Privacy Policy

1. Introduction

Tuah Law ("the Firm", "we", "us") is committed to protecting the personal data of those who engage with us. This policy explains how we collect, use, and protect information you provide in the course of your dealings with us.

We are subject to Singapore's Personal Data Protection Act 2012 (PDPA) and comply with its requirements in all data-handling activities. For questions about this policy, write to us at privacy@tuahlawx.

2. Data We Collect

We collect personal data only as necessary to provide legal services or to respond to enquiries. This may include:

• Name, contact details (telephone, email), and address
• Employment history and pension scheme details relevant to your matter
• Financial information where required to assess your pension position
• Documents you provide in the course of an engagement
• Website usage data collected via cookies (see Section 5)

We collect data directly from you — through our enquiry form, by telephone, by email, or during a sitting — and from documents you share with us. We do not purchase or obtain data from third parties.

3. How We Use Your Data

Personal data is used for the following purposes:

• To provide the legal service you have requested
• To respond to your enquiry and schedule sittings
• To prepare correspondence, documents, and written summaries
• To maintain records required by professional regulations
• To improve the firm's services and website (in aggregate, anonymised form)

The legal bases for processing under the PDPA are consent (for optional uses), contractual necessity (to provide services you have engaged us for), and our legitimate interest in maintaining professional records.

We retain personal data for a minimum of seven years following the conclusion of any engagement, as required by the Legal Profession Act. After this period, data is securely deleted.

4. Data Sharing

We do not sell, rent, or share your personal data with third parties for commercial purposes. Data may be shared only in the following limited circumstances:

• With pension scheme administrators or the CPF Board, where required by your matter and authorised by you
• With courts or regulatory bodies where required by law or court order
• With our professional advisers (accountants, IT service providers) under strict confidentiality obligations

Any transfer of data outside Singapore occurs only where adequate protections are in place, consistent with PDPA requirements.

5. Cookies

Our website uses cookies to understand how visitors use it and to remember your preferences. You may manage your cookie preferences at any time via our Cookie Policy page.

We use Google Analytics to collect anonymised usage data. This helps us understand which pages are most useful. No personally identifying information is included in analytics data.

6. Data Protection Measures

We take reasonable steps to protect personal data against unauthorised access, loss, or misuse. These include:

• Encrypted email and secure file storage for client documents
• Access to client data restricted to those who need it for the relevant matter
• Regular review of data-handling practices
• Physical security at our Shenton Way office

7. Your Rights

Under the PDPA, you have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Withdraw consent for optional uses of your data
• Request that we cease using your data for certain purposes

To exercise any of these rights, write to us at privacy@tuahlawx. We will respond within 30 days. Note that certain data must be retained for professional reasons regardless of any withdrawal request.

8. Third-Party Links

Our website may contain links to external sites. We are not responsible for the privacy practices of those sites and encourage you to review their privacy policies separately.

9. Children's Privacy

Our services are intended for adults aged 18 and above. We do not knowingly collect personal data from persons under 18. If you believe we have inadvertently received data from a minor, please contact us immediately.

10. Regulatory Authority

Singapore's data protection supervisory authority is the Personal Data Protection Commission (PDPC). If you have concerns about our data practices that we have not resolved to your satisfaction, you may contact the PDPC at pdpc.gov.sg.

11. Changes to This Policy

We may update this policy from time to time. The date at the top of the page reflects when it was last revised. Continued use of our website or services after a revision constitutes acceptance of the updated policy.

12. Contact Us

Tuah Law

78 Shenton Way, #25-04, Singapore 079120

Email: privacy@tuahlawx