How We Handle Your Information
This notice explains what we collect when you use this website or contact us, why we hold it, and what you can ask us to do with it. It is written to be read, not to be survived. If anything here is unclear, email chua@yixie.co and ask.
- 1. Who we are
- 2. What we collect, and where from
- 3. Why we use it
- 4. Who we share it with, and who we do not
- 5. How long we keep it
- 6. Your rights
- 7. Cookies and analytics
- 8. Confidentiality is separate, and stronger
1. Who We Are
Yi Xie & Co. (Advocates & Solicitors) is the data controller for the information described in this notice.
Unit 50-11-06, 11th Floor, Wisma UOA Damansara, 50 Jalan Dungun, Damansara
Heights, 50490 Kuala Lumpur.
chua@yixie.co · +6016 227 0389
2. What We Collect, and Where From
Find the row that matches how you contacted us.
| Where it comes from | What we collect |
|---|---|
| Homepage enquiry form | Name, business email, company, headcount, and what you tell us is going on |
| Consultation form | The above, plus your position, your company registration number and a phone number |
| Corporate advisory form | The above, plus designation and the categories of work you are asking about |
| Fee schedule and guide download forms | Name, email, company, headcount |
| The employee referral form on /for-employees | Name, an email address or phone number, the name of the company you worked for, and which of five categories is closest. Not your account of what happened. |
| Your phone number, and whatever you choose to send in the conversation | |
| The website itself | IP address, browser, and which pages were viewed. See section 7. |
3. Why We Use It
- To run the conflict of interest check that every law firm must complete before it can accept instructions. This is why we ask for a company name, and on some forms a company registration number. It is not gatekeeping. Without it we cannot tell whether we are already acting for someone on the other side.
- To answer your enquiry, and if you engage us, to carry out the work.
- To send you the fee schedule or the document you asked for.
- To run the conflict check requested through /for-employees, explain whether a referral is available, and pass details only after the other firm has been identified privately and separate consent has been obtained.
- To send occasional legal updates for employers, only where you ticked the separate box asking for them. Filling in an enquiry form or asking for a fee schedule does not put you on any list.
- To meet our own obligations under the Legal Profession Act 1976 and anti-money-laundering law.
4. Who We Share It With, and Who We Do Not
We do not sell your information, we do not rent it, and we never share it for anybody else's marketing.
We do use service providers to run the practice, and they see what they need to:
- Email delivery: Google Workspace (Google LLC) via Fluent SMTP, hosted across Google's secure enterprise servers.
- Enquiries and marketing: Google Sheets (Google LLC) for logging inbound intake, and Sender.net (hosted in the European Union) for sending email updates to subscribers.
- Website hosting: Hostinger, hosted in data centres in Malaysia and Singapore.
- Payments: We do not collect credit card details or process payments on this website. All payments are made by direct bank transfer after an engagement letter and formal invoice are issued.
- Referrals: A referral firm identified to you privately, but only after the conflict check and separate consent to pass your details. Any financial interest Yi Xie & Co. has in the referral is disclosed before you decide.
Some of our service providers (Google and Sender.net) store and process data outside Malaysia. When personal data is transferred abroad, we ensure appropriate safeguards are maintained to protect your data in accordance with the Personal Data Protection Act 2010.
5. How Long We Keep It
- Enquiries that do not become engagements: 12 months from the date of enquiry, after which records are deleted.
- Client files: 7 years from the date the matter concludes, to comply with Bar Council guidelines, tax law, and statutory limitation periods.
- Marketing consent: until you withdraw it or unsubscribe.
6. Your Rights
You can ask us to:
- tell you what we hold about you, and give you a copy
- correct anything that is wrong
- stop sending you legal updates, at any time
- withdraw a consent you gave us
Email chua@yixie.co and we will respond within 21 days.
Withdrawing marketing consent does not affect work we are already doing for you. If we are in the middle of a matter, that carries on.
7. Cookies and Analytics
We keep cookies to a minimum. We use essential cookies to manage website performance and caching (LiteSpeed Cache) and to remember your preferred language (Polylang). We also use Google Site Kit to view aggregated, anonymous visitor numbers so we know which articles people read. These tools do not profile you or track you across other websites.
Two things worth saying because they are already true of this site. Our fonts are served from our own server rather than from Google, so loading a page here does not hand your IP address to a third party for that. And the WhatsApp button opens WhatsApp: from the moment it does, WhatsApp's own terms and privacy policy apply to that conversation, not ours.
8. Confidentiality Is Separate, and Stronger
Most people reading this page are really asking one question: will anyone find out I contacted a lawyer?
No. Solicitor-client confidentiality and legal professional privilege are obligations we owe you independently of this notice, and they are stricter than anything data protection law requires. They are the reason this firm exists in the form it does.