Privacy Policy
How Celvara collects, uses, and protects your personal data. We take data protection seriously and handle your information with care.
1. Introduction
Celvara ("we", "us", "our") is a legal advisory practice based in Singapore. We are committed to protecting the privacy of individuals who interact with us — whether through our website, contact forms, or direct communications.
This Privacy Policy describes how we collect, use, disclose, and safeguard personal data in accordance with Singapore's Personal Data Protection Act 2012 (PDPA). By using our website or engaging our services, you acknowledge that you have read and understood this policy.
If you have questions about this policy, you may write to us at [email protected].
2. Personal Data We Collect
We collect personal data only when it is reasonably necessary for our advisory and administrative purposes. The types of data we may collect include:
Identity Data
- • Full name
- • Company name (where applicable)
- • Job title or role
Contact Data
- • Email address
- • Phone number
- • Business address (where relevant)
Enquiry Data
- • Details of your legal matter or enquiry
- • Documents shared voluntarily
- • Communications with our team
Technical Data
- • IP address and browser type
- • Pages visited and time on site
- • Cookie preferences
We do not collect sensitive personal data (such as NRIC numbers, financial account details, or health information) through our website forms. If such information is shared during the course of an engagement, it is handled under our professional duties of confidentiality.
3. How We Collect Your Data
We gather personal data through several channels:
Contact forms: When you submit an enquiry through our website, the information you provide is sent to us and stored for follow-up purposes.
Direct correspondence: Emails, phone calls, or written communications you initiate with us.
Cookies and analytics: Automated data collected when you browse our site. See our Cookie Policy for details.
Referrals: Data provided by third parties (e.g., referral partners) who have obtained your consent to share your details with us.
4. Purposes and Legal Basis for Processing
We use personal data only for purposes that have a reasonable basis. Under Singapore's PDPA, we rely on the following grounds:
| Purpose | Legal Basis | Retention |
|---|---|---|
| Responding to your enquiry | Consent / Contractual necessity | 12 months from last contact |
| Delivering advisory services | Contractual necessity | 7 years (professional records) |
| Sending service updates | Consent | Until you withdraw consent |
| Analytics and website improvement | Legitimate interests | 26 months (anonymised) |
| Legal and regulatory compliance | Legal obligation | As required by law |
5. Sharing Your Data
We do not sell, rent, or trade personal data to third parties for marketing purposes. Data may be shared in the following limited circumstances:
-
Service providers: Third parties who support our operations (e.g., secure document handling, cloud storage, analytics platforms) under contractual data protection obligations.
-
Professional advisers: Where your matter requires coordination with barristers, notaries, or other professionals, data is shared on a need-to-know basis with your knowledge.
-
Regulatory authorities: Where we are legally required to disclose information to government agencies or courts.
-
Business transfers: In the event of a merger, acquisition, or restructuring, data may be transferred to the successor entity, subject to equivalent protections.
6. Data Protection Measures
Encryption
All data in transit is protected by TLS encryption. Stored data is encrypted at rest on secure servers.
Access Controls
Access to personal data is restricted to authorised personnel on a need-to-know basis.
Regular Review
Our data handling practices are reviewed periodically to remain aligned with current standards and regulations.
Breach notification: In the event of a data breach that poses significant harm, we will notify the Personal Data Protection Commission (PDPC) and affected individuals in accordance with Singapore's mandatory breach notification requirements.
7. Cookies
Our website uses cookies to improve your experience and help us understand how visitors use the site. Cookies are small text files placed on your device.
We use essential cookies (required for site function), analytics cookies (to measure site usage), and preference cookies (to remember your settings). Marketing cookies may also be present from third-party services.
You can manage your cookie preferences at any time. For full details, please see our Cookie Policy.
8. Your Data Rights
Under Singapore's PDPA, you have the following rights in relation to your personal data:
Right of Access
You may request a copy of the personal data we hold about you and information on how it has been used.
Right of Correction
Where your personal data is inaccurate or incomplete, you may request that we correct it.
Right to Withdraw Consent
Where processing is based on your consent, you may withdraw it at any time. This does not affect processing prior to withdrawal.
Right to Cease Use
You may request that we stop using your personal data for marketing purposes.
To exercise any of these rights, please contact our data protection contact at [email protected]. We will respond within 30 calendar days. Requests may be subject to identity verification.
If you believe your rights have not been adequately addressed, you may lodge a complaint with Singapore's Personal Data Protection Commission (PDPC) at www.pdpc.gov.sg.
9. Third-Party Links
Our website may contain links to external sites — for example, government portals, regulatory bodies, or professional organisations. We are not responsible for the privacy practices of those sites and encourage you to review their policies independently. Our policy applies only to data processed by or on behalf of Celvara.
10. Children's Privacy
Our services are directed at persons aged 18 and above. We do not knowingly collect personal data from individuals below this age. If you believe that a minor has provided us with personal information, please contact us and we will take appropriate steps to remove that data.
11. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. When we make material changes, we will update the "Last Updated" date at the top of this page.
We encourage you to review this page periodically. Continued use of our website after an update constitutes acknowledgement of the revised policy.
12. Contact Our Data Protection Contact
For any privacy-related enquiries, requests, or concerns, please reach out to us. We aim to respond to all requests within 30 calendar days.
Celvara Legal Advisory
71 Robinson Road, #14-01
Singapore 068895