General Information
FlatLabLegal provides information and legal support related to apartment purchases in Malaysia. This privacy policy describes how we collect, use, disclose and retain personal data when you interact with our website FlatLabLegal.pro, contact our office, or use our legal support services. The policy applies to visitors, clients and third-party contacts and explains the categories of data processed, the purposes of processing, and how rights to access and correct personal data can be exercised. Our communications aim to be clear and factual about processes and data handling.
Definitions
This section explains key terms used in the privacy policy. Clear definitions help users understand what we mean by personal data, processing and related concepts applied in our services and website operations.
Data We Collect
We collect data necessary to deliver legal support and to operate the FlatLabLegal.pro website. Collection methods include direct user submissions, automated collection from website interactions, and information received from third parties when necessary for a transaction or compliance purpose.
Data You Provide Directly
When you contact us or use our services we collect information you provide so we can process your request, communicate relevant information and perform required legal checks.
- Identity details: full name and identification numbers provided for due diligence.
- Contact information: email address, postal address and telephone number for correspondence.
- Property and transaction data: details of the apartment, purchase price, contract copies and related documentation.
- Payment information: invoicing details necessary to arrange fees and statutory payments (we do not store full card numbers on our systems if third-party payment processors are used).
- Communications: messages, instructions and notes you provide during the provision of legal services.
- Consents and declarations required for regulatory checks and identity verification.
Automatically Collected Data
When you visit FlatLabLegal.pro we or our service providers automatically collect certain technical and usage information to operate the site securely and to improve user experience.
- Device and browser information, such as user agent and display settings.
- IP address and approximate geolocation inferred from network data for security and fraud prevention.
- Usage data: pages visited, time spent on pages, and click paths to understand navigation patterns.
- Cookie identifiers and performance metrics from analytics tools used on the site.
- Error and diagnostic information to maintain site stability and resolve technical issues.
- Timestamps of interactions to support audit trails and case management.
Data From Third Parties
In some cases we receive personal data from third parties that are involved in a property transaction or that support identity and due diligence checks.
- Conveyancing partners, estate agents and consultant supplying contract drafts and property details.
- Public registers and land offices that provide title searches and land status information.
- Third-party verification and compliance services used for identity checks and anti-funds laundering procedures.
Purposes of Processing
We process personal data for specific operational and legal purposes that are needed to provide services, comply with law, and manage our relationship with clients and prospective clients.
- To provide legal support and conveyancing services related to apartment purchases, including document review and title checks.
- To communicate with you about your case, send updates, respond to enquiries and schedule meetings.
- To perform required due diligence, identity verification and checks against public registers and regulatory requirements.
- To process invoices, arrange payments and manage business records connected to the services we provide.
- To maintain records necessary for professional standards, dispute resolution and compliance with applicable laws.
- To improve website functionality and user experience through aggregated analytics and technical troubleshooting.
- To detect, prevent and respond to security incidents, fraud or abuse involving our services.
- To fulfill other legitimate operational needs communicated at the time of data collection or otherwise permitted by law.
Lawful Bases for Processing
We rely on appropriate lawful bases to process personal data, depending on the nature of the processing and the relationship with the individual.
- Performance of a contract: processing necessary to provide requested legal services and fulfill contractual obligations.
- Legal compliance: processing required to comply with laws and regulatory obligations, such as anti-funds laundering checks.
- Legitimate interests: processing for purposes such as fraud prevention, improving services, and maintaining records, balanced against the rights of individuals.
- Consent: where specific processing activities require consent, we will obtain and document that consent and allow withdrawal where feasible.
Rights and International Standards
Although FlatLabLegal operates in Malaysia, we recognise international data protection norms. The following summarizes rights commonly found in data protection frameworks such as the GDPR and how they may be exercised with respect to our data processing activities.
- Right of access: you may request a copy of personal data we hold about you and information on how it is processed.
- Right to rectification: you can request corrections to inaccurate or incomplete personal data.
- Right to erasure: in certain circumstances you may ask us to delete personal data where retention is no longer required or lawful grounds do not apply.
- Right to restrict processing: you may request limitation of processing where accuracy is contested or other conditions apply.
- Right to data portability: where applicable, you may request personal data in a structured, commonly used, machine-readable format.
- Right to object: you may object to processing based on legitimate interests or direct marketing, subject to our rights to continue processing for certain legal reasons.
Data Sharing and Disclosure
We may share personal data with third parties only when necessary for the purposes described and under appropriate safeguards to protect confidentiality and security.
- Service providers who support our operations, such as secure cloud storage, case management platforms and payment processors, under contractual data protection obligations.
