Privacy Policy

1. Who is responsible

Your law firm decides what client, matter and staff information is kept in the Service. For that information your firm is the data controller and Denning IT processes it on the firm’s behalf. Denning IT is the data controller for account, device and usage data needed to run and secure the Service.

2. Personal data we collect

• Account details: name, email address, staff code, firm and branch, role and permissions.
• Sign-in data: your login ID and password (sent only over encrypted connections and kept on your device in its secure storage), and an optional app PIN lock.
• Content you enter or upload: matters, contacts, documents, scanned pages, photos, files, chat messages, payment requests, leave, claims and other records you work with in the Service.
• Device and technical data: device model, operating system and app version, IP address, and a push notification token.
• Usage and security logs: sign-in times, online status, approved devices and actions taken in the Service.

3. Phone permissions

The app asks for a permission only when you use the feature that needs it, and you can turn it off at any time in your phone’s settings.

• Camera: to scan or photograph documents and receipts you choose to upload.
• Photos and files: to attach images and documents you pick, and to save documents you download.
• Notifications: to alert you to messages, approvals and reminders.
• Phone: to call a contact when you tap their phone number.

4. How we use personal data

• To provide the Service: sign you in, show your firm’s data, and let you create, upload and share records.
• To keep accounts secure: verify sign-ins and devices, and apply access rules set by your firm (such as IP restrictions).
• To send notifications about activity in the Service.
• To give support, fix problems and improve the Service.
• To meet legal, regulatory and audit obligations under Malaysian law.

We do not sell personal data, show advertising, or track you across other companies’ apps or websites.

5. Who we share it with

• Your law firm: its administrators can see the data held in the firm’s account.
• Service providers that host and run the Service for us (cloud hosting and storage, and Google Firebase and Apple Push Notification service to deliver notifications). They may only use the data to provide their service to us.
• Authorities, where the law, a court order or a lawful request requires it.

6. Where data is stored

Data may be stored or processed on servers outside Malaysia (for example in Singapore). Where that happens we use providers and safeguards that give protection in line with Malaysian data protection requirements.

7. How long we keep it

We keep personal data for as long as your firm uses the Service and as long as needed afterwards to meet legal and audit obligations. After that it is deleted or anonymised.

8. How we protect it

• Encrypted connections (HTTPS/TLS) between the app and our servers.
• Access control by role and permission, device approval and optional app PIN lock.
• Monitoring, backups and restricted access to production systems.

9. Your rights

Subject to the PDPA, you may ask to access or correct your personal data, withdraw consent, or ask for your account and personal data to be deleted. Accounts are created by your law firm, so you can ask your firm’s administrator or email us at support@denning.com.my. Some records may have to be kept where the law requires it.

10. Children

The Service is for law firms, their staff and their clients. It is not directed at children.

11. Changes to this policy

We may update this policy from time to time. The date at the top shows when it last changed, and material changes will be communicated through the Service.

12. Contact us

Denning IT Sdn Bhd
Email: support@denning.com.my
Website: denning.com.my