Privacy Policy

1. Introduction

Lumencraft ("we", "us", "our") is committed to protecting the personal data of our clients and website visitors. This Privacy Policy explains how we collect, use, store, and protect information you provide when engaging with our services or visiting our website at lumencraft.world. It applies to all personal data processed in connection with our legal services in Malaysia.

For questions about this policy or our data practices, please contact us at [email protected].

2. Data We Collect

We may collect and process the following categories of personal data:

• Contact details: full name, email address, phone number, postal address
• Identity documentation (where required for legal matter processing)
• Matter-related information: facts, documents, and correspondence shared for legal purposes
• Website usage data: IP address, browser type, pages visited, session duration (via analytics cookies)
• Communications: records of emails, calls, and messages exchanged with our team

3. How We Collect Data

• Contact forms submitted through our website
• Direct communications (email, telephone, in-person meetings)
• Documentation submitted in connection with your legal matter
• Cookies and analytics tools (see Section 8)

4. Legal Basis for Processing

We process personal data under the following legal bases in accordance with the Personal Data Protection Act 2010 (PDPA) of Malaysia:

• Consent: Where you have provided explicit consent, such as submitting a contact form
• Contract performance: To fulfil the legal services agreement between Lumencraft and the client
• Legitimate interest: For internal administration, communications, and quality improvement
• Legal obligation: Where required by Malaysian law or court order

5. How We Use Your Data

• To respond to enquiries and provide requested legal services
• To manage and progress legal matters on your behalf
• To communicate relevant updates throughout your matter
• To maintain internal records and comply with professional obligations
• To improve our website and service quality through anonymised analytics
• To comply with applicable laws and regulatory requirements

We do not use your personal data for automated decision-making or profiling without your explicit consent.

6. Data Retention

Personal data relating to legal matters is retained for a minimum of seven years following the conclusion of the matter, as required by professional legal standards in Malaysia. Website enquiry data is retained for up to two years. Data may be retained longer where required by law or for the legitimate interests of our practice.

7. Data Sharing

We do not sell personal data to third parties. Data may be shared with:

• Relevant government departments or courts as required in the course of legal proceedings
• External parties directly involved in your matter (with your knowledge)
• Service providers supporting our operations (e.g., secure document storage), subject to data processing agreements
• Regulatory or law enforcement bodies where legally required

8. Cookies

Our website uses cookies to improve your experience. Essential cookies are required for basic site function. Optional analytics and preference cookies may be enabled or disabled via our Cookie Preferences panel. Please refer to our Cookie Policy for full details.

9. Data Security

We implement appropriate technical and organisational measures to protect personal data against unauthorised access, disclosure, or loss. These include secure storage, access controls, and regular review of data handling procedures. In the event of a data breach affecting your rights, we will notify you in accordance with applicable requirements.

10. Your Rights

Under the PDPA 2010 and applicable data protection principles, you have the right to:

• Access personal data we hold about you
• Correct inaccurate or incomplete data
• Withdraw consent (where processing is consent-based)
• Request the deletion of data, subject to legal retention obligations
• Object to processing based on legitimate interest
• Request restriction of processing in certain circumstances
• Lodge a complaint with the Department of Personal Data Protection Malaysia (JPDP)

To exercise any of these rights, please contact [email protected]. We will respond within 21 days.

11. Third-Party Links

Our website may contain links to external websites. Lumencraft is not responsible for the privacy practices or content of those sites. We encourage you to review the privacy policies of any external websites you visit.

12. Children's Privacy

Our services are directed at individuals aged 18 and above. We do not knowingly collect personal data from minors. If you believe a minor has submitted data to us, please contact us and we will take appropriate steps.

13. Changes to this Policy

We may update this Privacy Policy periodically. Changes will be posted on this page with a revised "Last Updated" date. Where changes are material, we will take reasonable steps to notify existing clients.

14. Contact Information

Lumencraft · 22 Jalan Sultan Ismail, 50250 Kuala Lumpur, Malaysia

Email: [email protected]

Phone: +60 3-9105 3847