Privacy Policy

1. Introduction

LegalDrive Pte. Ltd. ("LegalDrive", "we", "us", or "our") is committed to protecting personal data in accordance with the Personal Data Protection Act 2012 of Singapore ("PDPA") and related subsidiary legislation. This Privacy Policy explains how we collect, use, disclose, store, and protect personal data when you visit legaldrive.pro, communicate with us, or engage our legal services at The Counsel Chamber.

By using our website or providing personal data to us, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with our practices, please do not use our website or submit personal data through our channels.

2. Data controller

LegalDrive Pte. Ltd., UEN 202548291K, registered at 138 Market Street, #22-05 CapitaGreen, Singapore 048946, is the organisation responsible for personal data collected through this website and in connection with our legal practice, unless otherwise stated in an engagement letter or client agreement.

For privacy-related enquiries, contact our Data Protection Officer at [email protected] or write to the registered address above. We aim to acknowledge privacy enquiries within five business days.

3. Personal data we collect

We may collect the following categories of personal data depending on your interaction with us:

• Identity and contact data: name, email address, telephone number, job title, company name, and postal address.
• Enquiry data: information you provide in contact forms, emails, or consultations, including descriptions of legal matters and selected practice areas.
• Technical data: IP address, browser type, device identifiers, pages visited, and referral URLs collected through cookies and similar technologies where permitted.
• Engagement data: billing information, correspondence, documents, instructions, and matter notes provided when you become a client.
• Marketing preferences: your choices regarding newsletters, legal updates, or chamber event invitations where applicable.

We do not intentionally collect sensitive personal data through our website contact form unless you voluntarily include it in your message. If you are submitting information about health, criminal records, or other sensitive categories in connection with a legal matter, please do so only through secure channels we designate after engagement is confirmed.

4. How we collect personal data

We collect personal data through several channels:

• Direct submission via our contact form at legaldrive.pro/contact.php, which posts to our secure processing endpoint (send.php).
• Email, telephone, or in-person communication during office hours (Monday to Friday, 09:00–18:00 SGT).
• Automated technologies such as essential and optional cookies described in our Cookie Policy.
• Referrals from existing clients, correspondent firms, or professional networks, where the referrer has authority to share your contact details.
• Publicly available sources including ACRA corporate registries, IPOS records, and regulatory filings relevant to legal due diligence.

Our contact form includes a honeypot field ("website") to deter automated submissions. This field is hidden from human users and should remain empty; if populated, the submission is discarded without processing personal data.

5. Purposes of collection, use, and disclosure

We collect and use personal data for purposes that a reasonable person would consider appropriate in the circumstances, including:

• Responding to enquiries and assessing whether we can act for you, including conflict checks.
• Performing client onboarding procedures required by law and Law Society practice directions.
• Delivering legal services, maintaining case ledger files, and communicating about your matters.
• Issuing invoices, processing payments, and fulfilling accounting and tax obligations.
• Complying with statutory and regulatory requirements, including anti-money laundering and countering the financing of terrorism obligations under MAS and other applicable frameworks.
• Improving our website, analysing aggregate usage trends, and maintaining information security.
• Sending updates about legal developments or firm events where you have consented or where permitted by law.
• Establishing, exercising, or defending legal claims on behalf of clients or the firm.

We may disclose personal data to third parties where necessary for these purposes, including IT service providers, cloud hosting providers, professional indemnity insurers, auditors, correspondent law firms, courts and tribunals, and regulatory authorities such as the Personal Data Protection Commission, MAS, and ACRA. We require processors to protect personal data through contractual safeguards commensurate with the sensitivity of the information.

6. Legal basis and consent

Under the PDPA, we rely on consent, contractual necessity, legal obligation, and legitimate interests as appropriate. When you submit our contact form, you must tick the consent checkbox (consent_pdpa) confirming that you agree to our collection and use of your data to respond to your enquiry. The checkbox is not pre-selected; submission without consent is rejected. You may withdraw consent for marketing communications at any time without affecting the lawfulness of processing before withdrawal.

Where we process personal data of employees or representatives of corporate clients, we rely on legitimate interests and contractual necessity in addition to any consent obtained from the individual or authorised by their organisation.

7. Cookies and similar technologies

Our website uses cookies to enable core functionality and, with your consent, analytics and marketing cookies. Details of each cookie category, retention periods, and management options are set out in our Cookie Policy. You may accept all cookies, reject non-essential cookies, or customise preferences through the banner displayed on first visit. Consent choices are stored for six months in a cookie named legaldrive_consent.

