Legal
Privacy Policy
Last updated: 14 April 2025
1. Introduction
Tanjong Counsel ("the firm", "we", "us") is committed to handling personal data responsibly and in accordance with the Personal Data Protection Act 2012 of Singapore ("PDPA"). This policy explains what personal data the firm collects, how it is used, and what rights individuals have in relation to that data.
Questions about this policy or the firm's data practices may be directed to: [email protected]
2. Data Collected
Personal data you provide
- Name and contact details (telephone, email address, postal address)
- Information about your legal matter provided during or before a sitting
- Documents you share with the firm in connection with your matter
- Enquiry or message content submitted through the firm's website
Data collected automatically
- Browser type, device type, and IP address when visiting the firm's website
- Pages visited and time spent, via analytics cookies (where consent is given)
3. How Data Is Used
Personal data is used to:
- Respond to enquiries and arrange sittings
- Provide legal services and carry out the firm's work on your matter
- Maintain records required by professional conduct obligations
- Improve the firm's website based on usage patterns (analytics only, with consent)
- Comply with legal and regulatory obligations
The firm does not use personal data for marketing purposes without prior consent, and does not sell or share personal data with third parties for commercial purposes.
4. Legal Basis for Processing
- Contract: Data is processed as necessary to provide legal services you have requested or are considering.
- Legitimate interest: The firm has a legitimate interest in maintaining records of client matters and improving its website.
- Consent: Where analytics cookies are used, this is on the basis of your consent, which may be withdrawn at any time.
- Legal obligation: Certain data must be retained to comply with the firm's professional obligations under Singapore law.
5. Data Retention
Client matter files are retained for a minimum of seven years following the close of the matter, in accordance with the firm's professional obligations. Website enquiry data not leading to an engagement is held for twelve months. Analytics data is retained for twenty-four months, after which it is deleted or anonymised.
6. Data Protection Measures
- All digital records are stored on password-protected systems with access restricted to firm personnel
- Physical files are held in secured premises
- Data in transit between the firm and third-party services is encrypted
- The firm reviews its data security arrangements periodically
In the event of a data breach affecting personal data, the firm will notify affected individuals and, where required, the Personal Data Protection Commission of Singapore, within the timeframes specified by applicable law.
7. Cookies
The firm's website uses cookies. Essential cookies are required for the site to function. Analytics cookies are used to understand how the site is used. These are activated only where consent has been given. Please see the firm's Cookie Policy for full details.
8. Third-Party Services
The firm uses a small number of third-party services in connection with the website:
- Google Analytics — website usage analytics (where consent is given)
- Google Maps — map display on the website (no personal data is shared)
These third parties operate under their own privacy policies. The firm does not share client matter data with any third-party service.
9. Your Rights
Under the PDPA, individuals have the right to:
- Request access to personal data the firm holds about them
- Request correction of inaccurate personal data
- Withdraw consent to data processing based on consent
- Request the firm to cease using personal data where there is no longer a legal basis for doing so
To exercise any of these rights, please write to: [email protected]
Requests will be responded to within thirty days. Where a request cannot be fulfilled, the reason will be explained.
Complaints about the firm's data practices may be lodged with the Personal Data Protection Commission of Singapore at www.pdpc.gov.sg.
10. External Links
The firm's website may contain links to external sites. The firm is not responsible for the privacy practices of those sites and encourages individuals to review the privacy policies of any external site they visit.
11. Children's Privacy
The firm's services are directed at adults. The firm does not knowingly collect personal data from individuals under the age of eighteen. If such data has been provided inadvertently, please contact the firm so that it may be removed.
12. Changes to This Policy
This policy may be updated from time to time. The date at the top of the page reflects the most recent revision. Continued use of the firm's website following any update constitutes acceptance of the revised policy.
13. Contact
Tanjong Counsel
100 Tras Street, #16-01 Amara Corporate Tower, Singapore 079027
Email: [email protected]
Tel: +65 6429 7185