Privacy Policy

This Privacy Policy explains how NeighborLegal SG ("we", "us", "our") collects, uses, discloses, and protects personal data when you visit https://neighborlegalsg.pro ("the Site") or contact us about neighbour disputes and related legal services in Singapore. We handle personal data in accordance with the Personal Data Protection Act 2012 (PDPA) of Singapore and applicable subsidiary legislation.

1. Who we are

NeighborLegal SG provides legal guidance and consultancy relating to neighbour and community disputes, including matters arising in HDB estates, private condominiums, and mixed residential developments across Singapore. Our registered office is at 99 Duxton Road, #02-01, Singapore 089543. General enquiries may be sent to [email protected]. Privacy-specific questions should be directed to [email protected].

2. Scope of this policy

This policy applies to personal data collected through the Site, our contact form, email correspondence, telephone calls, in-person consultations, and any follow-up communication relating to prospective or existing client matters. It does not apply to third-party websites linked from the Site, including Google Maps embedded on our contact page. Those services are governed by their own privacy terms.

3. Categories of personal data we collect

Depending on how you interact with us, we may collect the following categories of personal data:

• Identity and contact data: name, email address, telephone number, postal address, and preferred language of communication.
• Matter-related data: descriptions of neighbour disputes, incident dates, photographs or logs you voluntarily provide, estate type (HDB, condo, landed), and your stated objectives (mediation, letter drafting, tribunal preparation).
• Technical data: IP address, browser type, device type, referring URL, and timestamps collected through server logs when you browse the Site.
• Cookie and preference data: records of cookie consent choices stored locally in your browser, as described in our Cookie Policy.
• Communication records: copies of emails, form submissions, and notes from consultations where you have contacted us.

We do not intentionally collect sensitive personal data such as health records unless you voluntarily include health-related context (for example, asthma affected by second-hand smoke) that is relevant to your matter. If you provide such information, we treat it with additional care and limit internal access to personnel who need it to advise you.

4. How we collect personal data

We collect personal data in several ways:

• Directly from you when you complete the contact form on contact.php, send email, call our office, or attend a consultation.
• Automatically through standard web server logs when you request pages, stylesheets, scripts, or images from the Site.
• Through cookies and similar technologies where you have consented to optional cookies, as set out in our Cookie Policy.

We do not purchase marketing lists or obtain personal data from data brokers for neighbour-dispute lead generation.

5. Purposes of collection, use, and disclosure

We collect and use personal data for purposes that a reasonable person would consider appropriate in the context of legal consultancy. These include:

• Responding to enquiries and scheduling consultations;
• Assessing whether we can assist with your neighbour dispute and outlining possible next steps;
• Providing legal guidance, drafting correspondence, and preparing mediation or tribunal materials when you engage our services;
• Maintaining client files, billing records, and conflict-check records where applicable;
• Complying with legal and regulatory obligations, including record-keeping and responding to lawful requests from authorities;
• Improving the Site’s accessibility, security, and content based on aggregated technical logs;
• Protecting our rights and the rights of others where a dispute arises regarding our services.

We may disclose personal data to:

• Our lawyers, consultants, and administrative staff on a need-to-know basis;
• IT service providers who host the Site or maintain email systems under contractual confidentiality obligations;
• Professional advisers such as auditors or insurers where required;
• Mediation centres, tribunals, Town Councils, or other parties when you instruct us to communicate with them on your behalf;
• Law enforcement or regulators when required by law or court order.

We do not sell personal data.

6. Legal basis and consent

Under the PDPA, we generally rely on your consent for collection and use of personal data submitted through the contact form and during consultations. You may withdraw consent for marketing communications at any time, though withdrawal may not affect our ability to retain data where retention is required for legal, accounting, or dispute-resolution purposes.

Where you submit a contact form, the submit action constitutes consent for us to use your details to respond to that specific enquiry. Optional cookies are activated only according to your choices in the cookie banner.

7. Contact form processing

When you submit our contact form, the information you provide is transmitted to [email protected] via the Site’s mail handler. Fields typically include your name, email address, optional phone number, selected topic, and free-text message. We use this information solely to reply to your enquiry unless you subsequently engage us for formal services, in which case the data may be transferred into a client file.

Form submissions may be stored in email archives and internal case-management notes. We encourage you not to include third parties’ unit numbers, identity documents, or inflammatory material in your first message. If detailed evidence is needed, we will guide you on secure transfer during consultation.

8. Retention

We retain personal data only as long as necessary for the purposes described above:

• General enquiries that do not proceed to engagement: typically up to twenty-four months unless a longer period is needed to document advice given;
• Client matter files: for the duration of the engagement and thereafter as required by professional conduct rules, limitation periods, and accounting regulations;
• Server logs: usually rotated within ninety days unless needed for security investigation;
• Cookie consent records: stored locally in your browser for approximately one hundred eighty days.

When data is no longer required, we take reasonable steps to destroy or anonymise it.

9. Security measures

We implement reasonable administrative, technical, and physical safeguards appropriate to the nature of the data we hold. These include access controls for email and file storage, secure hosting configurations, and staff training on confidentiality. No method of transmission over the Internet is completely secure; while we strive to protect your data, we cannot guarantee absolute security.

If you believe your interaction with us has been compromised, contact [email protected] promptly so we can investigate and mitigate harm.

10. Cross-border transfers

Our primary systems and staff are located in Singapore. If we use overseas hosting or support services, we require contractual protections consistent with PDPA cross-border transfer requirements, or we ensure the recipient jurisdiction provides comparable protection.

11. Your rights under the PDPA

Subject to exceptions in the PDPA, you may:

• Request access to personal data we hold about you;
• Request correction of inaccurate or incomplete data;
• Withdraw consent for optional processing where consent is the basis;
• Request information about how your data has been used or disclosed in the past year.

To exercise these rights, email [email protected] with sufficient detail for us to verify your identity. We respond within reasonable timeframes prescribed by law. A reasonable fee may apply to manifestly unfounded or excessive access requests.

We respond to verified access requests without undue delay and generally within thirty days unless a longer period is permitted by law.

12. Children

The Site and our services are directed at adults dealing with housing disputes. We do not knowingly collect personal data from children under thirteen without parental involvement. If you believe a child has submitted data to us, contact us and we will delete it where appropriate.

13. Third-party embeds

Our contact page embeds Google Maps to show our office location at 99 Duxton Road, #02-01, Singapore 089543. When the map loads, Google may collect technical data according to Google’s privacy policy. You can open directions in an external browser tab instead if you prefer not to interact with the embed.

14. Updates to this policy

We may update this Privacy Policy to reflect changes in law, technology, or our practices. The “Last updated” date at the top will change accordingly. Material changes will be posted on the Site and, where appropriate, highlighted in the footer for a limited time so returning visitors can notice updates.

15. Data breach notification

If we become aware of a data breach that is likely to result in significant harm to affected individuals, we will notify the PDPC and affected persons as required under the PDPA and PDPC guidance. Our notification will describe the nature of the breach, the categories of data involved, and steps we are taking to mitigate harm. We maintain internal incident-response procedures so that suspected breaches are escalated promptly to senior staff.

16. Do Not Call Registry

We do not use personal data obtained through the Site to send unsolicited marketing messages by telephone or text unless you have provided clear consent or an exemption applies under Singapore law. Service-related calls about an enquiry you submitted are not marketing messages.

17. Contact us

For privacy enquiries, corrections, or access requests:

Email: [email protected]
Phone: +65 6271 8493
Address: 99 Duxton Road, #02-01, Singapore 089543

If you remain unsatisfied after contacting us, you may lodge a complaint with the Personal Data Protection Commission (PDPC) in Singapore in accordance with its published procedures. We cooperate with regulatory enquiries and will provide reasonable assistance to verify our compliance with applicable data protection obligations. Keep a copy of your request and our reply for your personal records.