General information
This Privacy Policy explains how TechNowLegal collects, uses, stores, and discloses personal data in connection with our website, services, and communications. The policy applies to visitors, clients, and other individuals who interact with TechNowLegal through TechNowLegal.pro or by contacting our offices.
Definitions
This section defines key terms used in the policy to clarify what we mean by personal data, processing, and related concepts.
Data we collect
We collect information to communicate with users, deliver services, comply with legal obligations, and improve our website and service delivery.
Data you provide
Data that users actively provide when contacting us, engaging services, or using forms on the website may include:
- Contact details such as name, company, email address, and phone number.
- Business and corporate identifiers, including company name and registration numbers.
- Information related to the legal matter or services requested, including contract drafts and project descriptions.
- Payment and billing information required for invoicing and transaction records.
- Correspondence and communications platform with TechNowLegal representatives.
- Optional feedback or marketing preferences provided through forms or direct contact.
Data collected automatically
When you visit TechNowLegal.pro we may collect certain technical information automatically to operate and improve the site and for security purposes.
- Device and browser information such as IP address, browser type, and operating system.
- Usage data including pages visited, time on site, and click paths.
- Log file information recorded by our servers to support technical operations and troubleshooting.
- Referrer and navigation data indicating how you reached the site.
- Aggregated analytics data used to measure site performance and user experience.
- Security-related data such as access times and attempt records to detect misuse.
Data from third parties
We may receive information about you from third-party sources when it is necessary to provide services or as otherwise permitted by law.
- Information from professional intermediaries or partner firms involved in a joint matter.
- Publicly available information relevant to a legal engagement or due diligence.
- Data from service providers that assist with payment processing, analytics, or hosting.
Purposes of processing
We process personal data for specific, documented purposes aligned with our provision of legal services and operational needs.
- To assess and respond to enquiries and to provide legal advice and representation.
- To manage client onboarding, billing, and case administration.
- To maintain records necessary for compliance with professional and regulatory obligations.
- To secure our systems, detect fraud, and prevent unauthorized access.
- To improve the website and service offerings through aggregated analytics.
- To communicate about service updates, changes to terms, or administrative matters.
- To fulfil contractual obligations entered into with clients and third parties.
- To respond to legal requests and to protect legal rights when required by law.
Legal basis for processing
We rely on legitimate bases for processing personal data, appropriate to each purpose and consistent with applicable law.
- Processing necessary for performance of a contract with the user, such as delivery of legal services.
- Processing necessary to comply with legal or regulatory obligations applicable to legal service providers.
- Processing based on legitimate interests, such as security, fraud prevention, and business operations, balanced against individual rights.
- Processing based on consent where required for specific marketing communications or optional services.
Data subject rights (reference to common international standards)
Although TechNowLegal is based in Malaysia, we recognise common international data subject rights and provide mechanisms to exercise them where applicable.
- Right to access: individuals may request a copy of personal data we hold about them.
- Right to rectification: individuals may request correction of inaccurate personal data.
- Right to erasure: in certain circumstances, individuals may request deletion of personal data.
- Right to restrict processing or to object to certain processing activities where applicable.
- Right to data portability for data provided in structured, commonly used, and machine-readable formats when applicable.
- Right to withdraw consent for processing activities based on consent, without affecting prior lawful processing.
Sharing of personal data
We share personal data only as needed to deliver services, perform contracts, or as required by law, and we apply appropriate safeguards to such sharing.
- Service providers who perform functions on our behalf, such as hosting, payment processing, and analytics.
- Professional advisors or external counsel engaged to support a matter when necessary.
- Regulators, courts, or law enforcement if required by legal process or to protect legal rights.
- Business partners where joint services or collaborations require data platform.
- Prospective buyers or other parties in connection with a merger, sale, or reorganization, subject to confidentiality protections.
- Third parties when you have provided consent for specific disclosures.
International transfers
Personal data may be transferred to jurisdictions outside Malaysia to service cross-border matters or to use hosted services. Transfers are made in accordance with applicable legal requirements and safeguards.
When transfers occur, we implement contractual protections, select reputable service providers, and apply technical and organizational measures appropriate to the risk.
Data retention
We retain personal data only as long as necessary for the purpose collected, to meet legal or regulatory obligations, or to resolve disputes.
Client account and engagement records are retained in accordance with professional retention guidelines and applicable law, typically for a minimum period required by regulation.
Communications and correspondence related to matters are retained for case management and record-keeping, subject to retention schedules and legal obligations.
System logs and security records are retained for a period necessary to support security monitoring and incident response.
When retention periods expire, personal data will be securely deleted or anonymized, unless continued retention is necessary for legal purposes.
Security measures
TechNowLegal maintains administrative, technical, and physical safeguards designed to protect personal data against unauthorized access, disclosure, alteration, or destruction.
- Access controls and role-based permissions for staff with access to personal data.
- Encryption for data in transit and, where appropriate, for stored data.
- Regular security assessments, system updates, and incident response procedures.
Your rights in relation to personal data
To exercise privacy rights or make inquiries about personal data processing, please use the contact details below. We will verify identity before responding to requests and will respond within applicable timeframes.
- Submit a request to access, correct, or delete personal data we hold about you.
- Object to or restrict certain processing activities where legal grounds allow.
- Withdraw consent for specific processing activities when processing is based on consent.
- Data portability — you can request a structured, commonly used and machine-readable copy of personal data we process about you where technically feasible and permitted by law.
- Right to object — you may object to processing based on our legitimate interests or for direct marketing purposes; we will review and respond in line with applicable law.
- Request restriction of processing — you can ask us to limit processing of your personal data while a matter is verified or contested.
- Withdraw consent — where processing is based on consent, you may withdraw that consent at any time; withdrawal does not affect processing conducted prior to withdrawal.
- Lodge a complaint with a supervisory authority — if you consider our processing violates applicable data protection law, you may file a complaint with the relevant authority in Malaysia.
Exercising your privacy rights
Requests to exercise data subject rights may be submitted in writing to our privacy contact. To help us locate the relevant information, provide your full name, company name if applicable, a description of the request and any identity verification details we may reasonably request. We will handle requests in accordance with applicable Malaysian law and respond using the contact details you provide.
We aim to acknowledge receipt of privacy requests promptly and to provide a substantive response within 30 calendar days where permitted by law. In complex cases we will inform you if an extension is necessary and explain the reason for any delay.
Marketing communications
TechNowLegal may send communications about services, events or resources relevant to IT businesses where you have provided consent or there is another lawful basis. Messages will include clear information on how to opt out. Marketing content will be limited to topics relevant to legal and regulatory matters for technology companies.
To stop marketing emails, use the unsubscribe link in any marketing message or contact our privacy team. You can also notify us by mail at Jalan Bendahara, 98000 Miri, Sarawak, Malaysia or by phone at +60126484836 to manage your communication preferences.
Children's personal data
TechNowLegal does not target or offer legal services specifically to children. We do not knowingly collect personal data from individuals under 18. If we become aware that we have collected personal data of a person under the age of 18 without appropriate consent, we will take reasonable steps to delete such data in accordance with applicable law and our internal policies.
Links to third-party sites
Our website and communications may contain links to third-party websites, tools and resources. These third parties have their own privacy practices and TechNowLegal is not responsible for their content or privacy policies. Review the privacy notices of any external site before providing personal data.
Changes to this privacy policy
We review and may update our privacy policy to reflect changes in legal, regulatory or operational requirements. The current policy is effective as of 18-04-2026. Material changes will be posted on our website and, where appropriate, communicated through other channels.