8. Retention

We retain personal data only as long as necessary for the purposes described in this policy or as required by law. Enquiry records from non-clients are typically retained for up to twenty-four months unless a longer period is needed to resolve a dispute or demonstrate compliance. Client files are retained in accordance with Law Society practice directions and limitation periods applicable to legal claims, which may extend to seven years or more after matter closure.

When personal data is no longer required, we securely delete or anonymise it using methods appropriate to the medium of storage, including secure shredding of physical documents and cryptographic erasure of electronic records where practicable.

9. Cross-border transfers

Some of our service providers may store or process personal data outside Singapore, including in jurisdictions with data protection laws that differ from the PDPA. Where we transfer personal data overseas, we ensure that the recipient jurisdiction provides a comparable standard of protection or we implement contractual clauses, binding corporate rules, and technical measures required under the PDPA to protect your data. You may request details of overseas recipients relevant to your matter by contacting our Data Protection Officer.

10. Security measures

We implement administrative, technical, and physical safeguards to protect personal data against unauthorised access, collection, use, disclosure, copying, modification, disposal, or similar risks. Measures include role-based access controls on matter files, encrypted transmission where supported, staff confidentiality training, clean desk policies in The Counsel Chamber, and incident response procedures tested periodically.

No method of transmission over the internet is completely secure. We encourage you to avoid sending highly confidential documents through unencrypted email before engagement is confirmed. After engagement, we may provide secure upload channels for sensitive materials.

11. Your rights under the PDPA

Subject to exceptions under the PDPA, you may:

• Request access to personal data we hold about you.
• Request correction of inaccurate or incomplete personal data.
• Withdraw consent for processing that relies on consent, understanding that this may limit our ability to continue certain services.
• Request information about how your personal data has been used or disclosed within the past year.

To exercise these rights, email [email protected] with sufficient detail to identify you and your request. We respond within thirty days unless an extension is permitted under the PDPA. A reasonable fee may apply for manifestly unfounded or excessive access requests.

12. Accuracy

We take reasonable steps to ensure personal data is accurate and complete before using it for decisions that affect you. Please notify us promptly if your contact details change or if you believe information we hold is incorrect so we can update our case ledger records.

13. Third-party links

Our website may contain links to external sites operated by third parties, including courts, regulators, and professional bodies. We are not responsible for the privacy practices of those sites and encourage you to review their policies before providing personal data.

14. Children

Our website and services are directed at business clients and adults. We do not knowingly collect personal data from individuals under eighteen without appropriate parental or guardian involvement. If you believe we have collected data from a minor in error, contact us and we will delete it promptly.

15. Data breach notification

In the event of a data breach likely to result in significant harm or affect a significant number of individuals, we will notify the Personal Data Protection Commission and affected individuals as required by the PDPA, and take remedial steps to mitigate harm. Our incident response plan includes containment, assessment, notification, and post-incident review phases.

16. Do Not Call Registry

Where we contact you by telephone for marketing purposes, we check the Do Not Call Registry unless you have provided clear and unambiguous consent to receive such calls. You may opt out of marketing communications at any time using the unsubscribe mechanism or by emailing [email protected].

17. Updates to this policy

We may update this Privacy Policy to reflect changes in law, technology, or our practices. The effective date at the top of this page indicates the latest revision. Material changes will be highlighted on our website where practicable. Continued use of the website after updates constitutes acknowledgement of the revised policy, except where further consent is required by law.

18. Contact

LegalDrive Pte. Ltd.
138 Market Street, #22-05 CapitaGreen
Singapore 048946
Email: [email protected]
Phone: +65 6592 1847

19. Complaints

If you believe we have handled your personal data in breach of the PDPA, you may lodge a complaint with us at the contact details above. We investigate complaints promptly and aim to resolve them within fourteen business days. You also have the right to refer unresolved complaints to the Personal Data Protection Commission of Singapore at pdpc.gov.sg.

20. Definitions

In this Privacy Policy, "personal data" means data about an individual who can be identified from that data or from that data and other information to which we have or are likely to have access. "Processing" includes collecting, recording, holding, organising, adapting, altering, retrieving, using, disclosing, or destroying personal data. "Case ledger" refers to our internal matter management system used to track client engagements and associated documentation.