Privacy Policy

1. Introduction

Peranakan Partners ("we", "us", "our") is committed to protecting the personal data of individuals who interact with our services. This Privacy Policy explains how we collect, use, disclose, and protect personal data in accordance with Singapore's Personal Data Protection Act 2012 (PDPA). It applies to personal data collected through our website at peranakan.live and in the course of our advisory engagements.

If you have questions about this policy, please contact us at [email protected].

2. Data We Collect

We may collect the following categories of personal data:

• Contact information: name, email address, phone number
• Professional information: job title, employer name, industry (if provided)
• Engagement information: details of employment matters shared in the course of seeking advice
• Website usage data: pages visited, browser type, approximate location (via cookies and analytics, if consented)
• Communication records: emails and correspondence between you and our team

We collect personal data directly from you when you submit our contact form, email us, call us, or engage our services. We do not purchase or obtain personal data from third-party data brokers.

3. How We Use Your Data

We use personal data for the following purposes:

• To respond to your enquiry and assess whether and how we can assist
• To provide the advisory services you have engaged us for
• To communicate with you about the progress of your matter
• To comply with legal obligations applicable to advisory firms in Singapore
• To improve our website and services (where analytics consent is given)

We do not use your personal data for unsolicited marketing communications. We do not share your data with advertising networks.

4. Legal Basis for Processing

Under the PDPA, we process your personal data on the basis of your consent (provided when you contact us or submit our form), the performance of a contract or pre-contractual steps (where you engage our services), and legitimate interests (such as maintaining records of correspondence). Where consent is the basis, you may withdraw it at any time by contacting us.

5. Data Retention

We retain personal data for as long as is necessary for the purpose it was collected and to comply with applicable legal and professional obligations. Engagement records are generally retained for seven years following the conclusion of a matter. Website enquiry data not resulting in an engagement is retained for twelve months. Analytics data (where consented) is subject to the retention policy of the analytics provider.

6. Sharing of Personal Data

We do not sell or rent personal data. We may share data with the following in limited circumstances:

• Service providers who support our operations (e.g., secure document storage, email delivery), bound by confidentiality obligations
• Government bodies or regulatory authorities where required by law
• Professional advisers (e.g., auditors) under strict confidentiality

7. Data Protection Measures

We apply appropriate technical and organisational measures to protect personal data against unauthorised access, loss, or disclosure. These include encrypted data storage, access controls limited to personnel involved in each matter, and regular review of our data handling practices. In the event of a data breach that is likely to result in significant harm, we will notify affected individuals and the Personal Data Protection Commission (PDPC) as required by the Notification of Data Breaches Regulations.

8. Cookies

Our website uses cookies for essential functionality and, with your consent, for analytics purposes. For full information on the cookies we use, please see our Cookie Policy.

9. Your Rights

Under the PDPA, you have the right to:

• Request access to personal data we hold about you
• Request correction of inaccurate data
• Withdraw consent to the use of your data (where processing is consent-based)
• Request that data be deleted, subject to legal retention obligations
• Lodge a complaint with the PDPC if you believe your rights have been infringed

To exercise any of these rights, please contact us at [email protected]. We will respond within 10 business days.

10. Third-Party Links

Our website may contain links to external websites. We are not responsible for the privacy practices of those sites and recommend reviewing their privacy policies independently.

11. Children

Our services are intended for individuals aged 18 and above. We do not knowingly collect personal data from minors. If we become aware that data has been collected from a person under 18, we will delete it promptly.

12. Changes to This Policy

We may update this Privacy Policy from time to time. Where changes are material, we will post a notice on our website. The date at the top of this page indicates when the policy was last revised. Continued use of our website or services following any change constitutes acceptance of the updated policy.

13. Contact

For privacy-related enquiries or to exercise your rights, please contact:

For unresolved concerns, you may contact the Personal Data Protection Commission at www.pdpc.gov.sg.