Privacy Policy

1. Introduction

Kampong Legal ("we", "us", "our") is committed to protecting the personal data of individuals who interact with our firm. This Privacy Policy explains how we collect, use, store, and protect personal data in accordance with the Personal Data Protection Act 2012 (PDPA) of Singapore.

This policy applies to all personal data collected through our website at kampongase.biz, through our contact forms, during consultations, and in the course of providing legal services. For questions about this policy, contact us at [email protected].

2. Data We Collect

We may collect the following categories of personal data:

• Contact Information: Name, email address, phone number, and postal address provided via our website forms or in the course of engagement.
• Matter Information: Information you share about your legal situation during consultations or correspondence, which may include sensitive personal data relating to family circumstances.
• Technical Data: IP address, browser type, pages visited, and time spent on our website, collected via cookies and analytics tools (subject to your consent).
• Communication Records: Records of email, telephone, and written correspondence between you and our firm.

We collect personal data directly from you when you contact us, complete a form on our website, or engage our services. We do not purchase or obtain personal data from third-party data brokers.

3. Legal Basis and Purpose of Processing

We process your personal data on the following legal bases under the PDPA:

• Consent: For analytics cookies and marketing communications, where you have given explicit consent.
• Contractual Necessity: To provide legal services pursuant to a client engagement agreement.
• Legitimate Interests: For website security, fraud prevention, and improving our services.
• Legal Obligation: Where processing is required to comply with applicable law or the rules of the Law Society of Singapore.

Your personal data is used to respond to your enquiries, provide legal services, maintain our client relationship, comply with professional obligations, and improve the experience of using our website.

4. Data Retention

We retain client matter files for a minimum of seven years from the date of closure of the matter, in accordance with professional practice guidelines. Website enquiry data is retained for up to twelve months from the date of initial contact if no engagement follows. Analytics data is retained for a period of twenty-six months before being deleted or anonymised.

After the applicable retention period, personal data is securely deleted or anonymised.

5. Data Sharing

We do not sell your personal data. We may share your data with:

• Courts and Tribunals: Where required as part of legal proceedings on your behalf.
• Professional Valuers and Experts: Engaged to assist with your matter, under appropriate confidentiality obligations.
• IT Service Providers: For secure data storage and case management systems, under data processing agreements.
• Analytics Providers: Such as Google Analytics, subject to your cookie consent.
• Regulatory Bodies: Where disclosure is required by law, court order, or the rules of the Law Society of Singapore.

6. Data Protection Measures

We take the security of your personal data seriously. Our measures include:

• Encrypted storage of electronic client records
• Secure email communication protocols
• Access controls limiting data access to authorised staff only
• Regular staff training on data protection obligations
• Physical security at our office premises
• Incident response procedures including breach notification obligations

In the event of a data breach that is likely to result in significant harm, we will notify affected individuals and the Personal Data Protection Commission (PDPC) as required under the PDPA.

7. Cookies

Our website uses cookies to understand how visitors interact with our site and to maintain certain preferences. Essential cookies are necessary for the website to function. Optional cookies (analytics and preference) are only set with your consent. You can manage your cookie preferences at any time via our Cookie Policy page.

8. Your Rights Under the PDPA

As a data subject in Singapore, you have the following rights:

• Right of Access: To request a copy of the personal data we hold about you.
• Right of Correction: To request correction of inaccurate or incomplete personal data.
• Right of Withdrawal of Consent: To withdraw consent for processing based on consent, without affecting the lawfulness of prior processing.
• Right to Data Portability: To receive your personal data in a commonly used machine-readable format where technically feasible.
• Right to Object: To object to processing for direct marketing purposes.

Note that some rights may be limited where processing is necessary for legal proceedings or compliance with professional obligations. To exercise any of these rights, contact us at [email protected]. We will respond within thirty days.

9. Third-Party Links

Our website may contain links to external websites. We are not responsible for the privacy practices of those sites and encourage you to review their privacy policies before providing any personal data.

10. Children's Privacy

Our services are intended for adults aged eighteen and above. We do not knowingly collect personal data from individuals under eighteen years of age through our website. If you believe we have inadvertently collected such data, please contact us and we will take appropriate steps to delete it.

11. Complaints

If you have a concern about how we handle your personal data, you may contact us at [email protected]. If you are not satisfied with our response, you may lodge a complaint with the Personal Data Protection Commission (PDPC) at www.pdpc.gov.sg.

12. Changes to This Policy

We may update this Privacy Policy from time to time. When changes are material, we will update the "Last Updated" date at the top of this page. Continued use of our website or services following any update constitutes acceptance of the revised policy.