Privacy

Privacy Policy

Last updated: 21 April 2026

Introduction

JCP Law LLC ("JCP Law", "we", "us", or "our") is committed to protecting your personal data. This policy explains how we collect, use, disclose, and protect personal data you share with us through our website (jcplaw.com.sg) and related online services, in line with Singapore's Personal Data Protection Act 2012 (PDPA).

What we collect

We collect personal data in three ways:

  • Enquiries. When you use our contact form or email us, we collect your name, email address, phone number, preferred contact method, the practice area you're enquiring about, and the contents of your message.
  • Payments. When you use our online payment page, we collect your name, email, an invoice or matter reference (if you provide one), and the amount. Your card details are entered directly on Stripe's secure payment page and never touch our servers.
  • Technical data. When you visit our website, we collect basic analytics through Google Analytics: pages visited, referrer, device type, approximate location (country or region), and a truncated IP address. IP addresses are anonymised.

How we use your data

We use the personal data you provide to:

  • respond to your enquiry and advise on legal matters;
  • provide legal services where you instruct us;
  • process payments of our fees;
  • understand how visitors use the website so we can improve it;
  • comply with our professional and regulatory obligations as a law firm.

Legal basis under the PDPA

  • Consent: you consent to us using your details to respond to your enquiry when you submit our contact form or email us.
  • Necessary for the provision of services: once we act for you, we process your data to carry out our legal engagement.
  • Legal obligation: we retain client and financial records for the periods required by the Legal Profession Act and other applicable laws.
  • Legitimate interest: aggregated website analytics to operate and improve our site, where this does not override your rights.

Who we share your data with

We share personal data only with a small number of trusted service providers, under written contracts that limit how they may use it:

  • Resend: delivers our transactional email (for example when you submit our contact form).
  • Stripe: processes online card payments.
  • Google Analytics: provides aggregated website usage data, with IPs anonymised.
  • Vercel: hosts the website.

We do not sell your data, and we do not share it with advertisers or data brokers.

Overseas transfers

Some of the service providers above are based outside Singapore (for example, Stripe, Google, Resend, and Vercel are headquartered in the United States with global infrastructure). When we transfer personal data overseas, we take steps to ensure it is protected to a standard comparable to the PDPA, including through the providers' contractual commitments and their compliance with international frameworks such as ISO 27001 and SOC 2.

How long we keep your data

  • Enquiries that do not lead to an engagement: up to 12 months, after which we delete them.
  • Client files: for the periods required by the Legal Profession Act and Law Society rules (typically six years after the matter concludes), or longer if you have given us documents for safekeeping.
  • Financial and payment records: as required by the Income Tax Act and other applicable laws (typically five years).
  • Website analytics: Google Analytics data is retained at the default period of 14 months.

Your rights

Under the PDPA, you have the right to:

  • access the personal data we hold about you;
  • correct any data that is inaccurate or incomplete;
  • withdraw consent to us processing your data, where we are relying on your consent (this may mean we can no longer act for you).

To exercise any of these rights, email us at hello@jcplaw.com.sg. We aim to respond within 30 days. In some cases we may still need to retain data to meet our legal and professional obligations.

Cookies

Our website uses a small number of cookies:

  • Essential cookies: set by our hosting provider and required for the site to function and remain secure.
  • Analytics cookies: set by Google Analytics to understand aggregate site usage. IPs are anonymised and we do not use Google Analytics for advertising.

You can disable cookies in your browser settings. If you do, parts of the site may not work as expected.

Security

We use industry-standard technical and organisational measures to protect personal data from unauthorised access, disclosure, alteration, or destruction, including encryption in transit (HTTPS everywhere on this site), access controls, and secure third-party processors.

Contact

If you have any questions about this policy or would like to exercise any of your rights, please contact us:

JCP Law LLC
6 Battery Road, #11-01A
Singapore 049909
Email: hello@jcplaw.com.sg

Changes

We may update this policy from time to time. The date above reflects when it was last updated. Significant changes will be announced on our website.