Privacy Policy

1. Introduction

Saujana Law ("we", "us", "the firm") is committed to the careful handling of personal data. This Privacy Policy describes how we collect, use, retain, and protect personal information in connection with our legal services and this website.

We comply with Singapore's Personal Data Protection Act 2012 (PDPA) in all matters relating to the collection and use of personal data. Where we engage with clients outside Singapore, we apply equivalent standards.

If you have questions about this policy or about how we handle your data, please write to: privacy@saujanal

2. Data We Collect

We collect personal data in the following circumstances:

• When you submit an enquiry through this website (name, email, telephone, message content)
• When you engage the firm for legal services (identity documents, financial data, pension scheme documents, estate information, and related personal details necessary for the work)
• When you correspond with us by email or telephone
• Automatically via cookies when you browse this website (see Section 6)

We collect only what is necessary for the purposes described below. We do not collect sensitive personal data except where required to carry out the legal work you have engaged us to perform.

Retention: Enquiry data is held for 12 months. Client matter files are retained for 7 years from the conclusion of the matter, in accordance with professional obligations under the Legal Profession Act.

3. How We Use Your Data

We use personal data for the following purposes:

• Responding to enquiries about our services
• Performing legal services you have engaged us to carry out
• Complying with our legal and professional obligations (including conflict checks and money laundering obligations under the Corruption, Drug Trafficking and Other Serious Crimes Act)
• Maintaining our internal matter management records
• Improving this website using aggregated, anonymised analytics data

We do not use your data for marketing purposes without your explicit consent. We do not sell personal data to any third party under any circumstances.

4. Legal Basis for Processing

We process personal data on the following bases:

• Consent — for enquiries submitted through this website
• Contract — for data necessary to perform legal services you have engaged us to carry out
• Legal obligation — for compliance with the Legal Profession Act, CDSA, and other applicable Singapore law
• Legitimate interests — for maintaining security of our systems and improving our services

5. Data Sharing

We share personal data only in the following circumstances:

• With counterparties, tribunals, and courts where this is necessary to carry out legal work on your behalf — always with your knowledge
• With service providers who support our internal operations (e.g., secure document storage, email hosting) under data processing agreements that require equivalent protections
• Where required by law or by a court or regulatory order

We do not share personal data with advertising networks or data brokers.

6. Cookies

This website uses a small number of cookies to help us understand how visitors navigate it. We use essential cookies (necessary for the site to function) and, where you have consented, analytics cookies (to understand aggregate browsing patterns).

We do not use advertising or tracking cookies. Full details are set out in our Cookie Policy.

7. Data Security

We take reasonable technical and organisational measures to protect personal data against unauthorised access, disclosure, or loss. These include:

• Encrypted storage for client documents and correspondence
• Access controls limiting data access to staff with a need to know
• Secure email for client communications where possible
• Regular review of our data security practices

In the event of a data breach that is likely to affect your interests, we will notify you without undue delay in accordance with our obligations under Singapore law.

8. Your Rights

Under the PDPA, you have the right to:

• Request access to personal data we hold about you
• Request correction of inaccurate personal data
• Withdraw consent for processing (where processing is based on consent)
• Request that we stop using your data for certain purposes

To exercise any of these rights, please write to privacy@saujanal. We will respond within 30 days.

Note that certain data cannot be deleted while we are under a professional or statutory obligation to retain it.

9. Third-Party Links

This website may contain links to external sites. We are not responsible for the privacy practices of those sites and encourage you to read their privacy policies before sharing personal data with them.

10. Minors

Our services are directed at adults aged 18 and above. We do not knowingly collect personal data from persons under 18. If you believe we have inadvertently collected such data, please contact us at privacy@saujanal.

11. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last Updated" date at the top of this page. Continued use of this website after any revision constitutes acceptance of the revised policy.

12. Contact

For any questions about this policy or about the way we handle personal data, please contact us: