Privacy Policy

Bestari Lindung ("we", "us", "our") is a legal practice based at 7, Jalan Tunku Abdul Rahman, 93100 Kuching, Sarawak, Malaysia. We provide pension protection legal services to clients across Sarawak and East Malaysia.

This Privacy Policy explains how we collect, use, store, and protect personal data provided to us in connection with our services and website at bestaril.club. It applies to all individuals who contact us, engage our services, or visit our website.

We are committed to handling personal data with the care and discretion that our clients' sensitive financial and legal matters deserve. This policy is prepared in accordance with the Personal Data Protection Act 2010 (PDPA) of Malaysia.

If you have questions about this policy, please contact us at [email protected].

We collect personal data only as necessary for the provision of our services and the operation of our website. This includes:

• Contact information — your name, email address, and telephone number, provided when you contact us through our website form, by email, or by telephone.
• Engagement information — details of your pension matter, scheme documentation, correspondence with pension administrators, and related personal and financial information shared in the course of a legal engagement.
• Website usage data — anonymised technical information such as browser type, pages visited, and visit duration, collected through analytics cookies where consent has been provided.

Legal basis for processing: We process your data on the basis of (a) your consent, where you have provided it; (b) performance of a contract, where data is necessary to deliver our services to you; and (c) legitimate interests, where we have a reasonable business need to process data and that need does not override your rights.

Retention: Contact enquiry data is retained for 12 months from last contact if no engagement results. Engagement data is retained for 7 years following conclusion of an engagement, in line with standard legal professional practice in Malaysia.

We use personal data for the following purposes:

• Responding to enquiries and arranging initial consultations
• Delivering legal services under an engagement agreement
• Preparing documents, submissions, and written outputs on your behalf
• Communicating with pension administrators, government offices, or other third parties as authorised by you in connection with your matter
• Maintaining records required by professional obligations under the Legal Profession Act 1976
• Improving our website and service delivery, using anonymised analytics data

We do not use your personal data for marketing purposes beyond responding to your expressed interest in our services. We do not send unsolicited marketing communications.

Data sharing: We share personal data only where required to deliver your matter — for example, with pension scheme administrators, regulatory bodies, or government offices — and only with your knowledge. We do not sell or transfer personal data to third parties for their own commercial purposes.

We take the security of client data seriously and maintain appropriate technical and organisational measures to protect it:

• Electronic data is stored on password-protected systems with access limited to authorised staff
• Physical documents are held in secured storage within our Kuching office
• Email communication of sensitive documents uses encrypted transmission where available
• Access to client files is restricted to staff directly involved in the relevant engagement
• In the event of a data breach that may affect your rights, we will notify you and the relevant authority in accordance with PDPA obligations

All staff are bound by professional confidentiality obligations under the Legal Profession Act 1976 and our internal data handling protocols.

Our website uses cookies to support basic functionality and, where consent is provided, to collect anonymised usage data to help us improve the site. Essential cookies are necessary for the site to operate and are placed automatically. Analytics and preference cookies are placed only if you accept them.

You can manage your cookie preferences at any time. For full information, please see our Cookie Policy.

Under the Personal Data Protection Act 2010, you have the following rights regarding your personal data held by us:

• Right of access — to request a copy of the personal data we hold about you
• Right of correction — to request correction of inaccurate or incomplete data
• Right to withdraw consent — to withdraw consent to processing where consent is the legal basis; this will not affect processing already completed
• Right to limit processing — to request that we limit how we use your data in certain circumstances
• Right to complain — to lodge a complaint with the Department of Personal Data Protection Malaysia (JPDP) if you believe your data rights have been infringed

To exercise any of these rights, please write to us at [email protected]. We will respond within 21 days of receiving a valid request.

For any questions about this policy or your personal data, please contact us:

Bestari Lindung
7, Jalan Tunku Abdul Rahman, 93100 Kuching, Sarawak, Malaysia
[email protected]
+60 82-419 583

The Department of Personal Data Protection Malaysia (JPDP) is the supervisory authority for data protection in Malaysia. If you are dissatisfied with our response, you may contact JPDP at www.pdp.gov.my.