Privacy Policy

1. Introduction

thornwickess ("we", "us", "our") is committed to protecting the personal data of the individuals and organisations who contact and engage us. This Privacy Policy explains what personal data we collect, why we collect it, how it is used, and what rights you have in relation to it.

This policy applies to all personal data processed in connection with our services and our website at thornwickess.live. By using our website or engaging our services, you acknowledge the practices described here.

For privacy-related enquiries, contact us at: [email protected]

2. Data We Collect

We collect personal data when you:

• Submit an enquiry through our contact form
• Call or email us directly
• Engage our services as a client
• Visit our website (technical data collected automatically)

The categories of data we may collect include: full name, email address, phone number, postal address, details of your legal matter, and technical data such as IP address and browser type (collected via cookies).

We do not collect sensitive categories of personal data (e.g. race, religion, health data) unless it is directly relevant to a matter you have engaged us for, and only with your explicit consent.

3. How We Use Your Data

Your personal data is used only for the following purposes:

• Responding to your enquiry or request
• Carrying out legal services under an engagement letter
• Communicating with you about your matter
• Meeting our regulatory and professional obligations
• Improving our website and service delivery (using anonymised analytics data)

We do not use your personal data for unsolicited marketing. We will not sell, rent, or transfer your personal data to third parties for commercial purposes.

4. Legal Basis for Processing

We process your personal data on the following legal bases under Singapore's Personal Data Protection Act (PDPA) 2012:

• Consent: where you have provided consent via our contact form or cookie preferences
• Contractual necessity: where processing is necessary to perform services under an engagement letter
• Legitimate interests: for website security, fraud prevention, and service improvement
• Legal obligation: where we are required to retain records under the Legal Profession Act or other applicable law

5. Data Retention

Enquiry data is retained for 12 months if no engagement follows. Client matter files are retained for a minimum of seven years after the close of a matter, in accordance with professional obligations under Singapore law. Technical data collected via cookies is retained for the duration set by each cookie type (see our Cookie Policy).

6. Data Sharing

We may share your personal data with:

• Courts, tribunals, or regulatory bodies as required by law or as part of your matter
• Third-party service providers who assist us in operating our website (e.g. analytics providers), subject to data processing agreements
• Professional advisers or co-counsel where this is necessary for your matter and agreed with you

We do not share personal data with third parties outside Singapore except where necessary for your matter, and we take steps to ensure adequate protections are in place.

7. Data Protection Measures

We maintain appropriate technical and organisational measures to protect personal data against unauthorised access, loss, or misuse. These include encrypted email systems, restricted access to client files, and regular review of our internal data handling practices. In the event of a data breach affecting your data, we will notify you in accordance with applicable law.

8. Cookies

Our website uses cookies to function correctly and to understand how visitors use the site. For full details on what cookies we use and how to manage them, please refer to our Cookie Policy.

9. Your Rights

Under Singapore's PDPA, you have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Withdraw consent to the use of your data (where consent is the basis)
• Request that we stop using your data for specified purposes
• Lodge a complaint with the Personal Data Protection Commission (PDPC) if you believe we have handled your data improperly

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.

10. Third-Party Links

Our website may contain links to external sites. We are not responsible for the privacy practices of those sites and encourage you to review their privacy policies independently.

11. Children's Privacy

Our services are intended for individuals aged 18 and above. We do not knowingly collect personal data from anyone under 18. If you believe a minor has submitted data to us, please contact us at [email protected] and we will delete it promptly.

12. Changes to This Policy

We may update this Privacy Policy from time to time. When material changes are made, we will update the "Last Updated" date at the top of this page. Continued use of our website or services after changes are published constitutes acceptance of the updated policy.

13. Contact

Data Controller: thornwickess Law Practice
138 Market Street, #28-03, Singapore 048946
Email: [email protected]
Phone: +65 6491 3728