LEGALGUARD PRIVACY NOTICE
Version: 1.2. Effective date: 16 October 2026.
This Privacy Notice is given by LegalGuard ('the Seller') under section 7 of the Personal Data Protection Act 2010 (Act 709) as amended by the Personal Data Protection (Amendment) Act 2024 (Act A1727) ('the Act'). It is given in English and in Bahasa Malaysia. In this notice, 'we', 'us' and 'our' mean the Seller.
1. About This Notice
1.1 This notice applies to personal data that we collect and process when you visit or use the Website, place an Order for a Product, contact us, receive or interact with our messages, or otherwise deal with us, any Related Company of ours or any Partner of ours.
1.2 The terms 'Website', 'Order', 'Product', 'Price', 'Checkout', 'Terms Version', 'Related Company', 'Partner', 'Payment Provider' and 'Platform Provider' have the meanings given in the LegalGuard Terms of Sale ('the Terms').
1.3 The Seller is the data user of your personal data. Our contact details are in clause 13.
1.4 The Website is for persons aged eighteen (18) years or over. By using the Website you confirm that you are at least eighteen (18) years old. We do not knowingly collect personal data from a person under eighteen (18) years. If you believe that we have done so, contact us under clause 13 and we may delete it.
1.5 By using the Website, placing an Order or giving us personal data, you accept this notice.
2. What Personal Data We Collect
2.1 We may collect the following personal data, where you give it to us or it is generated by your dealings with us:
(a) your name;
(b) your email address;
(c) your mobile number;
(d) your company or business name, address and other business details;
(e) your order details, including the Product, the Price, any promotion code used, and the date and time of the Order;
(f) your payment status and payment reference;
(g) the Terms Version that you accepted, and the date and time you accepted it;
(h) your marketing choices;
(i) the content of any message, form, survey response or other information that you give us;
(j) records of the delivery and use of your Product, including links sent, downloads and access;
(k) technical data, including your internet protocol address, device and browser type, language, the page that referred you, the pages you view, the date and time of your visit and cookie identifiers; and
(l) any other personal data that you give us or that we lawfully obtain.
2.2 We collect personal data from you, at Checkout and when you contact us or use the Website, and automatically when you use the Website. We may also obtain it from Payment Providers, Platform Providers, Related Companies, Partners, public sources and other lawful sources.
2.3 The Website uses cookies and similar technologies, and analytics tools, to make the Website work, to keep it secure, to measure how it is used and to improve it. They may collect the technical data in clause 2.1(k). You can control cookies through your browser settings, but some parts of the Website may not work if you block them.
2.4 We do not ask for sensitive personal data, such as information about health, political opinions, religious beliefs, criminal offences or biometric data. Please do not include it in any message or document that you send us. If you do, you give your explicit consent to our processing it for the purposes in clause 3.
2.5 Contract text. If you use the Contract Risk Review, you send us the text of a contract. That text can contain personal data about you and about other people, such as directors, staff, signatories and the other party. Clause 16 explains how we handle it.
3. Why We Use Your Personal Data
3.1 We may use your personal data to:
(a) process your Order and payment;
(b) deliver the Product, and send you receipts and service messages, including confirmations, delivery notices, delay notices, refund notices and updates;
(c) give you support, process refunds and resolve disputes;
(d) keep the accounting, tax and other records that the law requires;
(e) keep proof that you accepted the Terms and made payment, protect against fraud and misuse, enforce our rights, including our Intellectual Property Rights under the Terms, and establish, exercise or defend legal rights;
(f) operate, maintain, secure and improve the Website, the Products and our business, including analytics, research, testing and the development of new products and services;
(g) communicate with you about the Website, a Product or any matter that you raise;
(h) administer and manage our business, including with Related Companies and Partners, and carry out audit, compliance and risk management;
(i) comply with the law and with requests from courts, regulators and other authorities; and
(j) any purpose directly related to the purposes above, and any other purpose to which you consent.
3.2 If you agree, we may also use your name, email address and mobile number to send you marketing messages about the products, services, offers, events, training and updates of the Seller, its Related Companies and its Partners, by email, telephone, messaging application or other means.
3.3 We use your personal data only for the purposes in this clause 3 and for purposes directly related to them, or as you consent or the law allows.
3.4 For the Contract Risk Review and any other product or tool that uses artificial intelligence, clause 16 explains how and why we use your data.
4. Legal Basis and Your Consent
4.1 We process your personal data because it is necessary to perform the contract with you, to take steps at your request before the contract is made, to comply with a legal obligation, or on any other ground in section 6(2) of the Act that applies, and where you consent.
