General Data Protection Statement

Privacy Policy Definitions

Understanding key terms helps clarify our approach to data protection and your relationship with OwnerOneLaw as a data controller.

Personal data refers to any information that identifies or relates to an individual, such as names, contact details, or business identifiers.

Processing includes any operation conducted on personal data, such as collection, storage, use, or disclosure by OwnerOneLaw.

A user is any person or business entity who interacts with OwnerOneLaw's website or services and whose data is subject to processing.

Services mean the legal protection and advisory services offered by OwnerOneLaw to business clients within Singapore.

Cookies are small data files placed on users' devices to enhance website functionality and analyze usage patterns for better service delivery.

Purposes of Data Processing

We use your data strictly to fulfill business objectives relevant to legal service provision and effective client management.

• To provide and personalize legal protection services tailored to your business needs.
• To manage client relationships and communications, including responding to inquiries.
• To ensure compliance with legal and regulatory obligations incumbent on OwnerOneLaw.
• To process business transactions and manage accounts accurately.
• To improve website functionality and optimize the online user experience.
• To monitor service usage patterns for risk management and quality assurance.
• To safeguard our systems and detect unauthorized activities.
• To communicate important updates related to service changes or legal developments.

Legal Bases for Processing

OwnerOneLaw processes personal data only when there is a justified legal basis according to Singapore data protection regulations.

• Processing is necessary for the performance of contracts with clients.
• Compliance with legal obligations applicable to OwnerOneLaw.
• Legitimate interests pursued by OwnerOneLaw, such as security and service improvement.
• Consent provided by data subjects where required by law or for specific processing activities.

Compliance with Data Protection Principles

Though based in Singapore, OwnerOneLaw aligns its privacy practices with internationally recognized principles similar to the GDPR.

• Lawfulness, fairness, and transparency in all data handling activities.
• Limiting data collection to what is necessary for specified purposes.
• Ensuring accuracy and allowing updates to personal data when needed.
• Implementing appropriate security measures to protect data integrity.
• Respecting data subject rights and facilitating their exercise.
• Keeping personal data only for as long as reasonably required.

Cookie Usage Policy

OwnerOneLaw uses cookies to enhance service delivery and understand user interactions with our website.

We employ session cookies for website navigation and persistent cookies for remembering user preferences.

Cookies are categorized as essential, performance, and analytical for appropriate management and compliance.

Users may adjust cookie settings through browser preferences or provided consent tools to limit unwanted tracking.

For detailed information, please refer to our full cookie policy.

Data Sharing and Disclosure

OwnerOneLaw shares personal data only with necessary trusted partners to facilitate service provision and compliance.

• Authorized legal and regulatory authorities as required by law.
• Third-party service providers aiding in payment processing and IT support.
• Professional advisors contracted to assist with specific cases or compliance matters.
• Business partners for marketing and communication purposes with user consent.
• Data analytics providers assisting with website performance review.
• Any other parties as authorized by you or mandated by legal obligation.

International Data Transfers

Data may be transferred outside Singapore where necessary, subject to safeguards ensuring continued protection in accordance with Singapore's data protection principles.

OwnerOneLaw implements contractual clauses and ensures recipient compliance as measures to protect data during international transfers.

Data Retention Policy

Personal data is retained only for the duration necessary to fulfill intended purposes and legal requirements, after which it is securely deleted or anonymized.

Information related to client accounts is maintained for the period of active engagement plus a statutory retention term for legal obligations.

Communication records are archived for an appropriate timeframe to support client service and regulatory compliance.

Access and security logs are retained in accordance with security policies and compliance guidelines.

Data deletion procedures include secure erasure methods to prevent unauthorized retrieval once retention periods end.

Data Security Measures

OwnerOneLaw employs multiple security protocols to safeguard data, protect against unauthorized access, and ensure confidentiality and integrity.

• Use of encryption technologies for data in transit and at rest.
• Regular security audits and vulnerability assessments to enhance system protections.
• Strict access controls and authentication mechanisms limiting data access to authorized personnel only.

Your Rights Regarding Personal Data

Under applicable data protection laws, you possess rights related to your personal data which OwnerOneLaw respects and facilitates upon request.

• Right to access information about the personal data we hold about you.
• Right to request correction or updates to inaccurate or incomplete data.
• Right to object to certain processing activities based on legitimate interests.
• Right to withdraw consent for processing and request deletion where lawful.
• The right to port your personal data to another service provider, enabling data mobility across platforms.
• The right to restrict the processing of your personal data in specific circumstances as permitted by applicable law.
• The right to withdraw your consent to data processing at any time, without affecting the lawfulness of processing based on consent before withdrawal.
• The right to lodge a complaint with the relevant data protection authority if you believe your data privacy rights have been violated.

Request Your Data Privacy Rights

At OwnerOneLaw, we respect your privacy and provide mechanisms for you to exercise your rights regarding your personal information. Submit a request to access, correct, erase, or restrict your personal data by contacting our data protection officer.

contact@owneronelaw.vip

We will respond to your privacy rights requests within 30 calendar days from receipt, ensuring compliance and transparency throughout the process.