Privacy Policy

1. Introduction

1.1 This Personal Data Policy (“Policy”) explains how Emerald Law LLC (“we”, “us” or “our”) collects, uses, discloses, retains and protects personal data in accordance with the Personal Data Protection Act 2012 of Singapore (“PDPA”). By interacting with us, engaging our services, using our website, attending our events, submitting information to us or otherwise communicating with us, you acknowledge and consent to our collection, use and disclosure of your personal data in the manner described in this Policy.

1.2 This Policy supplements, but does not supersede or replace, any other consents, notices or contractual provisions that may apply to our collection, use or disclosure of your personal data. We may update this Policy from time to time. The prevailing version will apply from the date stated in the updated Policy.

2. Meaning of Personal Data

2.1 In this Policy, “personal data” means data, whether true or not, about an individual who can be identified from that data, or from that data together with other information to which we have or are likely to have access. Personal data may include information contained in our records, as updated from time to time, but excludes business contact information as defined under the PDPA.

3. Personal Data We May Collect

3.1 Depending on the nature of your relationship and interaction with us, personal data collected by us may include your name, contact details, identification information, nationality, date of birth, employment information, financial information, property ownership and transaction information, information contained in legal and case-related documents, correspondence and communications, know-your-client and anti-money laundering due diligence information, visitor records, CCTV images where applicable, marketing preferences, and any other personal data provided to us in connection with our legal services.

3.2 Where you use any AI-enabled tools, chatbots, automated assistants or other technology features made available by us, personal data may also include prompts, queries, uploaded documents, AI-generated outputs containing personal data, metadata, session logs and usage data relating to such systems.

4. How We Collect Personal Data

4.1 We may collect personal data when you engage or enquire about our services, provide documents or information to us, communicate with us by email, telephone, letter, messaging platform, website or in person, attend meetings or events organised by or involving us, visit our premises, subscribe to updates or mailing lists, submit employment or business-related information, use our website or technology platforms, or submit personal data to us for any other reason.

4.2 We may also collect personal data from public sources, counterparties, clients, authorised representatives, third-party service providers, professional advisers, recruitment agencies, referees, courts, tribunals, regulators and other parties where permitted by law.

4.3 If you provide us with personal data relating to another individual, you represent and warrant that you have notified that individual of the purposes for which the personal data is provided and obtained all necessary consents for us to collect, use and disclose that personal data in accordance with this Policy.

5. Purposes for Collection, Use and Disclosure

5.1 We may collect, use and disclose personal data for purposes connected with our legal services and business operations, including to:

• provide, administer and manage legal services, transactions, proceedings and related matters;
• establish, manage and administer our relationship with clients, prospective clients and other relevant persons;
• respond to, process and handle enquiries, requests, feedback, suggestions, complaints and applications;
• verify identity, conduct conflict checks, client due diligence, know-your-client reviews, anti-money laundering checks and other checks required by law or professional obligations;
• prepare, review, manage and administer legal documents, correspondence, transactions and proceedings;
• communicate with clients, counterparties, courts, tribunals, government agencies, regulators and other relevant parties;
• process payments, billing, collections and administrative matters;
• manage our business operations, including data processing, storage, monitoring, backup, audit and record-keeping;
• manage the security of our premises, facilities, systems and technology infrastructure;
• provide legal updates, publications, event invitations and other communications where permitted by law;
• send administrative, security, support, operational and maintenance notices;
• improve our services, communications, website functionality and client experience;
• comply with applicable laws, regulations, regulatory requirements, professional rules, codes of practice, policies, procedures and directions issued by relevant authorities;
• establish, exercise or defend legal or equitable rights and claims; and
• carry out any other purpose reasonably related to the above.

6. Employment, Internship and Appointment Applications

6.1 If you apply for employment, internship, training contract, consultancy or any other appointment with us, we may collect, use and disclose your personal data to process and assess your application, verify your qualifications and credentials, conduct reference, background and conflict checks, communicate with you, administer onboarding where applicable, and comply with legal, regulatory and professional obligations.

