Privacy Policy

1. Information We Collect

We collect the following categories of personal information:

• Contact information: Name, email address and telephone number provided through the website enquiry form.
• Engagement information: Details about the estate, documents and records provided as part of a commissioned engagement.
• Technical data: IP address, browser type and pages visited, collected automatically when you use this website.
• Cookie data: Preferences stored in your browser. See our Cookie Policy for details.

The legal basis for processing contact and enquiry information is your consent (provided when you submit the form). The legal basis for processing engagement information is the performance of the engagement contract. Technical data is processed under our legitimate interest in operating and improving the website.

2. How We Use Your Information

• To respond to your enquiry and describe how we may assist with estate records work.
• To carry out the commissioned engagement — inventory, digitisation or executor support — as described in the written scope.
• To communicate with you about the progress and deliverables of the engagement.
• To maintain engagement records for our own administrative purposes.
• To understand how the website is used so we can improve it.

We do not use your personal information for unsolicited marketing. We do not share personal information with third parties for their own marketing purposes.

3. Data Sharing

We do not sell personal information. We may share information with the following categories of recipient where necessary:

• Website hosting and analytics providers who process data on our behalf under data processing agreements.
• Regulatory authorities where we are required by Malaysian law to disclose information.

Estate documents and personal records handled during an engagement remain in the family's custody. We do not retain copies of original documents beyond what is needed to deliver the engagement deliverable.

4. Data Retention

• Enquiry information: retained for 12 months from the date of enquiry, or for the duration of the engagement if one is commissioned.
• Engagement records: retained for 7 years from the close of the engagement for our administrative and accounting purposes, then securely deleted.
• Website technical data: retained for up to 24 months.

5. Data Protection Measures

• Digital files relating to engagements are stored on encrypted devices with access restricted to the assigned team members.
• All team members sign a confidentiality agreement before accessing any client materials.
• This website uses HTTPS encryption for all data transmitted through the enquiry form.
• In the event of a personal data breach, we will notify affected individuals and the relevant authority as required under the PDPA.

6. Cookies

This website uses cookies to support basic site functionality and to understand how visitors use the site. You can manage your cookie preferences at any time. See our Cookie Policy for full details.

7. Your Rights Under the PDPA

Under the Personal Data Protection Act 2010 (Malaysia), you have the following rights:

• Right of access: You may request a copy of the personal data we hold about you.
• Right of correction: You may request that inaccurate personal data be corrected.
• Right to withdraw consent: Where processing is based on consent, you may withdraw it at any time. This does not affect processing carried out before withdrawal.
• Right to limit processing: You may request that we limit how we use your personal data in certain circumstances.

To exercise any of these rights, write to us at [email protected]. We will respond within 21 days.

8. Third-Party Links

This website may contain links to external sites. We are not responsible for the privacy practices of those sites and recommend that you read their privacy policies separately.

9. Children

Our services are directed at adults aged 18 and above. We do not knowingly collect personal information from persons under 18.

10. Changes to This Policy

We may update this policy from time to time. Material changes will be noted at the top of the page with a revised Last Updated date. Continued use of the website after changes are posted constitutes acceptance of the updated policy.

11. Contact

Data controller: Heirloom Atlas, Suite 12-4, Menara Amcorp, 18 Jalan Persiaran Barat, 46050 Petaling Jaya, Selangor, Malaysia.

Email: [email protected]
Phone: +60 3-6203 9748