Privacy Policy

Orchid Advocates ("we", "us", "our") is committed to the responsible handling of personal data in accordance with Singapore's Personal Data Protection Act 2012 (PDPA). This policy explains what personal data we collect, how we use it, and what rights you hold in relation to it. It applies to all individuals who contact us, engage our services, or visit our website.

1. Who We Are

Orchid Advocates is a law practice registered in Singapore, with its principal office at 38 Beach Road, #29-11 South Beach Tower, Singapore 189767. We act as the data controller for personal data collected through this website and through the course of our legal engagements.

2. What Personal Data We Collect

We collect personal data only when it is necessary for the purpose at hand. This may include:

• Full name
• Email address
• Telephone number
• Postal address (where relevant to a legal matter)
• Details of pension schemes, CPF accounts, or employment history (only when provided voluntarily for the purpose of a legal engagement)
• Website usage data collected via cookies (see our Cookie Policy)

We do not collect sensitive personal data unless it is directly relevant to the legal service you have requested, and we do not collect data from individuals under 18 years of age.

3. How We Collect Data

Personal data is collected through: the contact form on our website; email correspondence initiated by you; telephone calls; and in-person appointments. Website analytics tools may collect non-identifying usage data subject to your cookie consent.

4. How We Use Your Data

We use your personal data to:

• Respond to enquiries and schedule appointments
• Conduct the legal work you have engaged us to carry out
• Maintain accurate records of our engagements for professional and legal compliance purposes
• Improve the quality and accessibility of our website

We do not use your personal data for marketing purposes without your explicit consent, and we do not sell or rent personal data to any third party under any circumstances.

5. Legal Basis for Processing

We process personal data on one or more of the following bases: your consent (for contact form submissions and optional cookies); the performance of a legal services contract; compliance with a legal obligation; and our legitimate interest in maintaining accurate practice records.

6. Data Retention

Enquiry data (where no engagement follows) is retained for 12 months and then deleted. Client file data is retained for seven years following the close of an engagement, consistent with Singapore's legal professional requirements. You may request earlier deletion of enquiry data at any time.

7. Data Protection Measures

Client documents and personal data are stored on encrypted systems. Communications containing personal data are transmitted using secure channels. Physical documents are held in locked storage at our office. Access to client data is restricted to advocates and staff directly involved in the relevant engagement.

In the unlikely event of a data breach that is likely to result in significant harm, we will notify affected individuals and the Personal Data Protection Commission (PDPC) within the timeframe required by the PDPA.

8. Sharing of Personal Data

We do not share your personal data with third parties except in the following circumstances:

• Where you have instructed us to correspond with another party on your behalf (e.g., an employer, scheme administrator, or OPG)
• Where we are required to do so by law or by order of a court
• With our IT service providers, who process data solely on our instructions under data processing agreements

9. Cookies

Our website uses cookies to maintain basic functionality and, with your consent, to understand how the site is used. For full details, please see our Cookie Policy.

10. Third-Party Links

Our website may contain links to external resources. We are not responsible for the privacy practices of those sites and encourage you to read their policies independently.

11. Your Rights

Under the PDPA, you have the right to:

• Request access to personal data we hold about you
• Request correction of inaccurate personal data
• Withdraw consent to the processing of your data (where processing is consent-based)
• Request that we cease using your data for a purpose you object to
• Lodge a complaint with the Personal Data Protection Commission at www.pdpc.gov.sg

To exercise any of these rights, please contact us at privacy@orchidad or in writing to our office address. We will respond within 30 days.

12. Children's Privacy

Our services are intended for adults aged 18 and over. We do not knowingly collect personal data from minors. If you believe a minor has submitted data to us, please contact us and we will delete it promptly.

13. Changes to this Policy

We may update this policy from time to time to reflect changes in our practices or in applicable law. The date at the top of this page indicates when the policy was last revised. Continued use of our website or services after a revision constitutes acceptance of the updated policy.

14. Contact

For any questions relating to this policy or to the handling of your personal data:

• Email: privacy@orchidad
• Post: Orchid Advocates, 38 Beach Road, #29-11 South Beach Tower, Singapore 189767