Privacy Policy

This notice explains how Lawgistics ("we", "us") processes personal data when you use lawgistics.my. It is issued in accordance with the Personal Data Protection Act 2010 ("PDPA"). A Bahasa Malaysia version is available on request.

1. Data we collect

• Account data, your name, email address, and password when you create an account.
• Document data, the answers you provide when generating a document, and the documents produced from them.
• Enquiry data, the information you submit through our contact and lawyer-matching forms, including company name, phone number, and the description of your matter.
• Transaction data, records of purchases. Card details are handled by our payment processor and are never stored on our systems.
• Technical data, IP address, browser type, and pages visited, collected to keep the service secure and working.

2. Why we process it

• To create, store, and deliver the documents you request.
• To match you with a lawyer where you have asked us to, and to share your enquiry with that lawyer.
• To take payment and issue receipts.
• To send service messages, and, where you have subscribed, our newsletter.
• To meet legal, regulatory, and record-keeping obligations.

3. Automated document reading

Where you choose to use a feature that reads a document or a description for you, such as the court pack's invoice reader, the text you provide and any file you attach are transmitted to our artificial intelligence provider for the sole purpose of extracting the details you asked us to extract. That provider processes the content on our instructions, does not use it to train its models, and retains it only for the period needed to return a result. These features are always optional: an equivalent guided path is offered that keeps the information on your device. Do not upload material you are not entitled to disclose.

4. Disclosure

We disclose personal data only to: the lawyer we match you with, at your request; our hosting, email, and payment providers acting on our instructions; and any authority where disclosure is required by law. We do not sell personal data, and we do not share it for third-party marketing.

5. Retention

Account and document data is retained for as long as your account is active, and for six years afterwards where required for legal and accounting purposes. Enquiry data that does not result in an engagement is deleted after twenty-four months.

6. Security

Data is encrypted in transit using TLS and encrypted at rest. Access is restricted to personnel who need it to deliver the service, and all access is logged.

7. Your rights

Under the PDPA you may request access to your personal data, request correction of inaccurate data, limit how we process it, and withdraw consent to direct marketing at any time. To exercise any of these rights, write to privacy@lawgistics.my. We respond within twenty-one days.

8. Cookies

We use strictly necessary cookies to keep you signed in and to remember your preferences. We do not use advertising cookies or third-party trackers.

9. Changes

Where we make a material change to this notice we will tell account holders by email before it takes effect.

10. Contact

Questions about this notice, or about how we handle personal data, go to privacy@lawgistics.my or through our contact page.