Cheryl NgCriminal Defence Advocate

Legal

Privacy Policy

Effective 25 July 2026

Foxwood LLC (“Foxwood”, “the Firm”, “we”, “us” or “our”) is committed to protecting the personal data of visitors to our website at www.criminaldefence.sg (the “Website”) and of our clients and prospective clients, in accordance with the Personal Data Protection Act 2012 (“PDPA”) and other applicable laws of Singapore. This Privacy Policy explains what personal data we collect, how we use it, and your rights in relation to it.

1. Application of this Policy

1.1This Policy applies to personal data collected by us through the Website, including via our contact form, and through other means such as telephone calls, WhatsApp messages and emails sent to us in connection with an actual or potential engagement.

1.2This Policy should be read together with our Terms of Use. In particular, please note that submitting an enquiry through our Website does not create a solicitor–client relationship and may not attract legal professional privilege (see our Terms of Use).

2. What Personal Data We Collect

2.1We may collect the following categories of personal data:

  • (a)Contact and identification data, such as your name, phone number and email address;
  • (b)Enquiry information, such as the nature of your matter, the stage of your case, and the details of your enquiry that you choose to provide in the contact form or in correspondence with us;
  • (c)Communications data, being the content of any calls, WhatsApp messages, emails or other correspondence you send to us; and
  • (d)Technical and usage data, such as your IP address, browser type, device information and pages visited on the Website, collected through analytics tools.

2.2Given the nature of our practice, personal data you provide to us may include sensitive personal data, including information relating to actual or alleged criminal offences. We take particular care to handle such information with the confidentiality it requires, as further described in this Policy and our Terms of Use.

2.3You should avoid providing highly sensitive or privileged details through the contact form before a solicitor–client relationship has been established. Please refer to Clauses 3 and 4 of our Terms of Use.

3. How We Collect Your Personal Data

3.1We collect personal data:

  • (a)directly from you, when you complete our contact form, call us, message us on WhatsApp, or send us an email;
  • (b)automatically, when you browse the Website, through cookies and similar analytics technologies (see Clause 14 below); and
  • (c)from third parties, where relevant and permitted by law, such as where you are referred to us by another person, or where we are required to conduct identity verification or conflict checks.

4. Purposes of Collection, Use and Disclosure

4.1We collect, use and disclose your personal data for the following purposes:

  • (a)to respond to your enquiry and to communicate with you;
  • (b)to assess whether we are able and willing to act for you, including conducting conflict checks;
  • (c)where you become a client, to provide legal services to you, including all matters reasonably incidental thereto;
  • (d)to comply with our legal, regulatory and professional obligations, including under the Legal Profession Act 1966, the Legal Profession (Professional Conduct) Rules 2015, and the Legal Profession (Prevention of Money Laundering and Financing of Terrorism) Rules 2015, including client due diligence and record-keeping requirements;
  • (e)to maintain and improve the Website and our services, including through analytics; and
  • (f)for any other purpose reasonably related to the above, or for which you have given your consent.

4.2We will not use your personal data for direct marketing purposes unless you have given your consent, and you may withdraw such consent at any time.

5. Legal Basis and Consent

5.1By submitting the contact form on our Website, or otherwise voluntarily providing your personal data to us, you consent to our collection, use and disclosure of your personal data in accordance with this Policy.

5.2Where required, we will seek your explicit consent for specific purposes. Where you provide personal data on behalf of a third party (for example, a family member), you confirm that you have obtained that person’s consent to disclose their personal data to us for the purposes set out in this Policy.

5.3We may collect, use or disclose your personal data without consent where permitted or required under the PDPA or other applicable law, for example, where necessary for the defence of legal claims, to comply with a court order, or in connection with our professional and regulatory obligations.

6. Disclosure of Personal Data to Third Parties

6.1We do not sell or rent your personal data. We may disclose your personal data to:

  • (a)our service providers who assist us in operating the Website and delivering our services, such as our website hosting provider and email delivery service provider, who are only permitted to process your data for the purposes we specify and are bound by confidentiality obligations;
  • (b)our professional advisers, insurers, and other lawyers or experts we may need to engage in connection with your matter;
  • (c)courts, tribunals, regulators, law enforcement agencies, and other relevant authorities, where required or permitted by law; and
  • (d)any other party with your consent.

