Privacy Policy

1. Who We Are

Brenwick is a legal practice based in Singapore. Our registered office is located at 36 Robinson Road, #12-04, Singapore 068877. We are the data controller for personal data processed in connection with our services and website.

For privacy-related enquiries, you may contact us at [email protected] or by calling +65 6741 2938.

2. What Data We Collect

We collect personal data that you provide directly to us and data generated automatically when you visit our website.

Data you provide:

• Name and contact details (email address, phone number)
• Details of your legal matter or enquiry
• Any documents, correspondence, or information you share with us during an engagement

Data collected automatically:

• Browser type, device type, and operating system
• Pages visited and time spent on the website
• IP address and approximate geographic location
• Referral source (how you arrived at our website)

3. How We Use Your Data

Personal data collected is used for the following purposes:

• Responding to enquiries and providing legal services
• Managing our client relationship and maintaining records of advice given
• Fulfilling professional obligations under Singapore's Legal Profession Act
• Improving our website and understanding how visitors use it
• Communicating service updates or relevant information where you have consented

Legal basis for processing (under Singapore's Personal Data Protection Act, PDPA): We process your data based on your consent where required, or where it is necessary for the performance of a legal services contract, or to comply with our professional and legal obligations.

4. Data Retention

We retain personal data only for as long as necessary for the purposes described in this policy. For client matter files, we follow the Law Society of Singapore's guidelines on record retention — generally seven years from the conclusion of a matter. Website contact form data is retained for twelve months unless an ongoing client relationship requires longer retention.

5. Data Sharing

We do not sell personal data. We may share data in the following limited circumstances:

• With courts and regulatory bodies — where required by law or necessary to conduct legal proceedings on your behalf
• With third-party service providers — such as secure cloud storage providers and analytics platforms, under data processing agreements
• With professional advisers — including barristers or co-counsel where your matter requires

Any third party who handles your data on our behalf is required to maintain appropriate security standards and to use the data only for the stated purpose.

6. Data Protection Measures

We take reasonable steps to protect your data against unauthorised access, loss, or disclosure. These include:

• Encrypted email and document transmission for sensitive communications
• Access controls limiting data to relevant team members only
• Regular reviews of our data handling procedures
• Secure disposal of documents containing personal information

In the event of a data breach that is likely to result in significant harm, we will notify affected individuals and the Personal Data Protection Commission (PDPC) in accordance with PDPA mandatory breach notification requirements.

7. Cookies

Our website uses cookies to function correctly and to understand how visitors use the site. Essential cookies are required for the site to operate. Analytics and preference cookies are used only with your consent. You can manage your cookie preferences at any time via our Cookie Policy page.

8. Your Rights Under the PDPA

Under Singapore's Personal Data Protection Act, you have the right to:

• Access — request a copy of the personal data we hold about you
• Correction — request that inaccurate or incomplete data be corrected
• Withdrawal of consent — withdraw consent to the use of your data for any purpose not required by law or contract
• Data portability — request your data in a commonly used electronic format, where technically feasible

To exercise any of these rights, please contact us at [email protected]. We will respond within 30 days.

If you have a complaint regarding how we have handled your personal data, you may also contact the Personal Data Protection Commission (PDPC) at www.pdpc.gov.sg.

9. Third-Party Links

Our website may contain links to external websites. We are not responsible for the privacy practices of those sites and recommend reviewing their privacy policies independently.

10. Children's Privacy

Our services are intended for individuals aged 18 and above. We do not knowingly collect personal data from anyone under 18. If you believe a minor has provided us with personal data, please contact us and we will arrange for its deletion.

11. International Data Transfers

In some cases, data may be processed or stored on servers located outside Singapore. Where this occurs, we take reasonable steps to ensure the receiving party provides a comparable standard of data protection.

12. Changes to This Policy

We may update this policy from time to time to reflect changes in our practices or legal requirements. The "Last Updated" date at the top of this page will reflect any revisions. Continued use of our website or services after changes are published constitutes acceptance of the updated policy.

13. Contact Us

For any questions about this policy or your personal data:

• Email: [email protected]
• Phone: +65 6741 2938
• Address: 36 Robinson Road, #12-04, Singapore 068877
• Office hours: Monday to Friday, 9:00–18:00 SGT