4.2 General consent. By ticking the box at Checkout, using the Website or giving us personal data, you consent to the Seller collecting, using, storing, disclosing, sharing and transferring your personal data, within and outside Malaysia, and otherwise processing it, for the purposes in clause 3, and to the disclosure of it to the recipients and its transfer to the places described in clauses 6 and 7. You confirm that you have read this notice. If your personal data concerns another person, you confirm that you have that person's authority and consent to give it. If you do not give this consent, we cannot process your Order.
4.3 Optional marketing consent. We separately ask whether you agree to receive marketing messages (clause 3.2). The marketing box is not ticked in advance. Ticking it is optional and is not a condition of buying a Product. If you do not tick it, we shall still send you your receipt, delivery messages and other service messages.
4.4 The consents in clause 4.2 and clause 4.3 are separate. Giving or refusing the marketing consent does not affect your Order.
4.5 Withdrawal of consent is dealt with in clause 11.
5. What Is Obligatory and What Is Voluntary
5.1 It is obligatory to give the personal data marked as required at Checkout or in any form, which is currently your name, email address, mobile number and company or business name, and to accept the Terms. If you do not give the obligatory personal data, we cannot accept your Order, take payment or deliver the Product.
5.2 It is voluntary to give any other information, including your marketing choice and the content of any message you send us.
6. Who Receives Your Personal Data
6.1 We may disclose, share and give access to your personal data, within or outside Malaysia, to any of the following classes of recipient, as far as needed for the purposes in clause 3:
(a) Related Companies of the Seller;
(b) Partners of the Seller, including marketing partners, collaborating partners, referral partners and joint venture parties, and for marketing purposes only as clause 4.3 allows;
(c) service providers, IT providers, vendors and other Platform Providers, including those that provide payment processing, payment gateway, hosting, cloud storage, software, automation, email and communication, analytics, security, customer support, delivery, accounting and record keeping services to us;
(d) Payment Providers, who collect your payment details directly and may act as independent data users of those details under their own privacy policies;
(e) accountants, auditors, tax advisers, lawyers, insurers, consultants, contractors, agents and other professional advisers;
(f) courts, regulators, tax authorities, law enforcement agencies and other authorities, where the law requires or allows (section 39 of the Act);
(g) any person that takes over, acquires, invests in or merges with the Seller's business or any part of it, or any of its assets, and that person's advisers, in connection with that transaction, and that person shall use your personal data for the same purposes; and
(h) any other person to whom you consent, or to whom we are required or permitted by law to disclose it.
6.2 Where a recipient processes personal data on our behalf, we take the steps that the Act requires to make sure that it protects the personal data. A recipient in clause 6.1(d) uses your personal data under its own privacy policy.
6.3 A Related Company or Partner that receives your personal data may use it for the purposes in clause 3, and for marketing only where clause 4.3 applies, and may in turn disclose it to its own service providers, IT providers and vendors for those purposes.
6.4 We may anonymise or aggregate personal data so that it no longer identifies you. We may use and share anonymised or aggregated data for any purpose.
6.5 We use Anthropic, an artificial intelligence (AI) provider outside Malaysia, to prepare some of our results. What we send to Anthropic is set out in clause 16.
7. Transfer Outside Malaysia
7.1 The Seller, its Related Companies, its Partners and its service providers, IT providers and vendors may store, process and access your personal data in any country, including Malaysia, Singapore, the European Union, the United Kingdom, the United States and any other place where they operate or hold their systems.
7.2 We transfer personal data outside Malaysia only where the Act allows. We rely on the grounds in section 129 of the Act, including that the place has a law substantially similar to the Act or ensures an adequate level of protection at least equivalent to the Act, that appropriate safeguards are in place, including contractual protection with the recipient, that you consent, and that the transfer is necessary to perform the contract with you or on any other ground in section 129(3).
7.3 By giving your consent under clause 4.2, you consent to the transfers described in this clause 7, including to places that may not have a law substantially similar to the Act, and you acknowledge that the protection of your personal data in those places may differ from the protection in Malaysia.
7.4 Where your personal data is held in another place, the law of that place applies, and courts and authorities there may be able to access it.
7.5 Anthropic is outside Malaysia. Clause 16.5 explains how this transfer is covered.
8. How Long We Keep Your Personal Data
8.1 We keep your personal data for as long as we need it for the purposes in clause 3, to comply with the law and to deal with any claim or dispute.
8.2 We generally keep Order, payment, receipt, delivery and Terms acceptance records for up to seven (7) years from the end of the financial year in which the Order was placed, because the laws of Malaysia require us to keep business, accounting and tax records.
8.3 We keep marketing details until you withdraw your consent or until we no longer need them for marketing.
8.4 When we no longer need your personal data, we shall delete it or make it anonymous. We may keep it for longer where the law requires, where a claim is pending, or where it is held in routine backups.