6.2We require our service providers to protect your personal data in a manner consistent with the PDPA.

7. Transfer of Personal Data Outside Singapore

7.1Some of our service providers (including our website hosting and email delivery service providers) may store or process personal data on servers located outside Singapore.

7.2Where we transfer personal data outside Singapore, we will take reasonable steps to ensure that the overseas recipient is bound by legally enforceable obligations to provide a standard of protection to the transferred personal data that is comparable to the protection under the PDPA, in accordance with section 26 of the PDPA.

8. Data Protection Officer

8.1We have appointed a Data Protection Officer (“DPO”) who is responsible for ensuring our compliance with the PDPA. If you have any questions, concerns or requests relating to your personal data or this Policy, you may contact our DPO at:

Data Protection Officer

hello@foxwood.sg

9. Retention of Personal Data

9.1We will retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, including for the purposes of satisfying any legal, regulatory, accounting or professional conduct requirements.

9.2Where you become a client, we will generally retain your file and personal data for a minimum period as required under applicable professional conduct rules and the limitation periods for legal claims in Singapore (generally at least six years from the conclusion of the matter), or such longer period as may be required by law or as is reasonably necessary for our legitimate business purposes.

9.3Where your personal data is no longer necessary for the purposes for which it was collected, we will cease to retain it, or will anonymise it, as soon as is reasonably practicable.

10. Protection of Personal Data

10.1We take reasonable technical, administrative and physical measures to protect your personal data against unauthorised access, collection, use, disclosure, copying, modification, disposal or similar risks, including the use of encryption (such as HTTPS) for data transmitted through the Website, and restricting access to personal data to those who need it for the purposes described in this Policy.

10.2While we take reasonable steps to protect your personal data, no method of transmission over the internet or method of electronic storage is completely secure, and we cannot guarantee absolute security.

11. Access to and Correction of Personal Data

11.1Subject to applicable exceptions under the PDPA, you have the right to:

  • (a)request access to the personal data we hold about you; and
  • (b)request correction of any error or omission in your personal data.

11.2We may charge a reasonable fee for processing an access request, in accordance with the PDPA. We will inform you of any applicable fee before processing your request.

11.3We may decline to provide access to, or correct, personal data in circumstances permitted or required under the PDPA, such as where the request is frivolous, where providing access would reveal confidential commercial information, or where doing so would breach legal professional privilege or another party’s confidentiality.

11.4To make an access or correction request, please contact our DPO using the details set out in Clause 8.

12. Withdrawing Your Consent

12.1You may withdraw your consent to our collection, use or disclosure of your personal data, in whole or in part, by giving us reasonable notice in writing at the contact details set out in Clause 8.

12.2Please note that if you withdraw your consent, we may not be able to continue to respond to your enquiry, provide legal services to you, or continue to act for you, depending on the nature and extent of the consent withdrawn. Withdrawal of consent will not affect our right to continue to collect, use or disclose personal data where permitted or required by law, including to comply with our professional obligations.

13. Data Breach Notification

13.1In the event of a data breach involving your personal data that is likely to result in significant harm to you, or that is of a significant scale, we will notify the Personal Data Protection Commission and affected individuals as required under the PDPA.

14. Cookies and Analytics

14.1The Website uses privacy-conscious web analytics (currently, Vercel Web Analytics) to help us understand how visitors use the Website, such as the pages visited and general traffic patterns. This is used in aggregate form to improve the Website and does not involve cross-site tracking or the sale of your data.

14.2If we use advertising services (such as Google Ads) to promote our services, those services may use cookies or similar technologies to measure the effectiveness of our advertising and to track conversions, such as when a visitor completes our contact form. You may control or disable cookies through your browser settings, although this may affect the functionality of the Website.

15. Third-Party Links

15.1The Website may contain links to third-party websites. This Policy does not apply to such third-party websites, and we encourage you to review the privacy policies of any third-party websites you visit.

16. Changes to This Policy

16.1We may update this Policy from time to time to reflect changes in our practices or for other operational, legal or regulatory reasons. The updated Policy will be posted on the Website with a revised “Last updated” date. We encourage you to review this Policy periodically.

17. Contact Us

17.1If you have any questions about this Privacy Policy or our data protection practices, please contact:

Data Protection Officer

hello@foxwood.sg

Revised 25 July 2026