Privacy Policy

1. Introduction

Orrin Bridge ("we", "us", "our") is committed to handling personal data with care. This policy explains what data we collect, why we collect it, how long we keep it, and what your rights are under Malaysia's Personal Data Protection Act 2010 (PDPA).

This policy applies to personal data collected through our website at https://orrinbri.blog, through our contact form, and in the course of delivering our three services: the Referral and Directory Session, the Document Preparation Companion, and the Family Coordination Retainer.

If you have questions about this policy, please write to us at [email protected] or by post to 73 Jalan Damansara, 50490 Kuala Lumpur, Malaysia.

2. Data We Collect

We collect personal data through the following channels:

• Contact form: name, email address, and telephone number (telephone is optional).
• Session engagement: names and contact details of family members relevant to the service, and the questions or documents brought to the session. The scope of data collected in any session is limited to what is necessary for the service described in the written scope agreement.
• Coordination retainer: names of household members, document copies provided by the family, calendar information, and correspondence records for the purposes of the retainer service.
• Website analytics: aggregated usage data through cookies, if you have consented. See Section 5 for details.

Legal basis for processing:

• Contact form submissions: consent (you choose to submit the form).
• Service delivery: performance of a contract or pre-contractual steps.
• Record-keeping and compliance: legitimate interests and legal obligation under Malaysian law.

Retention periods: Contact form data is retained for up to 12 months from submission. Session records and document copies are retained for the duration of the engagement plus 24 months, unless a shorter period is agreed in writing. Analytics data is aggregated and not retained in personally identifiable form beyond 14 months.

3. How We Use Your Data

• Responding to enquiries submitted through the contact form.
• Delivering the service described in the written scope agreement for the session or retainer.
• Producing written summaries, printed directories, and submission folders as part of the relevant service.
• Maintaining the document archive and correspondence tracking log under the coordination retainer.
• Complying with any legal obligation under Malaysian law.

We do not use personal data for marketing or send promotional communications. We do not share personal data with third parties for advertising purposes.

Where we engage a third-party service provider (for example, encrypted cloud storage for the document archive), that provider is bound by a data processing agreement and may only use the data for the purposes we specify.

4. Data Protection Measures

• Document archives held under the coordination retainer are stored with encryption at rest. Each household in the arrangement receives a separate copy set accessible only to authorised members of that household.
• Access to personal data within our systems is limited to the named administrator and principal staff involved in the relevant engagement.
• Session notes and records are stored on password-protected systems and are not transmitted by unencrypted email.
• In the event of a data breach that is likely to result in risk to your rights, we will notify you and the relevant authority within the timeframe required under the PDPA.

We conduct a review of our data handling practices annually.

5. Cookies

Our website uses cookies. We use essential cookies to maintain basic site functionality. We use analytics cookies, if you consent, to understand how visitors use the site in aggregate. We do not use marketing or advertising cookies.

You can manage your cookie preferences at any time via our Cookie Policy page. Withdrawing consent for non-essential cookies will not affect your ability to use the site or to enquire about our services.

6. Your Rights Under the PDPA (Malaysia)

Under the Personal Data Protection Act 2010 (Malaysia), you have the following rights in relation to the personal data we hold about you:

• Right to access: you may request a copy of the personal data we hold about you.
• Right to correction: you may ask us to correct inaccurate or incomplete personal data.
• Right to withdraw consent: where processing is based on consent, you may withdraw it at any time. Withdrawal does not affect the lawfulness of processing before withdrawal.
• Right to limit processing: you may ask us to restrict how we use your data in certain circumstances.
• Right to complain: you may lodge a complaint with the Department of Personal Data Protection Malaysia (JPDP) if you consider that our processing of your personal data infringes the PDPA.

To exercise any of these rights, please write to [email protected]. We will respond within 21 days of receiving your request. We may need to verify your identity before processing the request.

7. Third-Party Links

Our website may contain links to external websites, including the websites of public agencies and professional bodies listed in referral directories. We are not responsible for the privacy practices of those sites. We encourage you to read their privacy policies before providing personal data to them.

8. Children's Privacy

Our services are directed at adults aged 18 and above. We do not knowingly collect personal data from persons under 18. If you believe that a minor has submitted personal data to us, please contact us at [email protected] and we will delete it promptly.

9. Changes to This Policy

We may update this policy from time to time to reflect changes in the law or in our practices. Material changes will be noted on this page with an updated date at the top. Where a change significantly affects how we use your personal data, we will contact you directly if we hold your email address.

Continued use of our website or services after a change to this policy constitutes acceptance of the updated terms.

10. Contact

For any questions about this policy or to exercise your rights, please contact us:

• Data Controller: Orrin Bridge
• Address: 73 Jalan Damansara, 50490 Kuala Lumpur, Malaysia
• Email: [email protected]
• Telephone: +60 3 2731 6408