1. Introduction

This Privacy Policy explains how the operator of SG Lawyer Reviews collects, uses, discloses, stores, protects, and otherwise processes personal data.

Website: sglawyerreviews.com
Brand: SG Lawyer Reviews
Operator: [legal name of operator]
Registration or UEN: [registration number]
Business address: [business address]
Data Protection Officer: [name or position]
DPO email address: [privacy email address]

In this Privacy Policy, “we”, “us”, and “our” refer to the operator of SG Lawyer Reviews.

By using the website or voluntarily submitting personal data, you acknowledge the practices described in this Privacy Policy.

2. Singapore’s Personal Data Protection Framework

The Personal Data Protection Act 2012 establishes obligations relating to the collection, use, disclosure, protection, retention, access, correction, and overseas transfer of personal data.

The Personal Data Protection Commission identifies obligations including accountability, notification, consent, purpose limitation, accuracy, protection, retention limitation, transfer limitation, access and correction, and data breach notification.

Organisations subject to the PDPA must appoint at least one Data Protection Officer and make the DPO’s business contact information publicly available.

3. Scope of This Policy

This Privacy Policy applies to personal data collected through:

com
Contact forms
Lawyer and law firm profiles
Profile claims
User reviews
Review requests
Advertising enquiries
Newsletters
Surveys
Competitions
Email communications
Referral or matching forms
Website analytics
Cookies and similar technologies

This policy does not control how an independent lawyer, law firm, advertiser, or third-party website processes personal data after receiving it.

4. Personal Data We May Collect

4.1 Information You Provide

We may collect:

Full name
Email address
Telephone number
Organisation or law firm
Position or job title
Professional profile information
Enquiry details
Legal service preferences
User reviews and ratings
Correction requests
Right-of-reply submissions
Advertising enquiries
Newsletter preferences
Correspondence with us
Information included in attachments
Consent and communication records

4.2 Lawyer and Law Firm Profile Information

We may collect and publish professional information such as:

Lawyer name
Law firm
Professional title
Practice areas
Qualifications
Admission information
Languages
Office information
Business telephone number
Professional email address
Official website
Publications
Awards
Professional photographs
Consultation options
Public regulatory information

Some of this information may be obtained from publicly available sources rather than directly from the individual.

4.3 Verification Information

Where a lawyer or law firm representative claims a profile, we may collect:

Identity information
Professional email address
Proof of employment
Proof of authority
Official correspondence
Supporting documents
Verification declarations

We encourage users to redact identification numbers, private addresses, and unrelated information unless specifically required.

4.4 Technical and Usage Information

We may automatically collect:

Internet Protocol address
Browser type
Device type
Operating system
Referring website
Pages viewed
Links selected
Date and time of access
Approximate location derived from technical information
Cookie identifiers
Session information
Security events
Diagnostic information

4.5 Sensitive or Confidential Information

Do not send unnecessary:

National identification numbers
Passport details
Bank details
Medical records
Confidential legal advice
Privileged correspondence
Information about children
Detailed case evidence
Unpublished court documents

Where sensitive information is reasonably required for verification or complaint handling, provide only the minimum necessary information and redact unrelated details.

5. How We Collect Personal Data

We may collect personal data:

Directly from you
Through website forms
Through email
Through profile claims
Through review submissions
Through cookies
Through analytics services
From law firm websites
From official directories
From public professional profiles
From public records
From authorised representatives
From advertisers
From referral partners
From service providers

6. Purposes for Processing Personal Data

We may collect, use, or disclose personal data to:

Operate and administer the website
Respond to enquiries
Publish and maintain lawyer profiles
Publish and maintain law firm profiles
Verify identities and authority
Moderate user reviews
Investigate complaints
Process corrections
Administer rights of reply
Prepare editorial content
Conduct research
Manage advertising and sponsorships
Provide enquiry and referral services
Send requested newsletters
Maintain website security
Detect fraud and abuse
Analyse website performance
Improve content and services
Manage commercial relationships
Maintain internal records
Comply with legal obligations
Establish, exercise, or defend legal claims
Respond to courts, regulators, or public authorities

Where personal data is to be used for a materially different purpose, we will provide additional notification or obtain consent where required.

7. Consent

Where consent is required, we may obtain it through:

Form submissions
Checkboxes
Written confirmation
Email responses
Account settings
Other clear affirmative actions

You should not submit personal data about another person unless you have authority or another lawful basis to do so.

You may withdraw consent by contacting our Data Protection Officer. Withdrawal will not affect processing already carried out lawfully before the withdrawal took effect.

Depending on the request, withdrawal may mean that we can no longer:

Manage a claimed profile
Publish a submitted review
Respond to an enquiry
Send newsletters
Provide a matching service
Maintain an account

8. Publicly Available Information

SG Lawyer Reviews may collect professional information that is publicly available through:

Official registers
Law firm websites
Professional directories
Court materials
Government publications
Published interviews
News reports
Public professional profiles

Public availability does not necessarily mean that every possible use is appropriate. We will aim to use such information in a manner relevant to our directory, review, verification, and editorial functions.

9. Public Profiles and Reviews

Information included in a public profile, user review, response, correction notice, or editorial article may be accessible to:

Website users
Search engines
Artificial intelligence services
Archiving services
Social media users
Other websites

Do not submit information for public publication that you are not authorised or willing to make public.

Removal from SG Lawyer Reviews may not immediately remove copies that have been cached, indexed, archived, quoted, or republished by third parties.

10. Legal Service Enquiries

Where you submit an enquiry through a lawyer or law firm profile, we may disclose the information to:

The lawyer you selected
The law firm you selected
A participating provider that matches your stated requirements
A service provider facilitating the enquiry

Where an enquiry may be shared with multiple providers, the form should explain this before submission.

