Privacy Policy

1. Introduction

Legacine ("we", "us", "our") is an archival and records support practice based at 9 Jalan Tun Perak, 50050 Kuala Lumpur, Malaysia. This Privacy Policy explains how we collect, use, store, and protect personal data provided to us in connection with our services and website.

We are committed to handling personal data with care and in accordance with the Personal Data Protection Act 2010 (Malaysia) (PDPA). This policy applies to data collected through our website at legacine.cyou, through our contact enquiry form, and in the course of delivering our services.

If you have questions about this policy, contact us at [email protected].

2. Data we collect and how

Information you provide directly

When you use our contact form or write to us by email, we collect: your name, email address, telephone number (if provided), and the content of your message. This information is used only to respond to your enquiry and, where a service agreement is entered into, to administer that agreement.

Information collected automatically

Our website may collect standard server log information including your IP address, browser type, pages visited, and time of visit. This data is not linked to any personally identifiable information and is used only for site operation and statistical purposes.

Cookie data

We use cookies to operate the site. Details of cookie types and controls are in our Cookie Policy.

Legal basis for processing

• Your consent (for optional cookies and marketing).
• Our legitimate interest in operating and improving this website.
• Performance of a contract (when you engage us for a service).
• Compliance with legal obligations under Malaysian law.

Retention periods

Enquiry data is retained for 12 months after last contact. Data collected under a service agreement is retained for the duration of the agreement plus 7 years for legal and accounting purposes. Website log data is retained for up to 6 months.

3. How we use personal data

Personal data collected through enquiries is used to respond to your message and, where appropriate, to provide the service you have requested. We do not sell, rent, or share personal data with third parties for marketing purposes.

We may share data with service providers who assist in operating this website (such as hosting providers), but only under written agreements that restrict them from using data for any purpose other than providing services to us.

If you have provided an email address, we may send you a reply to your enquiry and, with your consent, occasional information about our services. You may withdraw consent at any time by writing to [email protected].

We will disclose personal data if required to do so by law, a court order, or a regulatory body with jurisdiction in Malaysia.

4. Data protection measures

We take reasonable steps to protect personal data against unauthorised access, loss, misuse, or disclosure. These include: password-protected systems, encrypted storage for digital client data, and restricted access limited to staff who need the information to perform their work.

Digital client archives produced under service agreements are stored on encrypted physical drives that are delivered to named family members and not retained on our systems after handover.

In the event of a data breach that is likely to result in risk to your rights, we will notify affected individuals and, where required, the relevant authority without undue delay.

5. Cookies

This website uses essential cookies necessary for its operation, and optional cookies for analytics and preferences. You may accept or decline optional cookies using the banner shown on your first visit, or manage your preferences at any time via our Cookie Policy page.

6. Your rights

Under the Personal Data Protection Act 2010 (Malaysia), you have the right to:

• Access personal data we hold about you.
• Correct inaccurate or incomplete personal data.
• Withdraw consent to the processing of your personal data.
• Request that we cease processing your personal data for direct marketing.
• Lodge a complaint with the Department of Personal Data Protection (JPDP), Malaysia.

To exercise any of these rights, write to us at [email protected]. We will respond within 21 days.

7. Third-party links

Our website may contain links to external websites. We are not responsible for the privacy practices of those sites and encourage you to read their privacy policies before providing personal data to them.

8. Children's privacy

Our services are directed at adults aged 18 and over. We do not knowingly collect personal data from persons under 18. If you believe a minor has submitted personal data to us, contact us at [email protected] so we can delete it.

9. Changes to this policy

We may update this policy from time to time. When we do, we will revise the "Last updated" date at the top of this page. Significant changes will be noted on this page for at least 30 days. Continued use of our website after a change constitutes acceptance of the updated policy.

10. Contact

For data protection enquiries, contact: