Privacy Policy

This Privacy Policy explains how LawRush Pte. Ltd. (we, us, our) collects, uses, discloses and protects personal data when you visit lawrush.life, contact us, or engage our legal services. We comply with the Personal Data Protection Act 2012 (PDPA) of Singapore and applicable subsidiary legislation.

1. Data controller

LawRush Pte. Ltd.
15 Circular Road, #03-04, Singapore 049667
Email: [email protected]
Phone: +65 6931 4826

2. Personal data we collect

Depending on your interaction with us, we may collect:

• Identity and contact data: name, email address, phone number, company name, job title, billing address and UEN or registration numbers where relevant to corporate engagements.
• Enquiry and matter data: information you provide in contact forms, rush briefings, engagement letters and matter files, including contracts, correspondence, financial summaries and other documents you upload or share for legal review.
• Technical data: IP address, browser type, device identifiers, operating system, pages visited, time on page, referral URLs and error logs when you use our website.
• Cookie and preference data: cookie consent choices stored locally and, if consented, analytics identifiers and session replay metadata. See our Cookie Policy.
• Billing data: invoicing details, payment references and tax identifiers where you engage our services.
• Communications metadata: dates and subjects of emails and calls for record-keeping and conflict management.

We collect only data reasonably necessary for the purposes described. We do not knowingly collect personal data from children under 13. If you believe we have done so, contact us and we will delete it promptly.

3. How we collect personal data

We collect data when you submit our contact form, email or call us, meet us at our Circular Road office, engage us for legal services, correspond during active matters, subscribe to updates (if offered) or browse our website (via cookies and server logs where applicable). We may also receive data from your authorised representatives, co-founders or counterparties where relevant to a matter and properly instructed.

4. Purposes of collection, use and disclosure

We use personal data for purposes including:

• Responding to enquiries and rush briefings;
• Conducting conflict checks and client onboarding;
• Providing legal services under engagement letters;
• Managing billing, accounts and regulatory record-keeping;
• Complying with legal, tax and professional obligations;
• Improving website security and performance (with consent where required);
• Communicating service updates relevant to active engagements;
• Defending or pursuing legal claims where permitted;
• Internal training and quality review using anonymised data where possible.

We do not sell personal data. We may disclose data to professional indemnity insurers, IT service providers, cloud hosting partners, couriers, external counsel, accountants, translators and regulators where necessary for the above purposes and subject to confidentiality undertakings or contractual clauses comparable to PDPA standards.

5. Legal basis and consent

Under the PDPA, we rely on consent, contractual necessity, legal obligation and legitimate interests (where permitted) depending on context. Contact form submission requires explicit PDPA consent via checkbox. Separate consent may be requested for marketing communications. You may withdraw consent for marketing at any time by emailing [email protected]; withdrawal does not affect processing already performed or processing necessary for legal services you have engaged.

Where we rely on legitimate interests — for example website security logging — we balance our interests against your privacy rights and implement minimisation measures.

6. Cookies and analytics

We use strictly necessary cookies and localStorage for site operation and consent records. Analytics and preference cookies are used only with your consent via our cookie banner. We do not deploy advertising or cross-site tracking cookies. Details are in the Cookie Policy.

7. Retention

Enquiry records are retained up to twenty-four months unless an engagement follows, in which case enquiry data merges into the client file. Client matter files are retained per legal profession requirements and engagement terms — typically seven years after matter closure unless longer retention is required by law, limitation periods or active dispute. Billing records are retained per tax requirements. Cookie consent records are retained locally in your browser for six months. Server logs are rotated per our hosting provider schedule, generally within ninety days unless required for security investigation.

8. Security

We implement reasonable administrative, technical and physical safeguards including role-based access controls, encrypted transmission where supported, device policies for counsel laptops and staff confidentiality obligations under employment and professional rules. Matter documents are stored on access-controlled systems. No method of transmission over the internet is completely secure; we cannot guarantee absolute security. Report suspected breaches to [email protected] promptly.

