Privacy Policy

1. Introduction

Jalan Advisory ("we", "us", "our") is committed to protecting the personal data of individuals who interact with our website and engage our services. This Privacy Policy explains how we collect, use, store, and protect personal data in accordance with Singapore's Personal Data Protection Act 2012 (as amended in 2021).

This policy applies to personal data collected through our website at https://jalanadvisoryes and through our service engagement process. If you have questions about this policy, please contact us at privacy@jalanadvisoryes.

2. Data Controller

Business Name: Jalan Advisory

Address: 9 Battery Road, #28-01, Straits Trading Building, Singapore 049910

Privacy Contact Email: privacy@jalanadvisoryes

As the data controller, Jalan Advisory determines the purposes and means by which personal data is processed.

3. Data We Collect

3.1 Information You Provide

• Name and contact details (email address, phone number) submitted via our contact form
• Business name and role, where provided
• Message content and engagement-related correspondence
• Documents and information shared as part of a service engagement

3.2 Information Collected Automatically

• IP address and browser type
• Pages visited and time spent on the site
• Referral source (where you came from before visiting our site)
• Cookie data (where consent has been given — see our Cookie Policy)

4. How We Use Your Data

We use personal data for the following purposes:

• Service delivery: To respond to enquiries, conduct service engagements, and communicate about matters relevant to your engagement.
• Business administration: For invoicing, record-keeping, and managing our client relationships.
• Website improvement: To understand how visitors use our website and improve the user experience (analytics cookies, where consented).
• Legal and compliance: To comply with applicable Singapore laws and regulatory requirements.

We do not use your personal data for marketing communications without your explicit consent. We do not sell personal data to third parties.

5. Legal Basis for Processing

We process personal data on the following bases under the PDPA:

• Consent: Where you have provided your data via our contact form or cookie consent.
• Contractual necessity: Where processing is necessary to fulfil a service engagement you have requested.
• Legitimate interests: For site analytics and improving our services, where this does not override your privacy rights.
• Legal obligation: Where processing is required to comply with Singapore law.

6. Data Retention

We retain personal data only for as long as necessary:

• Enquiry data (not resulting in an engagement): up to 12 months
• Engagement data (contracts, correspondence, documents): up to 7 years for legal and record-keeping purposes
• Website analytics data: up to 26 months (standard analytics retention)
• Cookie consent records: 12 months

After the applicable retention period, personal data is deleted or anonymised.

7. Data Sharing

We do not share your personal data with third parties except in the following circumstances:

• Service providers: We may share data with technology service providers (e.g., hosting, analytics) who process data on our behalf under appropriate data processing agreements.
• Legal requirements: We may disclose personal data if required by Singapore law, regulation, or a court order.
• Professional advisors: Where necessary for our own legal, accounting, or compliance purposes, under strict confidentiality obligations.

We do not share client engagement materials with any third party without prior written consent.

8. Data Security

We maintain appropriate technical and organisational measures to protect personal data against unauthorised access, loss, or disclosure. These include:

• Encrypted data transmission (HTTPS) across our website
• Access controls limiting data access to relevant personnel only
• Secure document handling practices for engagement materials
• Regular review of security practices

In the event of a data breach that is likely to result in significant harm to affected individuals, we will notify the Personal Data Protection Commission (PDPC) and affected individuals in accordance with the mandatory data breach notification requirements under the PDPA.

9. Cookies

Our website uses cookies to support its operation and to understand visitor behaviour. Please refer to our Cookie Policy for full details on the types of cookies we use, their purpose, and how you can manage your preferences.

10. Your Rights Under the PDPA

As a data subject under Singapore's PDPA, you have the following rights:

• Right to access: Request a copy of the personal data we hold about you.
• Right to correction: Request correction of inaccurate or incomplete personal data.
• Right to withdraw consent: Withdraw previously given consent to processing. Note that withdrawal does not affect prior processing carried out with consent.
• Right to lodge a complaint: You may lodge a complaint with Singapore's Personal Data Protection Commission (PDPC) if you believe your data rights have been violated. Contact the PDPC at pdpc.gov.sg.

To exercise any of these rights, contact us at privacy@jalanadvisoryes. We will respond within 30 days.

11. Third-Party Links

Our website may contain links to third-party websites. We are not responsible for the privacy practices of those sites. We encourage you to review the privacy policies of any external sites you visit.

12. Children's Privacy

Our services are intended for businesses and individuals aged 18 and above. We do not knowingly collect personal data from minors. If we become aware that a minor has submitted personal data, we will delete it promptly.

13. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last Updated" date at the top of this page. Continued use of our website following a policy change constitutes acceptance of the updated policy. For material changes, we will provide more prominent notice where appropriate.

14. Contact Us

For privacy-related enquiries, requests, or complaints:

• Email: privacy@jalanadvisoryes
• Post: Jalan Advisory, 9 Battery Road, #28-01, Straits Trading Building, Singapore 049910