Privacy Policy
Last Updated: 19 February 2026
1. Introduction
Padang Partners ("we", "us", "our") is committed to the responsible handling of personal data. This Privacy Policy explains how we collect, use, disclose, and protect personal information obtained through our website and through enquiries, engagements, and other communications with our practice. It applies to all individuals whose personal data we hold in connection with our services.
This policy is prepared in accordance with Singapore's Personal Data Protection Act 2012 (PDPA). If you have questions about this policy or how we handle your data, please contact us at [email protected].
2. Data We Collect
2.1 Information You Provide
When you submit an enquiry through our website or contact us directly, we may collect:
- Full name and contact details (email address, telephone number)
- Business name and role
- Details of the contract or legal matter you wish to discuss
- Any additional information you choose to share in correspondence
2.2 Information Collected Automatically
When you visit our website, certain technical information is collected automatically, including your IP address, browser type, pages visited, and session duration. This data is used for site performance analysis and is not linked to your personal identity.
2.3 Cookies
We use cookies to improve the functionality of our website and to understand how it is used. Please refer to our Cookie Policy for more information.
3. How We Use Your Data
We collect and use personal data for the following purposes:
- To respond to your enquiries and communicate about our services
- To assess and deliver the contract services you have requested
- To manage our client records and internal administration
- To improve our website and services based on usage patterns
- To comply with our legal and regulatory obligations
The legal bases for processing under the PDPA are: consent (where you have submitted an enquiry or agreed to contact), legitimate interests (in running our practice and improving our services), and contractual necessity (where we are preparing a document on your behalf).
4. Data Retention
We retain personal data for as long as is necessary for the purposes described in this policy, unless a longer retention period is required by law. Enquiry records are typically retained for 12 months. Records relating to completed engagements are retained for a period of seven years, in accordance with standard professional practice in Singapore.
5. Data Sharing
We do not sell or share your personal data with third parties for commercial purposes. We may disclose your data in the following limited circumstances:
- To service providers who support our IT infrastructure and website hosting, under data processing agreements
- Where required by law or by a Singapore regulatory authority
- With your explicit consent for a specific purpose
We do not transfer personal data outside Singapore except where technically necessary for hosting services, and only where adequate safeguards are in place.
6. Data Protection Measures
We apply appropriate technical and organisational measures to protect personal data against unauthorised access, loss, or disclosure. These include password-protected systems, access controls limited to personnel who require the data to perform their role, and secure storage of engagement records. In the event of a data breach affecting your personal data, we will notify you and the Personal Data Protection Commission in accordance with the requirements of the PDPA.
7. Your Rights
Under the PDPA, you have the right to:
- Request access to the personal data we hold about you
- Request correction of inaccurate or incomplete data
- Withdraw consent to the processing of your data, where consent is the basis for processing
- Request erasure of your data, subject to our legal retention obligations
- Lodge a complaint with the Personal Data Protection Commission of Singapore
To exercise any of these rights, please contact us at [email protected]. We will respond within 30 days of receiving your request.
8. Third-Party Links
Our website may contain links to external sites. We are not responsible for the privacy practices of those sites and encourage you to review their policies separately. The presence of a link does not constitute an endorsement.
9. Children's Privacy
Our services are directed at businesses and individuals aged 18 years and above. We do not knowingly collect personal data from minors. If you become aware that we hold personal data relating to a person under the age of 18, please contact us so that we may address the matter.
10. Changes to This Policy
We may update this Privacy Policy from time to time. When we do, we will revise the "Last Updated" date at the top of this page. Where a change is material, we will take reasonable steps to notify you. Your continued use of our website following any update constitutes acceptance of the revised policy.
11. Contact
For any questions or concerns about this Privacy Policy or the handling of your personal data, please contact:
Padang Partners
168 Robinson Road, #22-08, Capital Tower, Singapore 068912
[email protected]