9. Cross-border transfers

Our website may be hosted on infrastructure with servers outside Singapore. Where personal data is transferred overseas — for example to cloud backup or email routing — we ensure recipients provide a standard of protection comparable to the PDPA, including contractual clauses, vendor due diligence and transfer impact assessments where appropriate.

10. Your PDPA rights

Subject to exceptions under the PDPA, you may request access to, correction of, or withdrawal of consent relating to your personal data. You may also request information about how we have used or disclosed your data in the past year. Contact [email protected] with sufficient identity verification. We respond within thirty days where practicable. If we cannot accede to a request, we explain why. You may lodge a complaint with the Personal Data Protection Commission (PDPC) if unresolved.

11. Marketing communications

We do not send bulk marketing without consent. Service updates related to active engagements are not marketing for PDPA purposes. If we offer newsletters in future, you may opt out via unsubscribe links or by contacting us.

12. Automated decision-making

We do not make decisions with legal or similarly significant effects based solely on automated processing of your personal data. Technology may assist document organisation; counsel review decisions.

13. Third-party links

Our website may link to external sites such as the Law Society of Singapore or PDPC resources. We are not responsible for their privacy practices. Review their policies before providing personal data.

14. Data protection contact

For privacy enquiries, contact our data protection contact at [email protected] or write to LawRush Pte. Ltd., 15 Circular Road, #03-04, Singapore 049667. Include sufficient detail for us to locate your records.

15. Updates

We may update this policy to reflect legal or operational changes. Material updates will be posted here with a revised effective date. Continued use after updates constitutes acknowledgement where permitted by law. Last updated 21 July 2026.

16. Definitions

Personal data means data about an individual who can be identified from that data or from that data and other information to which we have access. Processing means collecting, using, disclosing, storing or otherwise handling personal data. Client matter file means records relating to an engagement letter and work performed under it.

17. Client confidentiality

Information shared after engagement confirmation is protected by legal professional privilege and confidentiality obligations where applicable. Website enquiries receive reasonable care but are not privileged until a relationship is confirmed. Do not send highly sensitive documents until we confirm secure transfer methods.

18. Breach notification

If a personal data breach likely to cause significant harm occurs, we will assess notification obligations under the PDPA and notify affected individuals and the PDPC where required. We maintain internal incident response procedures and review them periodically.

19. Data minimisation in practice

We ask for data relevant to your enquiry or matter only. Contact forms require name, email and message — phone is optional. Matter engagements may require additional identity or corporate data for conflict checks and billing. We delete or anonymise data that is no longer needed, subject to retention requirements above.

20. Contact

Data protection enquiries: [email protected] · LawRush Pte. Ltd., 15 Circular Road, #03-04, Singapore 049667 · +65 6931 4826 · Mon–Fri 09:00–18:00 SGT.

21. Access request process

To submit a PDPA access or correction request, email [email protected] with your full name, contact details, description of the data concerned and copies of identity documents sufficient for verification. We may ask follow-up questions to locate records across enquiry and matter systems. There is no fee for reasonable requests; excessive or repetitive requests may incur administrative charges permitted under the PDPA.

22. Sub-processors

We use reputable hosting, email and document management providers who process data on our instructions. Contracts require confidentiality, security measures and deletion on termination where applicable. A list of key sub-processor categories is available on request.

23. Accuracy of information you provide

You are responsible for the accuracy of personal data you supply. Inaccurate data may delay conflict checks, billing or matter work. Notify us promptly of changes to contact details during active engagements.

24. Public information

We may collect publicly available professional information — for example ACRA registry entries — for conflict checks and client verification. We combine it with your instructions only as needed for the stated purposes.

25. Questions

If anything in this policy is unclear, email [email protected] before submitting sensitive documents. We will explain how your data will be handled in plain language where possible. This policy was reviewed on 21 July 2026 and applies to lawrush.life.