Privacy Policy

1. Controller

The controller for data processing is Brightlane Live, Kuala Lumpur, Malaysia, email: contact@brightlane.live, phone: +60 3 9212 4760.

2. Processing principles

Personal data is processed only to the extent necessary to provide the website, handle enquiries, initiate or perform an engagement, or comply with legal obligations. Processing is carried out in line with the Malaysian Personal Data Protection Act 2010, applicable data protection rules and professional confidentiality duties.

3. Hosting and server log files

When the website is accessed, technically necessary access data may be processed, in particular IP address, date and time, requested file, referrer URL, browser type, operating system and transferred data volume. This data is used for technical stability, security and error analysis. It is not combined with other data unless a legal obligation or security incident requires it.

4. Contacting us

When you contact us by phone, email or form, we process the data you provide to handle the enquiry, check conflicts and initiate an engagement. Please send sensitive documents only after agreeing on a suitable communication channel.

5. Engagement data

During an engagement, tax documents, authority correspondence, financial data, contact data, communication content and case data may be processed. This processing is carried out to perform the engagement, protect legal interests and meet statutory retention duties.

6. Cookies and local storage

This website stores the cookie choice in the browser's local storage. Technically necessary storage prevents the cookie banner from being shown again on every visit. Analytics or marketing services are not currently active.

7. Legal bases

• Contract and engagement initiation: processing required to prepare or perform a service agreement.
• Legal obligations: processing required to comply with statutory duties, including retention.
• Legitimate interests: secure website operation and communication.
• Consent: processing based on freely given consent where applicable.

8. Recipients

Data may be transferred to IT service providers, tax advisers, experts, courts, authorities or other parties where required for the engagement, security, legal obligations or your enquiry. Data is not passed on for advertising purposes.

9. Storage period

Data is stored only for as long as required for the relevant purposes. Engagement-related documents may be subject to statutory and professional retention periods. Server data is regularly deleted when security and operational purposes no longer apply.

10. Your rights

Subject to legal requirements, you may have rights to access, correction, deletion, restriction, data portability and objection. Where processing is based on consent, you may withdraw that consent with future effect.

11. Right to complain

You may lodge a complaint with a data protection authority if you believe that personal data is being processed unlawfully.

12. Updates

This statement should be technically and legally reviewed and adjusted if external services, tracking, maps, fonts, CRM systems or a form backend are integrated.