Privacy Policy

1. Personal Information

We collect personal information that you voluntarily provide when:

• Submitting contact forms or consultation requests
• Communicating with us via email or phone
• Engaging our legal services
• Subscribing to our newsletters or updates

This information may include: name, email address, phone number, company name, and details about your legal requirements.

2. Usage Data

We automatically collect certain information when you visit our website:

• IP address and location data
• Browser type and version
• Pages visited and time spent on our website
• Referring website information
• Device and operating system information

3. Legal Basis for Processing

We process your personal data based on:

• Consent: For marketing communications and non-essential services
• Contract: To provide requested legal services
• Legitimate Interest: For business operations and website analytics
• Legal Obligation: For regulatory compliance and professional requirements

1. Service Delivery

• Providing legal consultation and advisory services
• Responding to inquiries and communication
• Managing client relationships and case files
• Processing service agreements and billing

2. Business Operations

• Website operation and security monitoring
• Analytics and performance improvement
• Internal record keeping and administration
• Quality assurance and training purposes

3. Communication

• Sending service updates and important notices
• Legal newsletters and industry insights (with consent)
• Appointment scheduling and reminders
• Client satisfaction surveys and feedback requests

4. Legal Compliance

• Meeting professional and regulatory obligations
• Maintaining attorney-client privilege records
• Complying with anti-money laundering requirements
• Responding to legal requests and court orders

Security Measures

We implement comprehensive security measures to protect your personal information:

• SSL encryption for all data transmission
• Secure servers with regular security updates
• Access controls and authentication systems
• Regular security audits and monitoring
• Employee training on data protection practices

Data Retention

We retain personal data for the following periods:

• Contact form submissions: 3 years from last contact
• Client service records: 7 years after service completion
• Financial records: 7 years for tax and regulatory compliance
• Marketing data: Until consent is withdrawn
• Website analytics: 26 months (Google Analytics default)

Data Breach Procedures

In the event of a data breach, we will:

• Assess the breach within 24 hours of discovery
• Notify relevant authorities within 72 hours if required
• Inform affected individuals without undue delay
• Take immediate steps to contain and remedy the breach
• Review and improve security measures to prevent recurrence

Individual Rights

Under Singapore's Personal Data Protection Act (PDPA) and international privacy laws, you have the right to:

• Access: Request copies of your personal data
• Rectification: Correct inaccurate or incomplete data
• Erasure: Request deletion of your personal data
• Portability: Receive your data in a machine-readable format
• Object: Object to processing based on legitimate interests
• Withdraw Consent: Withdraw consent for marketing communications

Exercising Your Rights

To exercise your privacy rights:

• Send a written request to [email protected]
• Include your name, contact information, and specific request details
• Provide identity verification if requested
• We will respond within 30 days of receiving your request

Limitations

Your rights may be limited when:

• Attorney-client privilege applies to the information
• Legal or regulatory obligations require data retention
• Processing is necessary for establishing legal claims
• Deletion would compromise legitimate business interests

Service Providers

We may share personal data with trusted third-party service providers:

• Website hosting and maintenance services
• Email communication platforms
• Analytics providers (e.g., Google Analytics)
• Legal practice management systems
• Professional indemnity insurers

All service providers are bound by confidentiality agreements and data protection requirements.

Legal Disclosures

We may disclose personal information when required by:

• Court orders or legal processes
• Regulatory investigations or requests
• Law enforcement agencies with proper authority
• Professional conduct investigations

International Transfers

Personal data may be transferred outside Singapore for:

• Cloud storage and backup services
• International legal matters requiring coordination
• Technical support and maintenance

We ensure adequate protection through contractual safeguards and compliance with transfer regulations.

Privacy Contact

Filing Complaints

If you believe your privacy rights have been violated:

1. Contact our privacy officer using the information above
2. Provide details of your concern and desired resolution
3. We will investigate and respond within 30 days
4. If unsatisfied, you may lodge a complaint with the Personal Data Protection Commission (PDPC)

Policy Updates

We may update this Privacy Policy periodically to reflect changes in our practices or legal requirements. Material changes will be communicated through our website and direct notification to affected individuals. Your continued use of our services after such changes constitutes acceptance of the updated policy.