7. Disclosure of Personal Data

7.1 We may disclose personal data where reasonably necessary for the purposes described in this Policy, including to our lawyers, employees, consultants, related entities, agents, contractors, service providers, professional advisers, insurers, auditors, banks, payment processors, IT vendors, cloud and data hosting providers, document management providers, couriers, storage and archival service providers, counterparties, counsel, foreign law firms, experts, translators, courts, tribunals, regulators, law enforcement agencies, government authorities and any other party authorised by you or permitted by law.

8. Overseas Transfers

8.1 Where your matter, instructions or our operations involve jurisdictions outside Singapore, it may be necessary for us to transfer, store, process or allow access to personal data outside Singapore. In such cases, we will take steps required under applicable law to ensure that overseas recipients provide a standard of protection comparable to that under the PDPA, unless an exception applies or you have otherwise consented.

9. Our Website, IP Addresses and Cookies

9.1 When you browse our website, we generally do not automatically collect personal data unless you provide it to us. However, our servers may automatically log technical information such as your IP address, browser type, device information, operating system, referring pages, pages visited and access times. We may use this information to administer, secure and improve our website and technology services, diagnose technical issues, analyse usage trends and comply with applicable legal requirements.

9.2 We may use cookies and similar technologies to store user preferences, maintain session information, support website functionality, improve user experience and understand how our website is used. You may adjust your browser settings to refuse or disable cookies, but doing so may affect the availability or functionality of parts of our website.

9.3 Our website or communications may contain links to third-party websites, platforms or resources. We are not responsible for the personal data practices, content or security of third-party websites, and you should review their privacy notices before providing personal data to them.

10. AI-Enabled Tools and Automated Technologies

10.1 We may use AI-enabled tools, automated systems and technology-assisted processes to support legal research, drafting, document review, information management, client service, administrative workflows and other operational purposes. Where personal data is processed through such tools, we will take reasonable steps to manage confidentiality, access controls, security, accuracy, human review and compliance with applicable law and professional obligations.

10.2 You should not submit unnecessary, excessive or irrelevant personal data through any AI-enabled tool or online platform made available by us. Where you provide personal data of another individual through such tools, you must ensure that you have the authority and consent required to do so.

11. Protection and Retention of Personal Data

11.1 We will make reasonable security arrangements to protect personal data in our possession or under our control against unauthorised access, collection, use, disclosure, copying, modification, disposal or similar risks. These arrangements may include administrative, physical and technical safeguards appropriate to the nature of the personal data and the risks involved.

11.2 We may retain personal data for as long as it is necessary for the purposes for which it was collected, for legal, regulatory, professional, accounting or business purposes, or as otherwise permitted or required by law. When personal data is no longer required, we will take reasonable steps to securely destroy, anonymise or otherwise dispose of it in accordance with applicable requirements.

12. Accuracy of Personal Data

12.1 We generally rely on personal data provided by you or on your behalf as accurate and complete. You should ensure that all personal data submitted to us is accurate, complete and up to date, and notify us promptly of any changes.

13. Withdrawal of Consent, Access and Correction

13.1 You may contact our Data Protection Officer if you wish to withdraw consent to our use of your personal data, request access to personal data that we hold about you, request correction of your personal data, or make any enquiry or complaint relating to personal data. We may require sufficient information to verify your identity and process your request. Where permitted by law, we may charge a reasonable fee for access requests and may decline requests in circumstances allowed under applicable law.

13.2 If you withdraw consent to any or all collection, use or disclosure of your personal data, we may not be able to continue providing certain services or performing certain obligations, depending on the nature of the request.

14. Contact Us

14.1 For questions, feedback, access or correction requests, withdrawal of consent, or complaints relating to this Policy or your personal data, please contact our Data Protection Officer at:

15. Changes to this Policy

15.1 We may amend this Policy from time to time to reflect changes in law, regulatory guidance, professional requirements, technology, our services or our business operations. The updated Policy will apply from the date stated in the latest version.

16. Website Use and Acknowledgement

Without prejudice to the foregoing, by accessing and using our website in any way (including without limitation using any documents, data, reports, automated templates or any other materials, or accessing any software programs, database systems or portals made available or enabled via the site), you represent and warrant that you have read, understand and consent to the collection, use and disclosure of your personal data as set out above.