8.5 Clause 16.6 explains how long we keep contract text.
9. Security
9.1 We take the practical steps that the Act requires to protect your personal data from loss, misuse, unauthorised or accidental access or disclosure, alteration or destruction, including access controls and the use of encrypted connections.
9.2 No method of storage or transmission is completely secure, and we cannot guarantee absolute security. You give us your personal data at your own risk.
10. Access, Correction and Your Other Rights
10.1 You may:
(a) ask whether we process personal data about you, and ask for a copy (section 30 of the Act);
(b) ask us to correct personal data that is inaccurate, incomplete, misleading or out of date (section 34);
(c) ask us to transmit your personal data to another data user of your choice (section 43A), subject to technical feasibility and compatibility of the data format;
(d) tell us to stop processing that is likely to cause substantial and unwarranted damage or distress (section 42); and
(e) tell us to stop using your personal data for direct marketing (section 43).
10.2 To make a request, email support@legalguard.my in writing, with 'Data request' in the subject line. We may ask for information to confirm your identity and, for a person acting for you, proof of authority.
10.3 We shall respond to a request within the period that the Act requires. We may refuse or limit a request to the extent that the Act allows, and we shall give you our reasons in writing.
10.4 We may charge the fee that the Act permits for an access request.
10.5 You may complain to us under clause 13, and you may complain in writing to the Personal Data Protection Commissioner ('the Commissioner').
11. Withdrawing Consent and Unsubscribing
11.1 You may unsubscribe from marketing messages at any time by using the unsubscribe link in any marketing email, or by emailing support@legalguard.my. We shall stop sending marketing messages within a reasonable time. We may keep your email address on a suppression list so that we do not contact you again.
11.2 You may withdraw any other consent by written notice to us (section 38 of the Act). When we receive it, we shall stop processing your personal data, except processing that is necessary to perform the contract with you, to comply with the law or on any other ground in section 6(2). Withdrawal may mean that we cannot continue to support or deal with your Order. It does not by itself cancel the contract or entitle you to a refund.
12. Personal Data Breach
12.1 If a personal data breach occurs that the Act requires us to notify, we shall notify the Commissioner, and the persons affected where the Act requires, in the manner and within the time that the Act and the Commissioner require.
13. Contact
13.1 For questions, complaints and data requests, contact us by email at support@legalguard.my.
13.2 We shall treat the address in clause 13.1 as our contact point for all personal data matters.
14. Changes to This Notice
14.1 We may update this notice at any time without notice. The new version takes effect on the date it is published on the Website and supersedes the previous version. Your continued use of the Website or a Product after publication is acceptance of the new version.
14.2 Where the Act requires us to give you notice, or to obtain your consent, for a new purpose or a new class of third party, we shall do so.
15. Language
15.1 This notice is given in English and in Bahasa Malaysia. If there is any inconsistency, the English version prevails.
16. Artificial Intelligence And Contract Text
16.1 Some of our products and tools use artificial intelligence (AI). We use Anthropic, an AI provider outside Malaysia, for this. We send data to Anthropic only to prepare the result you asked for.
16.2 What we send. For the Contract Risk Review, we send the full contract text you submit, and the details needed to prepare your memo, such as which party you are and your company name if you gave one. For any other tool that uses AI, such as our Business Protection Check, we send the information you type into that tool.
16.3 Why. We use your contract text only to prepare your memo, and to deal with technical problems, complaints, disputes and legal requirements.
16.4 Other people's data. The contract may name other people. By submitting it, you confirm that you are allowed to share it with us for this purpose. If the contract has a confidentiality clause, check that clause first. You are responsible for that check. Please remove IC numbers, bank account numbers and passwords from the text before you submit it. We do not need them.
16.5 Transfer outside Malaysia. Anthropic is outside Malaysia. We send data to Anthropic to prepare your result, which is the purpose of the transfer, on the grounds in clause 7.2, including your consent. By ticking the consent box at Checkout, or where a tool asks for your consent, you agree to this transfer.
16.6 How long we keep it. We delete the contract text from our order record once your memo has been sent. Our automation provider keeps technical logs of each run for up to 30 days, and these logs can include the contract text. A copy of your memo stays in our sent mail. We keep the other records described in clause 8.
16.7 Access by us. The memo is prepared by AI. We may open the contract text if we need to fix a technical problem, deal with a complaint or dispute, or comply with the law.
16.8 Your choice. Giving us contract text is voluntary. We cannot prepare a memo without it, and we cannot prepare it without sending it to Anthropic. If you do not want your text sent to Anthropic, please do not submit it. Clause 11 explains how to withdraw consent.