Privacy Policy

Last updated: 10 April 2025 · Effective from: 10 April 2025

Bumi Advocates ("the firm", "we", "us") is committed to protecting the personal information of clients, prospective clients, and visitors to our website. This policy explains what information we collect, how we use it, how long we hold it, and what rights you have in relation to it.

The firm is a data controller under the Personal Data Protection Act 2012 (Singapore) ("PDPA"). All personal data collected and processed by Bumi Advocates is handled in accordance with the PDPA and the Legal Profession (Professional Conduct) Rules.

1. Information We Collect

We collect personal information in the course of providing legal services and through our website. The categories of information we collect include:

• Name, contact details (telephone, email, postal address), and identity documents where required
• Information about your pension holdings, CPF accounts, employment history, and financial circumstances, to the extent relevant to your matter
• Correspondence and communications between you and the firm
• Information submitted through the enquiry form on our website (name, email, telephone, message)
• Technical information collected automatically when you visit our website (IP address, browser type, pages visited), collected through cookies — see our Cookie Policy for details

Legal bases for processing

We process personal data on the following bases: the performance of a contract or pre-contractual steps (when you instruct us or enquire about our services); compliance with a legal obligation (including our obligations as a regulated law practice); and our legitimate interests in operating the firm and maintaining client relationships.

2. How We Use Your Information

• To provide legal advice and representation in relation to your matter
• To communicate with you about your matter and our services
• To comply with our professional obligations under the Legal Profession Act and related rules
• To respond to enquiries submitted through the website or by telephone or email
• To maintain records required by law or by the Law Society of Singapore
• To improve the website and understand how visitors use it (analytics cookies — only with your consent)
• To send information about our services, where you have consented to receive it

We do not use your personal information for automated decision-making or profiling.

3. Sharing of Information

We do not sell or rent your personal data. We share it only as follows:

• With third parties where required to conduct your matter — for example, the relevant pension body, the Office of the Public Guardian (for LPAs), or the court
• With professional advisers (e.g. barristers, other experts) where relevant to your instruction
• With our technology service providers (e.g. document management, website hosting), under confidentiality obligations
• Where required by law, court order, or regulatory authority

4. Retention of Personal Data

We hold client files for a minimum of seven years after the conclusion of a matter, consistent with the limitation period applicable to professional negligence claims in Singapore. Enquiry records not leading to an instruction are held for twelve months. Website analytics data is retained for up to twenty-four months.

After the retention period, personal data is securely deleted or anonymised.

5. Data Protection Measures

We take reasonable steps to protect personal data against unauthorised access, loss, or disclosure. These include access controls limiting who within the firm can view client data, secure email and document storage, and regular review of our security practices. In the event of a data breach that is likely to result in significant harm, we will notify the Personal Data Protection Commission (PDPC) and affected individuals as required by the PDPA.

6. Cookies

Our website uses cookies. Essential cookies are necessary for the site to function. Optional cookies (analytics, preferences) are used only with your consent. You may withdraw your consent at any time through the Cookie Policy page. See that page for full details of the cookies we use.

7. Your Rights

Under the PDPA, you have the right to:

• Access the personal data we hold about you
• Correct personal data that is inaccurate or incomplete
• Withdraw consent to the processing of your data (where processing is based on consent)
• Request the deletion of personal data, subject to our legal obligations to retain it
• Lodge a complaint with the Personal Data Protection Commission (PDPC) if you believe your rights have been infringed

To exercise any of these rights, please write to us at the address below or by email. We will respond within thirty days.

8. Third-Party Links

Our website may contain links to external sites. We are not responsible for the privacy practices of those sites, and this policy does not apply to them.

9. Children

Our services are directed at adults. We do not knowingly collect personal data from persons under eighteen years of age. If you believe a minor has submitted information to us, please contact us and we will delete it.

10. Changes to This Policy

We may update this policy from time to time. The updated version will be posted on our website with a revised "last updated" date. Continued use of our website after a revision constitutes acceptance of the updated policy.

11. Contact

For any privacy-related queries, to exercise your rights, or to raise a concern:

Bumi Advocates
152 Beach Road, #25-08 Gateway East, Singapore 189721
Email: privacy@bumiadvo
Telephone: +65 8167 4329