Legal Documentation
Privacy Policy
Last Updated: 1 March 2026 | Effective Date: 1 March 2026
Kettova ("we", "us", "our") is committed to responsible handling of personal data. This Privacy Policy explains how we collect, use, disclose, and protect personal data in connection with our legal services and this website, in accordance with the Personal Data Protection Act 2012 (PDPA) of Singapore.
By using this website or engaging our services, you acknowledge that you have read and understood this Policy. If you have any questions, please contact us at [email protected].
Section 01
Data Controller
The data controller responsible for your personal data is:
Section 02
Personal Data We Collect
We collect personal data that you provide to us directly, and limited data collected automatically when you use this website.
Data You Provide Directly
- Full name
- Email address
- Telephone number (if provided)
- Content of your enquiry or message
- Information disclosed during client consultations relevant to your legal matter
Data Collected Automatically
- IP address and browser type (for security and analytics)
- Pages visited and time spent on this website
- Referral source (how you arrived at the website)
- Cookie identifiers (where consent has been given — see our Cookie Policy)
Section 03
How We Use Personal Data
We use personal data only for the purposes for which it was collected or which are consistent with those purposes:
Service Delivery
To provide legal advice and services in connection with your matter, including drafting documents, communications with third parties, and statutory filings.
Enquiry Handling
To respond to your contact form submissions and assess whether and how we may be able to assist you.
Legal Compliance
To comply with applicable laws, including anti-money laundering obligations under the Legal Profession (Professional Conduct) Rules and related legislation.
Website Improvement
To understand how this website is used, in order to improve its content and usability. This relies on analytics data collected with your consent.
Section 04
Legal Basis for Processing
Under the PDPA, we rely on the following bases for processing personal data:
- Consent: Where you have provided us with your data via the contact form or have agreed to the use of analytics or marketing cookies.
- Contractual necessity: Where processing is necessary to perform the legal services you have engaged us to provide.
- Legal obligation: Where we are required by law to collect, retain, or disclose personal data, including for anti-money laundering and client due diligence purposes.
- Legitimate interests: For limited purposes such as website security and fraud prevention, where those interests do not override your rights.
Section 05
Data Retention
We retain personal data only for as long as necessary for the purposes for which it was collected, or as required by law.
| Data Category | Retention Period |
|---|---|
| Client matter files | 7 years from closure of matter |
| Contact form enquiries (not converted) | 12 months from receipt |
| Website analytics data | 26 months (standard analytics cycle) |
| Marketing preference data | Until withdrawn or 3 years of inactivity |
Section 06
Disclosure to Third Parties
We do not sell personal data. We may share it only in the following limited circumstances:
- With your consent: Where your matter requires communication with counterparties, regulators (ACRA, ICA, courts), or other advisers, and you have authorised us to act on your behalf.
- Service providers: Limited data is shared with our website hosting provider and analytics service provider under appropriate data processing terms. These providers do not use your data for their own purposes.
- Legal obligation: Where required by a court order, regulatory authority, or applicable law in Singapore.
Third-party services used include Google Analytics (website usage) and standard email infrastructure. These services may set cookies — see our Cookie Policy for details.
Section 07
Data Protection Measures
- Website traffic is encrypted via HTTPS/TLS.
- Client files are stored on access-controlled systems with restricted internal access based on role and matter assignment.
- Email communications involving sensitive client information are conducted via secure channels.
- Physical documents are stored in secured premises with restricted access.
- In the event of a data breach that may cause significant harm, we will notify affected individuals and the Personal Data Protection Commission (PDPC) within the timeframes required by law.
Section 08
Cookies
We use cookies on this website for essential functionality, analytics, and — where you have consented — marketing purposes. For a full description of the cookies used, your choices, and how to manage your preferences, please read our Cookie Policy.
Section 09
Your Rights Under the PDPA
As a data subject under the PDPA, you have the following rights:
Right of Access
You may request a copy of the personal data we hold about you and information on how it is being used.
Right of Correction
You may request correction of inaccurate or incomplete personal data that we hold about you.
Right to Withdraw Consent
Where processing is based on consent, you may withdraw it at any time. This does not affect processing that took place before the withdrawal.
Right to Lodge a Complaint
If you believe your data has been handled unlawfully, you may lodge a complaint with the Personal Data Protection Commission (PDPC) at pdpc.gov.sg.
To exercise any of these rights, please write to us at [email protected]. We will respond within 30 days.
Section 10
Children's Privacy
This website and our services are directed at individuals aged 18 and over. We do not knowingly collect personal data from persons under the age of 18. If we become aware that such data has been collected, we will take steps to delete it promptly.
Section 11
External Links
This website may contain links to external sites, including government portals such as the ACRA or ICA websites. We are not responsible for the privacy practices of those sites and encourage you to review their policies independently.
Section 12
Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. The updated version will be published on this page with a revised "Last Updated" date. We recommend reviewing this page periodically.
Section 13
Contact for Data Queries
For questions about this Privacy Policy or how your personal data is handled, please contact:
Data Protection Queries — Kettova
Email: [email protected]
Address: 1 George Street, #16-02, Singapore 049145
Telephone: +65 6937 2841