates & Solicitors (the Firm), a legal practice in Malaysia led by Aaron Lau Peng Mun, Advocate & Solicitor of the High Court of Malaya. The Firm respects your privacy and handles personal data in accordance with the Personal Data Protection Act 2010 (PDPA), as amended, and with its duties of confidentiality as a legal practice. This notice explains what personal data we collect, why, and the choices you have.

2. Personal data we collect

  • Enquiry Form: your first name, last name, telephone number, email address and the message you write. Enquiries are emailed to the Firm and a copy is stored in this website’s database.
  • Direct communications: information you give us by email, telephone, WhatsApp or in person when you enquire about or instruct the Firm.
  • Matter information you choose to share: details about your legal situation, which may include information about alleged offences or investigations, family and matrimonial circumstances, finances, and documents.
  • Technical data: when you visit the website, limited technical and usage information (such as device, browser, pages viewed and how you arrived at the site) is collected through cookies and similar technologies described in section 8.

3. How we collect personal data

We collect personal data directly from you (for example when you complete the Enquiry Form, email, telephone or message us), automatically through your use of this website (section 8), and, where relevant to a matter you have instructed us on, from courts, authorities and other parties involved in that matter. Providing personal data through the website is voluntary, but we may be unable to respond to your enquiry without your name and a way to contact you.

4. Sensitive personal data and your consent

Some information about legal matters is sensitive personal data under the PDPA, for example information about the commission or alleged commission of an offence, or about physical or mental health. Please share only what is needed in a first enquiry. By submitting the Enquiry Form or otherwise sending us such information, you give your explicit consent for the Firm to process it for the purposes in section 5. You may withdraw your consent at any time as described in section 11, though this may mean we are unable to assist you.

5. Purposes of processing

  • to respond to your enquiry and assess whether and how the Firm can assist;
  • to provide legal advice and representation once you have instructed the Firm;
  • to carry out conflict checks, client identification and anti-money laundering checks, and to keep records as required by law and professional rules;
  • to manage accounts, billing and communications with you;
  • to maintain the security and proper operation of the website; and
  • to comply with legal, regulatory and professional obligations and to establish, exercise or defend legal claims.

We do not sell your personal data and do not use it for unrelated marketing without your consent.

6. Confidentiality and use of the Enquiry Form

All enquiries are treated as confidential. However, sending an enquiry does not by itself create a solicitor-client relationship; this arises only when the Firm confirms that it has accepted your instructions. If your matter is urgent or time-sensitive (for example, an arrest, remand application or court deadline), please telephone the Firm directly rather than relying on the form. Email and online forms are not completely secure channels, so please avoid sending highly sensitive documents until we have agreed a secure way to do so.

7. Disclosure of personal data

We may disclose personal data only where necessary to:

  • service providers that help us operate the website and our practice, such as website hosting, email and IT support providers, who are required to keep the data secure;
  • Google (analytics, fonts and advertising measurement), Microsoft (Clarity usage analytics) and WhatsApp/Meta (if you use the chat button), as described in section 8;
  • courts, tribunals, regulators, enforcement and government authorities, the Bar Council and other professional bodies, where required or permitted by law, including obligations under the Anti-Money Laundering, Anti-Terrorism Financing and Proceeds of Unlawful Activities Act 2001 (AMLA); and
  • other persons with your consent or as needed to carry out your instructions, subject to legal professional privilege and our duty of confidentiality.

8. Cookies, analytics and third-party tools

This website uses WordPress and the Elementor page builder, which may set essential cookies needed for the site to work. It also uses:

  • Google Tag Manager and Google Ads conversion tag, to measure the effectiveness of our online advertising and the use of the website. These tools may collect your IP address, device and browsing information and place cookies in your browser;
  • Microsoft Clarity (loaded through Google Tag Manager), a usage-analytics tool that records how visitors interact with pages, such as clicks, scrolling and mouse movement, and produces heatmaps and session replays. Microsoft processes this data under its own privacy statement;
  • Google Fonts, which loads website typefaces from Google’s servers and therefore receives your IP address;
  • A WhatsApp chat button (Joinchat), which opens a WhatsApp conversation with the Firm when you click it. Messages sent through WhatsApp are handled under WhatsApp’s own terms and privacy policy.

You can block or delete cookies through your browser settings, and you can manage Google advertising settings at adssettings.google.com. Blocking some cookies may affect how the website works.

9. Transfer outside Malaysia

Some of the tools above (such as Google, Microsoft and WhatsApp) process data on servers outside Malaysia. Where personal data is transferred abroad, we will do so only in accordance with the PDPA and take reasonable steps to ensure it is protected to a comparable standard.

10. Security and retention

We take practical steps to protect personal data against loss, misuse and unauthorised access, including access controls and security measures on the website. We keep personal data only for as long as needed for the purposes in section 5, and for as long as required by law and professional rules, after which it is securely deleted or anonymised. If a data breach is likely to cause significant harm, we will notify the Personal Data Protection Commissioner and affected individuals as required by the PDPA.

11. Your rights

Subject to the PDPA and our professional duties, you may:

  • ask for access to the personal data we hold about you;
  • ask us to correct personal data that is inaccurate, incomplete or out of date;
  • withdraw your consent, or ask us to limit the processing of your personal data;
  • where technically feasible, ask for your personal data to be transmitted to you or to another controller (data portability); and
  • make a complaint to us, or to the Personal Data Protection Commissioner of Malaysia (Jabatan Perlindungan Data Peribadi, www.pdp.gov.my).

To exercise these rights, contact us using the details in section 14. We may need to verify your identity first. Some information may be withheld where it is protected by legal professional privilege or where the law allows or requires us to do so.

12. Children

This website is not directed at persons under 18. Where a family law matter involves a child, the information should be provided by a parent or legal guardian.

13. Links and changes

The website may link to third-party sites that have their own privacy practices, for which the Firm is not responsible. We may update this notice from time to time; the latest version will be published on this page with its date.

14. Contact us

Personal data contact person: Aaron Lau Peng Mun, Aaron Lau Advocates & Solicitors.
Email: al@aaronlau.com.my
Telephone: +6014-884 2825
Working hours: Monday to Friday, 9.00 a.m. to 6.00 p.m.
Practice area: Kuala Lumpur, Selangor and selected matters in Malaysia.