Last Updated: 10 March 2026
Privacy Policy
Keris Legal is committed to protecting the personal data of clients and website visitors. This Privacy Policy explains how we collect, use, and protect personal data in accordance with Singapore's Personal Data Protection Act 2012 (PDPA).
1. Data Controller
Keris Legal (the "Firm", "we", "us") is the data controller for personal data collected through this website and in the course of our legal practice. Our registered address is 182 Cecil Street, #17-01, Frasers Tower, Singapore 069547. For privacy-related enquiries, contact us at [email protected].
2. Data We Collect
We may collect the following categories of personal data:
- Contact information: name, email address, telephone number
- Professional information: company name, role, industry sector
- Matter information: details of franchise or licensing matters you describe to us
- Usage data: pages visited, browser type, IP address (via cookies, where consented)
We collect personal data through our website contact form, email correspondence, telephone conversations, and in the course of providing legal services.
3. How We Use Your Data
We use personal data for the following purposes:
- Responding to enquiries and providing legal services
- Maintaining client records and matter files
- Sending service-related communications
- Improving our website and services
- Complying with legal and regulatory obligations
Legal basis: Processing is based on your consent (when submitting our contact form), performance of a contract (when providing legal services), and our legitimate interests in operating our practice.
4. Data Retention
Client matter files are retained for a minimum of seven years from the conclusion of the matter, in accordance with professional practice requirements. Contact form submissions that do not progress to an engagement are retained for up to twelve months. Usage and analytics data (where consented) is retained for up to twenty-four months.
5. Data Sharing
We do not sell personal data to third parties. We may share personal data in the following circumstances:
- With local counsel or professional advisers in other jurisdictions, where relevant to your matter and with your knowledge
- With service providers who assist us in operating our practice (subject to appropriate data processing terms)
- Where required by law, court order, or regulatory obligation
6. Data Security
We implement reasonable technical and organisational measures to protect personal data against unauthorised access, loss, or disclosure. Client documents are stored in secure systems with access restricted to relevant personnel. We use encrypted communication channels for sensitive client correspondence.
7. Cookies
Our website uses cookies to improve functionality and, where consented, to collect analytics data. Please refer to our Cookie Policy for details of the cookies we use and how to manage your preferences.
8. Your Rights Under the PDPA
Under Singapore's Personal Data Protection Act, you have the right to:
- Access personal data we hold about you
- Correct inaccurate or incomplete personal data
- Withdraw consent to data processing (where processing is based on consent)
- Request that we cease using your personal data for direct marketing
To exercise any of these rights, please contact us at [email protected]. We will respond within thirty days of receiving your request.
If you have concerns about how we handle your personal data, you may lodge a complaint with the Personal Data Protection Commission (PDPC) Singapore at www.pdpc.gov.sg.
9. Third-Party Services
Our website may link to external sites. We are not responsible for the privacy practices of those sites. We may use third-party analytics services (subject to your cookie consent) to understand how our website is used. These services operate under their own privacy policies.
10. Children's Privacy
Our services are directed at business clients and are not intended for individuals under the age of eighteen. We do not knowingly collect personal data from minors.
11. Cross-Border Data Transfers
Where personal data is transferred outside Singapore (for example, to local counsel in other ASEAN jurisdictions), we take steps to ensure it receives protection comparable to Singapore's PDPA requirements.
12. Changes to This Policy
We may update this Privacy Policy from time to time. The updated date at the top of this page reflects when changes were last made. Continued use of our website following an update constitutes acceptance of the revised policy.
13. Contact Us
For any privacy-related questions, please contact:
- Email: [email protected]
- Address: 182 Cecil Street, #17-01, Frasers Tower, Singapore 069547
- Phone: +65 6714 3829