You should avoid sending detailed confidential information until the receiving law firm has confirmed that it can consider the matter and has completed any required conflict checks.

11. Cookies and Similar Technologies

SG Lawyer Reviews may use cookies, pixels, tags, local storage, and similar technologies.

These technologies may be used to:

Operate essential website features
Maintain security
Remember preferences
Measure traffic
Analyse user behaviour
Improve website performance
Deliver advertisements
Measure campaigns
Prevent fraud

Cookie categories may include:

Strictly necessary cookies
Functional cookies
Analytics cookies
Advertising cookies

Where required, users may be offered controls to accept or reject non-essential cookies.

Disabling cookies may affect website functionality.

12. Analytics and Third-Party Tools

SG Lawyer Reviews may use services such as:

[Google Analytics]
[Google Search Console]
[Email marketing provider]
[Advertising platform]
[Customer relationship management system]
[Heatmapping or behaviour analytics tool]
[Spam protection service]
[Website hosting provider]
[Content delivery network]

These providers may process technical and usage information.

Before publication, replace this list with the tools actually used and add links or disclosures required by those providers.

13. Disclosure of Personal Data

We may disclose personal data to:

Website hosting providers
Cloud storage providers
Email service providers
Analytics providers
Security providers
Content management providers
Customer relationship management providers
Contractors
Professional advisers
Payment processors
Advertisers
Referral partners
Lawyers and law firms selected by the user
Regulators
Courts
Law enforcement agencies
Public authorities

Service providers should receive only the information reasonably necessary to perform their functions.

We do not sell personal data as an independent product to advertisers.

14. Advertising and Sponsored Enquiries

Where a user submits information through an advertisement, sponsored profile, or promoted enquiry form, the information may be received by SG Lawyer Reviews and the identified advertiser.

The form should explain:

The intended recipient
The purpose of collection
Whether the information may be shared
The applicable privacy information

Once an independent advertiser receives personal data, its own privacy policy and legal obligations may apply.

15. Marketing Communications

We may send newsletters or promotional messages where you:

Subscribed
Requested information
Provided consent
Have an existing relationship that permits the communication

You may unsubscribe through the link contained in an email or by contacting us.

Unsubscribing from marketing messages may not prevent necessary service messages concerning:

A profile claim
A review submission
A complaint
An enquiry
Security
A commercial account

If SG Lawyer Reviews sends specified marketing messages to Singapore telephone numbers, it will take steps to comply with applicable Do Not Call requirements. The PDPC states that organisations generally need to check the DNC Registry before sending marketing messages to Singapore telephone numbers unless an exception applies.

16. Data Accuracy

We take reasonable steps to maintain accurate and complete personal data where it is likely to be used to make a decision affecting an individual or disclosed to another organisation.

Lawyers, law firms, profile managers, and users should notify us when information changes.

17. Data Security

We use reasonable administrative, organisational, and technical measures designed to protect personal data against:

Unauthorised access
Unauthorised collection
Unauthorised use
Unauthorised disclosure
Unauthorised copying
Modification
Loss
Disposal
Similar risks

No website, transmission method, or storage system is completely secure.

Users should not send unnecessary confidential or sensitive information through ordinary website forms.

18. Retention

We retain personal data only for as long as reasonably required for:

The purpose for which it was collected
Legal obligations
Security
Fraud prevention
Dispute resolution
Editorial records
Business records
Defence of legal claims

When personal data is no longer needed for a business or legal purpose, we may delete, anonymise, or securely dispose of it.

Different categories of personal data may be subject to different retention periods.

19. Overseas Transfers

Some service providers may store or process personal data outside Singapore.

Where applicable, we will take reasonable steps to ensure that overseas recipients provide a standard of protection comparable to the protection required under the PDPA, unless an applicable exception permits the transfer. The transfer limitation obligation forms part of the PDPC’s published data protection obligations.

20. Access and Correction Requests

You may request:

Access to personal data we hold about you
Information about how that data was used or disclosed
Correction of inaccurate or incomplete personal data

Access and correction rights are subject to applicable requirements, exceptions, and limitations under the PDPA.

We may require identity verification before processing a request.

Where permitted, we may charge a reasonable fee for an access request after informing you of the estimated fee.

Send requests to:

Data Protection Officer: [name or position]
Email: [privacy email address]
Email subject: Personal Data Request

21. Withdrawal of Consent

A request to withdraw consent should identify:

Your name
The relevant service
The personal data or processing concerned
The action requested

Where applicable, we will inform you of reasonably foreseeable consequences before completing the withdrawal.

22. Data Breaches

SG Lawyer Reviews will assess suspected personal data breaches and take reasonable steps to contain and respond to them.

Under the PDPA framework, an organisation must assess whether a breach is notifiable. Where notification to the PDPC is required, the notification must be made as soon as practicable and no later than three calendar days after the organisation determines that the breach is notifiable.

Affected individuals will be notified where required.

23. Children

SG Lawyer Reviews is not designed primarily for children.

We do not knowingly request unnecessary personal data from children.

A parent or guardian who believes that a child has submitted personal data may contact our Data Protection Officer.

24. Third-Party Websites

External websites and independent law firms have their own privacy practices.

SG Lawyer Reviews is not responsible for how an external party collects, uses, stores, or discloses personal data.

Users should review the third party’s privacy policy before providing information.

25. Changes to This Privacy Policy

We may update this Privacy Policy to reflect changes in:

Applicable law
Website features
Service providers
Commercial services
Data processing
Security practices
Business operations

The revised policy will be published with a new “last updated” date.

26. Contacting the Data Protection Officer

Data Protection Officer: [name or position]
Email: [privacy email address]
Postal address: [business address]

Please provide sufficient information for us to understand and respond to your request.