KL
Keris Legal
Contact

Last Updated: 10 March 2026

Privacy Policy

Keris Legal is committed to protecting the personal data of clients and website visitors. This Privacy Policy explains how we collect, use, and protect personal data in accordance with Singapore's Personal Data Protection Act 2012 (PDPA).

1. Data Controller

Keris Legal (the "Firm", "we", "us") is the data controller for personal data collected through this website and in the course of our legal practice. Our registered address is 182 Cecil Street, #17-01, Frasers Tower, Singapore 069547. For privacy-related enquiries, contact us at [email protected].

2. Data We Collect

We may collect the following categories of personal data:

We collect personal data through our website contact form, email correspondence, telephone conversations, and in the course of providing legal services.

3. How We Use Your Data

We use personal data for the following purposes:

Legal basis: Processing is based on your consent (when submitting our contact form), performance of a contract (when providing legal services), and our legitimate interests in operating our practice.

4. Data Retention

Client matter files are retained for a minimum of seven years from the conclusion of the matter, in accordance with professional practice requirements. Contact form submissions that do not progress to an engagement are retained for up to twelve months. Usage and analytics data (where consented) is retained for up to twenty-four months.

5. Data Sharing

We do not sell personal data to third parties. We may share personal data in the following circumstances:

6. Data Security

We implement reasonable technical and organisational measures to protect personal data against unauthorised access, loss, or disclosure. Client documents are stored in secure systems with access restricted to relevant personnel. We use encrypted communication channels for sensitive client correspondence.

7. Cookies

Our website uses cookies to improve functionality and, where consented, to collect analytics data. Please refer to our Cookie Policy for details of the cookies we use and how to manage your preferences.

8. Your Rights Under the PDPA

Under Singapore's Personal Data Protection Act, you have the right to:

To exercise any of these rights, please contact us at [email protected]. We will respond within thirty days of receiving your request.

If you have concerns about how we handle your personal data, you may lodge a complaint with the Personal Data Protection Commission (PDPC) Singapore at www.pdpc.gov.sg.

9. Third-Party Services

Our website may link to external sites. We are not responsible for the privacy practices of those sites. We may use third-party analytics services (subject to your cookie consent) to understand how our website is used. These services operate under their own privacy policies.

10. Children's Privacy

Our services are directed at business clients and are not intended for individuals under the age of eighteen. We do not knowingly collect personal data from minors.

11. Cross-Border Data Transfers

Where personal data is transferred outside Singapore (for example, to local counsel in other ASEAN jurisdictions), we take steps to ensure it receives protection comparable to Singapore's PDPA requirements.

12. Changes to This Policy

We may update this Privacy Policy from time to time. The updated date at the top of this page reflects when changes were last made. Continued use of our website following an update constitutes acceptance of the revised policy.

13. Contact Us

For any privacy-related questions, please contact: