Privacy Policy

This policy covers personal data we collect through this website, when you book a consult or contact us, and in the course of providing our services to clients. It does not cover the practices of third-party sites we link to.

Data you give us directly: your name, email, phone number, company, and the details of your enquiry when you fill in a contact or booking form. Data collected automatically: device and browser type, pages viewed, referring pages, and approximate location, gathered through our analytics tool (PostHog). This runs by default and you can switch it off from our Cookie Policy, after which the site runs cookieless and this data is not collected. Data collected during an engagement: whatever information a matter requires, collected directly from you or from sources you authorise.

We use personal data to:

• Respond to enquiries and schedule consultations
• Deliver, administer, and bill for our services
• Operate, secure, and improve this website
• Send updates you have opted in to receive
• Meet our legal, regulatory, and professional obligations

We use PostHog, a privacy-conscious product analytics tool, to understand how the site is used and to improve it. Analytics data for this site is hosted in the European Union. Analytics is on by default, on the basis of the notice in our Cookie Policy, and you can switch it off there at any time. Once switched off, PostHog runs cookieless and captures nothing. PostHog also provides session replay, which reconstructs anonymised page interactions so we can find and fix usability problems; every form field is masked, so we never see what you type into a contact or sign-in form. See our Cookie Policy for the full detail.

We do not sell personal data. We may share it with:

• Service providers who host or support our systems, each bound by confidentiality obligations: our website host and database provider (hosting and content storage), Calendly (when you book a consultation), Resend (delivering your enquiry to us by email), Asana (recording your enquiry so we can respond to and track it), and PostHog (website analytics)
• Specialists or other third parties where necessary to progress your engagement, with appropriate authorisation
• Regulators, courts, or authorities where required by law

Some of these providers process data outside Singapore. Any such transfer of personal data is made in accordance with the PDPA's data transfer requirements.

We keep personal data only for as long as it is needed for the purpose it was collected, including to meet legal, accounting, or professional retention requirements that apply to our practice, after which it is securely deleted or anonymised.

Subject to the PDPA, you may:

• Ask what personal data we hold about you and how it is used
• Request correction of inaccurate or incomplete data
• Withdraw consent to a particular use of your data, where consent was the basis for it

To exercise any of these rights, contact our Data Protection Officer using the details below. We may need to verify your identity before acting on a request.

We maintain administrative, technical, and physical safeguards designed to protect personal data against unauthorised access, use, or disclosure. No system is completely secure, and we work to keep these safeguards current.

We may update this policy as our practices or the law change. The effective date at the top reflects the latest revision. Material changes will be flagged on this page.

General questions can be sent to hello@lduasia.com. A request under the PDPA, or any question about this policy specifically, can be directed to our Data Protection Officer at privacy@lduasia.com, or through our contact page.