Privacy Policy

1. Introduction

wayangcounseles ("we", "our", "us") is a Singapore-based legal practice specialising in insolvency, corporate restructuring, and creditor advisory services. We are registered with the Law Society of Singapore and comply with the Personal Data Protection Act 2012 (PDPA) of Singapore.

This Privacy Policy explains how we collect, use, disclose, and protect personal data in connection with our website and professional services. By using our website or engaging our services, you acknowledge that you have read and understood this policy.

Our designated Data Protection Officer can be reached at [email protected].

2. Data We Collect

We collect personal data through the following channels:

• Enquiry forms — name, email address, phone number, and the content of your message.
• Service engagements — identification documents, corporate records, financial information, and communications relevant to the matter.
• Website analytics — IP address, browser type, pages visited, and session duration, collected through analytics cookies where consented.

We collect only the data necessary for the purpose identified at the point of collection. We do not solicit sensitive personal data unless strictly required for a legal engagement.

Legal basis for processing: contract performance, legitimate interest in responding to enquiries, legal obligation under professional conduct rules, and consent where applicable (e.g. analytics cookies).

Retention: Enquiry data is retained for up to 12 months. Client matter files are retained for a minimum of 7 years following conclusion of the engagement, as required by Law Society guidelines. Analytics data is retained for up to 26 months.

3. How We Use Your Data

Personal data collected through this website is used for the following purposes:

• Responding to enquiries and scheduling consultations.
• Conducting conflict-of-interest checks before accepting an engagement.
• Providing the legal services you have retained us to deliver.
• Maintaining client records in compliance with professional obligations.
• Improving the accessibility and performance of our website.
• Complying with applicable laws, court orders, and regulatory requirements.

We do not use personal data for profiling, automated decision-making, or direct marketing without explicit consent. We do not sell personal data to third parties.

4. Data Protection Measures

We implement technical and organisational measures appropriate to the sensitivity of the data we handle:

• All communications between your browser and our website are encrypted via TLS.
• Client matter files are stored on access-controlled systems with audit logging.
• Staff who handle personal data receive training on PDPA obligations and professional confidentiality.
• Where third-party service providers process data on our behalf, we require contractual data protection obligations.
• In the event of a data breach affecting personal data, we will notify affected individuals and the Personal Data Protection Commission (PDPC) in accordance with the Mandatory Data Breach Notification requirements under the PDPA.

Notwithstanding these measures, no internet transmission or storage system can be guaranteed to be completely secure. If you have concerns about the security of your data, please contact us directly.

5. Cookies

Our website uses cookies to operate correctly and, where you have consented, to understand how visitors use the site. Please refer to our Cookie Policy for a full explanation of which cookies we use, their purpose, and how to manage your preferences.

Essential cookies are required for the site to function and cannot be disabled. Analytics and marketing cookies are only placed after you provide consent via the cookie banner on your first visit.

6. Third-Party Services and Disclosures

We may share personal data with the following categories of third parties where necessary:

• Professional advisors — financial advisors, accountants, or other legal counsel engaged jointly on a matter, subject to confidentiality obligations.
• Regulatory bodies — the Law Society of Singapore, PDPC, or courts, where required by law or professional obligation.
• IT service providers — hosting, email, and analytics providers operating under data processing agreements.
• Analytics providers — Google Analytics (where consent is given), which may transfer data outside Singapore. Google's privacy terms apply to such transfers.

We do not transfer personal data outside Singapore except where necessary for the above purposes and subject to adequate safeguards. Where transfers occur, we rely on the recipient's adherence to comparable data protection standards.

Our website may contain links to external sites. We are not responsible for the privacy practices of those sites and recommend you review their policies directly.

7. Your Rights Under the PDPA

Under Singapore's Personal Data Protection Act 2012, you have the right to:

• Access — request a copy of personal data we hold about you.
• Correction — request that inaccurate or incomplete data be corrected.
• Withdrawal of consent — withdraw consent to collection, use, or disclosure, where processing is based on consent. Withdrawal may affect our ability to provide certain services.
• Data portability — request that personal data provided by you be transmitted to another organisation in a common electronic format, where technically feasible.
• Restriction of use in direct marketing — opt out of any direct marketing communications at any time.

To exercise any of these rights, please write to us at [email protected]. We will respond within 30 days of receiving a valid request. In some cases, we may require identity verification before actioning a request.

If you believe your personal data rights have not been respected, you may lodge a complaint with the Personal Data Protection Commission (PDPC) at www.pdpc.gov.sg.

8. Children's Privacy

Our services are directed at businesses and individuals who are at least 18 years of age. We do not knowingly collect personal data from persons under 18. If you believe a minor has submitted personal data to us, please contact us at [email protected] and we will remove it promptly.

9. Updates to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or the services we offer. The "Last Updated" date at the top of this page will reflect the most recent revision.

If we make material changes, we will notify registered users by email or by a prominent notice on our website before the changes take effect. Continued use of our website after the effective date constitutes acceptance of the revised policy.

10. Contact Us

For questions about this Privacy Policy or to exercise your data rights, contact our Data Protection Officer:

This policy is governed by the laws of Singapore. Disputes arising from it are subject to the exclusive jurisdiction of the Singapore courts.