YOUR INFORMATION<\/p>\n<\/div>
How Loh Eben Ong LLP handles personal data when you contact us, use our websites or instruct us on a legal matter.<\/p>\n<\/div>
This Privacy Policy covers LAW.com.sg, our booking and help websites, and the online services described below.<\/p>\n<\/div>
AT A GLANCE<\/p>\n<\/div>
You can request access or correction, withdraw consent, or raise a concern with our Data Protection Officer.<\/p>\n<\/div>
info@law.com.sg<\/a> Using LEO Sign or Myinfo? See the service details in Annex A.<\/p>\n<\/div><\/div><\/div><\/div><\/div> ON THIS PAGE<\/p>\n<\/div> This Privacy Policy explains how Loh Eben Ong LLP (\u201cwe\u201d, \u201cus\u201d or \u201cour\u201d) collects, uses and discloses personal data in connection with our legal services and websites. It applies to LAW.com.sg, book.law.com.sg, help.law.com.sg and other websites or online services operated by us which expressly incorporate it, including our chatbots and LEO Sign.<\/p>\n We handle personal data in accordance with the Singapore Personal Data Protection Act 2012 (\u201cPDPA\u201d) and our applicable professional obligations. This policy does not override duties of confidentiality or legal professional privilege.<\/p>\n<\/div> This policy applies to personal data we handle, including information received from people outside Singapore. Acceptance of a legal matter involving another jurisdiction is a separate question, addressed in our Terms and conditions<\/a>.<\/p>\n<\/div> Our Data Protection Officer oversees data protection enquiries and complaints. You can contact the DPO at info@law.com.sg<\/a>. Full contact details appear in section J.<\/p>\n<\/div><\/div><\/div><\/div><\/div> Personal data is information about an individual who can be identified from that information, or from it together with other information to which we have or are likely to have access. Depending on your enquiry or matter, it may include:<\/p>\n We may receive information when you visit our office, contact us, submit a form or document, request an appointment, use our online services or subscribe to updates. We may also receive information from a person authorised to act for you or from sources permitted by law.<\/p>\n Please provide accurate information and tell us if it changes. If you supply another person\u2019s data, ensure that you have their consent or another lawful basis to provide it for the stated purpose.<\/p>\n<\/div> We collect NRIC or FIN numbers and copies of identity documents only where required by law or where necessary to establish or verify identity to a high degree of accuracy. The information requested depends on the service concerned.<\/p>\n Our websites may record technical information such as your IP address, browser, operating system and connection details. Such information may be personal data where it identifies you, alone or with other information.<\/p>\n<\/div><\/div><\/div><\/div><\/div> We use personal data for purposes relevant to your dealings with us, including:<\/p>\n We notify you of the purposes for collecting, using or disclosing personal data and obtain consent where required. Where the PDPA recognises deemed consent or permits processing without consent, we rely on that basis only where its conditions are met. Merely browsing a website is not blanket consent to unrelated uses of personal data.<\/p>\n If we need information to assess or carry out your instructions and you do not provide it, we may be unable to proceed. We will explain the relevant requirements.<\/p>\n<\/div> Optional marketing preferences are separate from instructions for legal services. You may ask us to stop marketing communications at any time. Where the Do Not Call provisions apply, we check the relevant register unless valid consent or another applicable exception permits the communication.<\/p>\n<\/div><\/div><\/div><\/div><\/div> We do not sell, trade or rent personal data. Where necessary for the stated purposes and permitted by law and our professional obligations, information may be disclosed to:<\/p>\n Disclosure remains subject to applicable confidentiality and privilege requirements. The use of an external provider does not, by itself, remove our responsibilities for personal data.<\/p>\n<\/div> Some service providers may process or store information outside Singapore. Where we transfer personal data overseas, we take steps required by the PDPA to ensure comparable protection, including appropriate contractual or other legally recognised safeguards, unless a lawful exemption applies.<\/p>\n<\/div><\/div><\/div><\/div><\/div> We make reasonable security arrangements to protect personal data in our possession or control against unauthorised access, collection, use, disclosure, copying, modification, disposal and similar risks. No internet transmission or storage system is entirely risk-free.<\/p>\n Please contact us before sending particularly sensitive information if you need an alternative transmission method. Check recipients and attachments carefully. If a message requesting payment or information appears unusual, verify it with our office using independently obtained contact details.<\/p>\n<\/div> We assess suspected personal data breaches and take appropriate steps to contain and address them. Where a breach is notifiable to the Personal Data Protection Commission, we notify it as soon as practicable and no later than three calendar days after the day we determine that it is notifiable.<\/p>\n We notify affected individuals where required by the PDPA, as soon as practicable on or after notifying the Commission, subject to applicable exceptions. A breach may require notification to the Commission because of significant harm or significant scale; notification to individuals is subject to the separate statutory requirements.