Privacy Policy

Introduction

Whitestone Legal is committed to protecting the privacy and security of personal information entrusted to us. This Privacy Policy explains how we collect, use, store, and safeguard information obtained through our website and professional services. By using our services or website, you consent to the practices described in this policy.

This policy applies to all personal data processed by Whitestone Legal in connection with our services, including corporate restructuring advisory, franchise agreement review, and business name registration support. We adhere to Singapore's Personal Data Protection Act (PDPA) and maintain appropriate measures to ensure data protection.

Information We Collect

Personal Information

We collect personal information that you voluntarily provide when engaging our services or using our website, including:

• Name and contact details (email address, phone number)
• Business information (company name, position, address)
• Professional credentials and background information
• Financial information necessary for service delivery
• Communication preferences and inquiry details

Automatically Collected Information

When you visit our website, we automatically collect certain technical information through cookies and similar technologies:

• IP address and browser type
• Device information and operating system
• Pages visited and time spent on site
• Referring website and navigation patterns

For detailed information about our use of cookies, please refer to our Cookie Policy.

How We Use Your Information

We process personal data for the following purposes:

Service Delivery

• Providing corporate restructuring advisory services
• Conducting franchise agreement reviews
• Processing business name registration applications
• Communicating about service matters and updates
• Preparing documentation and reports

Business Operations

• Responding to inquiries and service requests
• Maintaining client records and engagement history
• Processing payments and billing
• Improving our services and website functionality
• Conducting internal analysis and research

Legal Compliance

• Meeting regulatory and professional obligations
• Preventing fraud and unauthorized access
• Enforcing our terms and conditions
• Responding to legal processes and government requests

Data Sharing and Disclosure

We do not sell, rent, or trade your personal information. We may share information only in the following circumstances:

Service Providers

We engage third-party service providers who assist in delivering our services, including cloud storage, email communication, and payment processing. These providers are contractually bound to maintain confidentiality and use information only for specified purposes.

Professional Requirements

In certain situations, we may share information with professional advisors, regulatory authorities, or government agencies as required by law or professional standards. This includes compliance with Singapore regulatory requirements for certain service matters.

Business Transfers

If Whitestone Legal undergoes a business transition such as a merger or acquisition, your information may be transferred to the successor entity. We will notify you of any such change and provide options regarding your data.

Data Security and Protection

We implement comprehensive security measures to protect personal information from unauthorized access, alteration, disclosure, or destruction:

• Encrypted data transmission and secure server infrastructure
• Access controls limiting data to authorized personnel only
• Regular security audits and system monitoring
• Employee training on data protection obligations
• Secure document management systems
• Breach notification procedures in accordance with PDPA

While we employ industry-standard security practices, no method of transmission or storage is completely secure. We cannot guarantee absolute security but maintain vigilant protective measures.

Data Retention

We retain personal information for as long as necessary to fulfill the purposes outlined in this policy, unless a longer retention period is required by law or professional standards:

• Client engagement records: Minimum seven years from engagement completion
• Financial records: As required by Singapore tax and accounting regulations
• Website analytics: Typically twelve to twenty-four months
• Marketing communications: Until consent is withdrawn

When information is no longer needed, we securely delete or anonymize it in accordance with our data retention schedule and applicable requirements.

Your Rights and Choices

Under Singapore's Personal Data Protection Act, you have the following rights regarding your personal information:

Access and Correction

You may request access to your personal data and ask us to correct inaccurate or incomplete information. We will respond to such requests within thirty days, subject to any applicable exceptions under PDPA.

Withdrawal of Consent

You may withdraw consent for certain data processing activities, such as marketing communications. Note that withdrawal of consent may affect our ability to provide certain services. We will inform you of any such implications.

Data Portability

Where technically feasible, you may request a copy of your personal data in a commonly used, machine-readable format for transfer to another service provider.

Objection to Processing

You may object to processing of your personal data for specific purposes, such as direct marketing. We will cease such processing unless we have compelling legitimate grounds or legal obligations.

Lodge a Complaint

If you believe we have not handled your personal data appropriately, you may lodge a complaint with the Personal Data Protection Commission of Singapore.

International Data Transfers

Our services are primarily delivered within Singapore, and we store data on servers located in Singapore or other jurisdictions with adequate data protection standards. If we transfer data internationally, we ensure appropriate safeguards are in place, such as standard contractual clauses or adequacy decisions.

Children's Privacy

Our services are not directed to individuals under eighteen years of age. We do not knowingly collect personal information from minors. If we become aware that we have inadvertently collected such information, we will take steps to delete it promptly.

Changes to This Policy

We may update this Privacy Policy periodically to reflect changes in our practices or legal requirements. When we make material changes, we will notify you by posting the updated policy on our website with a revised effective date. We encourage you to review this policy regularly to stay informed about how we protect your information.

Continued use of our services after policy changes constitutes acceptance of the updated terms. If you do not agree with changes, please discontinue use of our services and contact us regarding data deletion.