Privacy Policy
Wawasan Legal | Last Updated: 28 February 2026 | Effective: 28 February 2026
Wawasan Legal ("we", "us", "our") is committed to protecting the personal data of individuals and organisations who engage with our services or contact us through our website. This Privacy Policy explains what personal data we collect, why we collect it, how we use and protect it, and what rights you have under applicable law. Our practices comply with Malaysia's Personal Data Protection Act 2010 (PDPA).
1. Data We Collect
We collect personal data that is necessary to assess eligibility, provide advisory services, and communicate with clients. Depending on the service engaged, this may include:
- Identity data: Full name, nationality, passport number, date of birth
- Contact data: Email address, phone number, residential address
- Employment data: Employer details, job title, salary information, employment history
- Immigration data: Visa history, pass categories, existing permit details
- Website data: IP address, browser type, pages visited (via analytics cookies where consent is given)
- Form data: Information submitted via our contact form including enquiry content
2. How We Use Your Data
We process personal data under the following legal bases and for the following purposes:
Service delivery (Contract)
Assessing eligibility, compiling applications, liaising with government authorities (Immigration Department of Malaysia, Jabatan Imigresen, ESD, MYXpats), and managing your application through to outcome.
Communication (Legitimate interest)
Responding to enquiries, providing status updates, sending renewal reminders, and corresponding on application matters.
Legal compliance (Legal obligation)
Retaining records as required by Malaysian law, including for audit or regulatory purposes, and providing data to government authorities as required for application processing.
Website analytics (Consent)
If you consent to analytics cookies, we use aggregated usage data to improve our website. This data does not identify you personally.
3. Data Sharing
We share your personal data only where necessary and with appropriate safeguards in place:
- Government authorities: Immigration Department of Malaysia, Jabatan Imigresen Malaysia, ESD, and MYXpats Centre as required to process your application.
- Sponsoring employer (corporate clients): Application status and document requirements, shared only as necessary and with your employer's knowledge as part of the corporate engagement.
- Service providers: IT and cloud storage providers who process data on our behalf under data processing agreements. These providers may not use your data for any other purpose.
We do not sell, rent, or provide your personal data to any third party for marketing or commercial purposes.
4. Data Retention
We retain client records for a minimum of seven (7) years following the conclusion of an engagement, consistent with Malaysian legal requirements for professional records. Website enquiry data from individuals who do not proceed to engagement is retained for twelve (12) months. You may request deletion of your data earlier, subject to any legal retention obligations that apply.
5. Data Security
We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or destruction. These measures include:
- Encrypted storage of client documents and personal data
- Restricted access to personal data on a need-to-know basis within the firm
- Secure document transmission practices for sensitive immigration documents
- Regular review of data handling practices and access controls
In the event of a data breach that is likely to result in a high risk to your rights, we will notify you without undue delay as required under applicable law.
6. Cookies
Our website uses cookies to ensure basic functionality and, where you consent, to collect analytics data on site usage. Essential cookies are necessary for the site to operate and cannot be disabled. For full details, please see our Cookie Policy.
7. Your Rights Under PDPA
Under Malaysia's Personal Data Protection Act 2010, you have the following rights in relation to your personal data:
Right of access
Request a copy of the personal data we hold about you.
Right of correction
Request correction of inaccurate or incomplete personal data.
Right to withdraw consent
Withdraw consent to processing at any time where consent is the legal basis.
Right to limit processing
Request that we restrict the use of your personal data in certain circumstances.
Right to complain
Lodge a complaint with Malaysia's Personal Data Protection Commissioner.
Right to erasure
Request deletion of your data, subject to legal retention obligations.
To exercise any of these rights, contact us at [email protected]. We will respond within 21 days as required under the PDPA.
8. Third-Party Links
Our website may contain links to third-party websites including government portals and professional resources. We are not responsible for the privacy practices of these external sites. We encourage you to review their privacy policies before providing any personal data to them.
9. Children
Our services are intended for individuals aged 18 and above. We do not knowingly collect personal data from persons under 18 years of age. If you believe we have inadvertently collected such data, please contact us and we will take steps to delete it promptly.
10. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. The updated policy will be published on this page with a revised "Last Updated" date. Where changes are material, we will notify active clients by email. Continued use of our services after any update constitutes acceptance of the revised policy.
11. Contact
For privacy-related enquiries, data access requests, or to exercise your rights, please contact our data privacy contact: