Privacy Policy

This Privacy Policy describes how Stonewake ("we", "us", "our") collects, uses, stores, and protects personal data in connection with our records and document support services. We are committed to handling personal data responsibly and in accordance with the Personal Data Protection Act 2010 (PDPA) of Malaysia.

If you have any questions about this policy, contact us at [email protected].

1. Data Controller

The data controller for personal data collected through this website and our services is Stonewake, located at 37 Jalan Song Thian Cheok, 93100 Kuching, Sarawak, Malaysia.

2. Data We Collect

We collect only the personal data necessary to respond to enquiries and deliver our services:

• Name and contact details (email address, telephone number) provided via our contact form or by correspondence
• Address or location details where appointments are to be held
• Scheduling and appointment information
• Technical data collected automatically when you visit our website (IP address, browser type, pages visited) via cookies and analytics tools, subject to your cookie consent

We do not collect sensitive personal data. We do not collect financial account details or government-issued identification numbers.

3. How We Use Your Data

• To respond to your enquiry and schedule appointments
• To deliver the service described in the written scope document
• To send service-related communications (appointment confirmations, materials)
• To comply with legal obligations applicable to our business in Malaysia
• To analyse website usage in aggregate (where you have consented to analytics cookies)

We do not use your personal data for direct marketing without your explicit consent. We do not sell personal data to third parties.

4. Legal Basis for Processing

Under the PDPA 2010 (Malaysia), we process personal data on the following bases:

• Your consent, given when you submit a contact form or agree to cookies
• Performance of a contract, when you engage us for a service
• Compliance with a legal obligation
• Legitimate interest in operating and improving our services

5. Data Sharing

We do not share personal data with third parties except in the following limited circumstances:

• Service providers who assist with website hosting and analytics, bound by confidentiality and data protection agreements
• Where required by Malaysian law or a lawful order from a competent authority

We do not transfer personal data outside Malaysia unless appropriate safeguards are in place.

6. Data Retention

We retain contact enquiry data for twelve months from the date of last contact. We retain data relating to completed service engagements for five years from the end of the engagement, in accordance with Malaysian recordkeeping requirements. After the applicable retention period, data is securely deleted.

7. Cookies

Our website uses cookies to ensure basic functionality and, where you consent, to collect analytics data. Full details are in our Cookie Policy. You may withdraw cookie consent at any time through the Cookie Policy page.

8. Document Handling

During a service engagement, we may handle physical or scanned copies of family documents. Original documents are never removed from the family's possession. Scanned copies are placed on storage controlled by the family. Stonewake does not retain copies of client documents after an engagement concludes.

9. Your Rights

Under the PDPA 2010 (Malaysia), you have the right to:

• Access the personal data we hold about you
• Correct inaccurate personal data
• Withdraw consent to processing (where consent is the legal basis)
• Request deletion of personal data, subject to our legal retention obligations
• Object to processing in certain circumstances

To exercise any of these rights, contact us at [email protected]. We will respond within 21 days.

10. Security

We take reasonable technical and organisational measures to protect personal data against unauthorised access, loss, or disclosure. Our website uses HTTPS encryption. Access to personal data within Stonewake is restricted to staff who need it to deliver the service.

11. Third-Party Links

Our website may contain links to third-party websites. We are not responsible for the privacy practices of those sites. We recommend reading their privacy policies before providing personal data to them.

12. Children

Our services are directed at adults aged 18 and over. We do not knowingly collect personal data from persons under 18. If you believe we have inadvertently collected such data, contact us at [email protected] and we will delete it promptly.

13. Changes to This Policy

We may update this Privacy Policy from time to time. The updated policy will be published on this page with a revised "Last updated" date. Continued use of our website or services after a change constitutes acceptance of the revised policy.

14. Contact

For all data protection enquiries: [email protected]

Postal address: Stonewake, 37 Jalan Song Thian Cheok, 93100 Kuching, Sarawak, Malaysia.

The regulatory authority for data protection in Malaysia is the Department of Personal Data Protection (JPDP), Ministry of Digital.