1. What Are Cookies
Cookies are small text files that a website stores on your device (computer, smartphone or tablet) when you visit it. They allow the site to remember your preferences and actions over a period of time so that you do not have to re-enter them on each visit.
In addition to cookies, we may also use similar tracking technologies: web beacons (pixel tags), browser localStorage and sessionStorage. All such technologies are collectively referred to in this document as "cookies" or "tracking technologies".
2. Legal Basis
Our use of cookies is governed by the following legislation and guidance:
- Personal Data Protection Act 2010 (PDPA), Malaysia — governing the processing of personal data collected via cookies
- Personal Data Protection Regulations 2013 and Personal Data Protection Standard 2015
- Communications and Multimedia Act 1998 (CMA) — governing electronic communications and data collection practices
- Guidelines issued by the Department of Personal Data Protection (JPDP), Malaysia
- GDPR best practices applied voluntarily for users accessing the Website from the EU/EEA
3. Categories of Cookies We Use
3.1 Strictly Necessary Cookies (always active)
These cookies are essential for the Website to function correctly. Without them, the Website cannot operate as intended. They do not require your consent and cannot be disabled.
- lx-theme — stores your chosen colour scheme preference (dark/light); duration: persistent (localStorage); first party
- lx-cookie-consent — records your cookie banner choice (accepted/declined); duration: 365 days; first party
- PHPSESSID / session_id — session identifier for form functionality and CSRF protection; duration: session (deleted on browser close); first party
- csrf_token — cross-site request forgery protection token for form submissions; duration: session; first party
3.2 Functional Cookies (require consent)
These cookies enable enhanced functionality and personalisation. Without them, some features of the Website may be unavailable.
- lx-lang — remembers your preferred interface language; duration: 90 days; first party
- lx-form-draft — temporarily saves an unfinished contact form draft; duration: 24 hours; localStorage; first party
- lx-scroll-pos — remembers your scroll position for a smooth return to viewed content; duration: session; first party
3.3 Analytics Cookies (require consent)
These cookies allow us to understand how visitors use the Website so we can improve its content and structure. All data is collected in aggregated and anonymised form.
- _ga — primary Google Analytics identifier for distinguishing unique visitors; duration: 13 months; third party (Google LLC)
- _ga_XXXXXXXX — Google Analytics 4 session identifier; duration: 13 months; third party (Google LLC)
- _gid — distinguishes unique visitors within a 24-hour period; duration: 24 hours; third party (Google LLC)
- _gat — throttles the request rate to Google Analytics servers; duration: 1 minute; third party (Google LLC)
Google Analytics is configured with IP anonymisation enabled. Data is processed under a Data Processing Agreement with Google. Malaysia is not currently on Google's EEA adequacy list; transfers are covered by Standard Contractual Clauses. Google's Privacy Policy: policies.google.com/privacy.
3.4 Cookies We Do Not Use
- Advertising or targeting cookies (we do not run paid advertising)
- Social media cookies (there are no social sharing buttons or widgets on the Website)
- Cross-site tracking cookies
- Browser fingerprinting or other cookieless identification methods
4. Managing Cookies and Withdrawing Consent
4.1 Via the banner on our Website
- On your first visit, a cookie banner is displayed with "Accept" and "Decline" buttons
- Clicking "Accept" gives consent to all cookie categories other than strictly necessary ones
- Clicking "Decline" activates strictly necessary cookies only
- Your choice is stored for 365 days; once this period expires the banner will reappear
- You may withdraw consent at any time by clearing site data in your browser — the banner will then reappear
4.2 Via your browser settings
- Google Chrome: Settings → Privacy and security → Cookies and other site data
- Mozilla Firefox: Settings → Privacy & Security → Cookies and Site Data
- Safari: Preferences → Safari → Privacy → Manage Website Data
- Microsoft Edge: Settings → Cookies and site permissions → Manage and delete cookies
- Disabling all cookies in your browser may affect the correct functioning of the Website
4.3 Opting out of Google Analytics
- Install the Google Analytics Opt-out Browser Add-on: tools.google.com/dlpage/gaoptout
- Alternatively, use private/incognito browsing mode on each visit
- Or send us a request at lexnoctis@europe.com — we will exclude your IP from analytics collection
5. Third-Party Providers and Data Transfers
- Google LLC (analytics): data is processed under Standard Contractual Clauses consistent with Section 129 PDPA 2010 requirements for cross-border transfers
- We do not share cookie data with advertising networks, data brokers or any other third parties for commercial purposes
- All sub-processors handling cookie data operate under signed data processing agreements with confidentiality obligations
- An up-to-date list of sub-processors is available on request at lexnoctis@europe.com
6. Cookie Retention Periods
- Session cookies — deleted automatically when you close your browser
- Persistent first-party cookies — stored for no longer than 12 months
- Analytics cookies (Google Analytics) — no longer than 13 months
- localStorage data — stored until explicitly cleared by the browser or the user
- Upon expiry, cookies are automatically deleted by the browser or overwritten on the next visit
7. Updates to This Cookie Policy
- We may amend this Policy in response to changes in legislation or technology
- The current version is always available at lexnoctis.europe.com/cookies.html
- The date of the most recent update is shown at the top of this page
- Where changes materially affect the processing of your data, the cookie banner will reappear to request fresh consent
- Minor editorial changes (typo corrections, clarification of wording) do not require renewed consent
8. Contact Information
For any questions relating to cookies on our Website, please contact us:
- Email: lexnoctis@europe.com
- Phone: +60 3-2181 4790
- Address: LexNoctis Legal, Level 28, Integra Tower, 182 Jalan Tun Razak, 50400 Kuala Lumpur, Malaysia
- Office hours: Monday–Friday, 09:00–18:00 (MYT, UTC+8)
Complaints about our use of cookies and personal data may also be directed to the Department of Personal Data Protection (JPDP): pdp.gov.my · +60 3-8911 5000 · Aras 2, Blok F2, Kompleks F, Pusat Pentadbiran Kerajaan Persekutuan, 62675 Putrajaya, Malaysia.