- Public authorities and land registries when required for title searches, registrations or to comply with legal obligations.
- Professional advisers and counterparties involved in a transaction, including other conveyancing practitioners and escrow agents, when necessary to complete a purchase.
- Regulatory bodies or law enforcement where disclosure is required by law or to prevent fraud or other unlawful activity.
- Aggregated or anonymized data that cannot reasonably be used to identify an individual may be shared for analytics and operational insight.
- Third parties involved in dispute resolution or claims handling when relevant to the provision of legal services.
International Transfers
Personal data may be transferred to service providers or partners outside Malaysia when necessary for the provision of services. Where transfers occur, FlatLabLegal implements contractual safeguards and technical measures to provide a comparable level of protection.
Safeguards include data processing agreements with approved processors, confidentiality obligations, and where applicable, standard contractual clauses or equivalent protections required by law.
Data Retention
Data is retained only as long as necessary to fulfil the purposes set out in this policy, to meet legal, regulatory or professional recordkeeping obligations, and to handle enquiries or disputes.
Account and client records are retained for periods required by professional conduct rules and applicable law, typically a minimum retention period aligned with legal practice standards in Malaysia.
Communications and messages related to case handling are retained for the duration of the matter and for a subsequent archival period used for record-keeping and professional obligations.
System logs, diagnostic and analytics data are retained for a limited period to support security monitoring and service maintenance, typically kept for months rather than years, unless required for an ongoing contribute.
When retention periods expire or personal data is no longer needed, we will delete or anonymize the data in a secure manner consistent with operational and legal requirements.
Data security and handling
FlatLabLegal collects and processes personal information necessary to provide apartment purchase legal support in Malaysia. We limit collection to data required for case assessment, contract review, conveyancing coordination and communication with relevant parties. Personal information is processed in accordance with applicable Malaysian data protection requirements and only retained for the period needed to fulfil the purpose or as required by law.
- Technical safeguards: encrypted storage for sensitive files, regular vulnerability scanning and access logging to track changes to client records.
- Organizational controls: role-based access to client files, staff data protection training and documented procedures for handling confidential information.
- Operational practices: secure transfer methods for documents, periodic backups and incident response procedures to limit impact of any unauthorized access.
Your Rights
Under applicable Malaysian data protection principles, individuals have a set of rights regarding their personal information processed by FlatLabLegal. The rights below describe available actions and how to submit requests.
- Access: you may request confirmation whether FlatLabLegal holds your personal data and obtain a copy of that data.
- Rectification: you may request correction or update of inaccurate or incomplete personal information.
- Erasure: where permitted by law and subject to retention obligations, you may request deletion of personal information.
- Restriction: you may ask for temporary restriction of processing in certain situations while a dispute over accuracy or lawfulness is resolved.
- Portability: where technically feasible, you may request your data in a structured, commonly used format to transfer to another service provider.
- Objection: you may object to specific processing activities, for example direct marketing or processing based on legitimate interests.
- Withdraw consent: when processing is based on consent, you may withdraw consent without affecting processing prior to withdrawal.
- Lodge complaint: you may lodge a complaint with the relevant supervisory authority if you believe your data protection rights have been breached.
How to make a rights request
To exercise any data subject right, submit a request to FlatLabLegal in writing with sufficient details to identify you and the nature of the request. Provide copies of identification where necessary to verify your identity. We may request supplementary information to process complex requests.
FlatLabLegal will acknowledge receipt of a valid request within 7 business days and aims to respond substantively within 30 calendar days. Response times may be extended for complex or voluminous requests, in which case we will inform you of any reasonable extension.
Marketing communications
FlatLabLegal may send informational updates, service notices and legal guidance relevant to apartment purchase processes if you opt in. Marketing communications are based on your consent or a prior business relationship where permitted. Messages will indicate whether they are promotional and how to opt out.
You may unsubscribe from marketing communications at any time by following the unsubscribe link in an email or by contacting us. Unsubscribe requests are processed promptly and will not affect non-marketing communications related to your matter.
Children's personal data
FlatLabLegal does not intentionally collect personal data from minors for apartment purchase services. If we become aware that we hold data for someone under the age of majority, we will take steps to delete it unless retention is required for a legitimate purpose or by law.
Links to third party services
Our website may include links to external resources such as government registries, property platforms and third-party providers. FlatLabLegal is not responsible for the privacy practices of third parties; review their privacy notices before providing personal information.
Changes to this privacy policy
FlatLabLegal may update this privacy information to reflect legal, operational or technological changes. Material changes will be posted on FlatLabLegal.pro with an updated effective date. Continued use of our services after changes indicates acceptance of the updated terms.