<\/p>\n<\/div> Emails can be delayed, misdirected, intercepted or forged. Contact us if you are unsure whether we have received an important message. We may monitor communications for authorised operational, security or legal purposes. These practical risks do not exclude our duties under applicable law.<\/p>\n<\/div><\/div><\/div><\/div><\/div> We retain personal data while it is needed for the purpose for which it was collected, or for legal or business purposes. Relevant considerations include our professional obligations, the nature of the matter and the need to maintain records of work and transactions.<\/p>\n When retention is no longer necessary, we cease retaining the data or remove the means by which it can be associated with particular individuals, using appropriate disposal or anonymisation measures.<\/p>\n LEO Sign has a separate service deletion period, set out in Annex A. Deletion from the signing service is distinct from retention of a document on a client\u2019s matter file.<\/p>\n<\/div><\/div><\/div><\/div><\/div> Our websites use cookies and similar technologies to support their operation and user experience. Browser controls may allow you to refuse or remove cookies, although this can affect some features.<\/p>\n External links, embedded content and third-party services may have their own privacy notices and may collect information when you use them. Please review those notices where relevant. This does not displace our obligations for personal data for which we are responsible.<\/p>\n<\/div> Our websites include chatbots, including the Leona AI assistant. Please keep enquiries general and avoid entering passwords, identity document numbers, confidential case details or other sensitive information into the chatbot. Contact our office for a suitable way to provide documents or discuss a matter.<\/p>\n A chatbot exchange does not, by itself, confirm that we have accepted instructions. Any personal data handled through our online services remains subject to applicable law.<\/p>\n<\/div><\/div><\/div><\/div><\/div> You may ask for access to personal data in our possession or control and information about how it has been used or disclosed in the preceding year. You may also ask us to correct an error or omission. These requests are subject to the PDPA\u2019s requirements and exceptions, including those protecting other individuals and privileged information.<\/p>\n Please contact our DPO with enough information to identify you and the request. We may need to verify your identity before disclosing information.<\/p>\n We respond to access requests as soon as reasonably possible and deal with corrections as soon as practicable. If we cannot comply within 30 days after receiving a request made in accordance with the applicable requirements, we will inform you in writing within that period when we expect to respond.<\/p>\n We may charge a reasonable fee for an access request where permitted and will give you a written estimate in advance. We do not charge a fee for correcting personal data.<\/p>\n<\/div> You may withdraw consent on reasonable notice by contacting our DPO. We will explain any likely consequences, including whether we can continue the relevant service. We will cease the collection, use or disclosure concerned unless it remains required or authorised under applicable law.<\/p>\n Withdrawal does not, by itself, require the deletion of records which we have a lawful basis to retain. It does not affect processing lawfully carried out before withdrawal.<\/p>\n<\/div> Please contact our DPO if you have a concern about how we handle personal data. Include the relevant dates and circumstances so that we can investigate and respond. You may also contact the Personal Data Protection Commission<\/a>.<\/p>\n<\/div><\/div><\/div><\/div><\/div> We may update this Privacy Policy to reflect changes in our services, practices or applicable requirements. The version date appears below. Where a change requires further notice or consent, we will take the steps required by law. Continued browsing is not treated as consent to a new purpose where separate consent is required.<\/p>\n This policy is governed by Singapore law, subject to any mandatory law that applies. It does not restrict your statutory rights or your ability to raise a concern with a competent regulator.<\/p>\n<\/div><\/div><\/div><\/div><\/div> Data Protection Officer Email: info@law.com.sg<\/a> Please mark your enquiry \u201cData protection\u201d and avoid sending unnecessary sensitive information in your initial message.<\/p>\n<\/div><\/div><\/div><\/div><\/div>
+65 6338 1810<\/a><\/p>\n<\/div>A. About this policy<\/h2><\/div>
(i) Who we are<\/h3><\/div>
(ii) Overseas connections<\/h3><\/div>
(iii) Our Data Protection Officer<\/h3><\/div>
B. Information we collect<\/h2><\/div>
(i) Personal data<\/h3><\/div>
\n
(ii) How we receive it<\/h3><\/div>
(iii) Identification and technical information<\/h3><\/div>
C. Purposes and consent<\/h2><\/div>
(i) Why we use personal data<\/h3><\/div>
\n
(ii) Consent and other lawful grounds<\/h3><\/div>
(iii) Marketing choices<\/h3><\/div>
D. Sharing and overseas transfers<\/h2><\/div>
(i) Disclosure<\/h3><\/div>
\n
(ii) Transfers outside Singapore<\/h3><\/div>
E. Security and communications<\/h2><\/div>
(i) Protecting information<\/h3><\/div>
(ii) Data breaches<\/h3><\/div>
(iii) Email and electronic communications<\/h3><\/div>
F. Retention and disposal<\/h2><\/div>
G. Cookies, chatbots and other websites<\/h2><\/div>
(i) Cookies and external content<\/h3><\/div>
(ii) Chatbots<\/h3><\/div>
H. Access, correction and withdrawal<\/h2><\/div>
(i) Access and correction<\/h3><\/div>
(ii) Withdrawing consent<\/h3><\/div>
(iii) Questions and complaints<\/h3><\/div>
I. Updates and applicable law<\/h2><\/div>
J. Contact our DPO<\/h2><\/div>
Loh Eben Ong LLP<\/strong>
135 Middle Road #05-11
Bylands Building
Singapore 188975<\/p>\n
Telephone: +65 6338 1810<\/a><\/p>\n