Privacy Policy

Angsana Advisory ("we", "us", "our") is committed to handling your personal data with care and transparency. This Privacy Policy describes how we collect, use, disclose, and protect information you provide when you interact with our website or engage our advisory services.

We operate in compliance with the Personal Data Protection Act 2012 (PDPA) of Singapore. By accessing our website or submitting an enquiry, you acknowledge this policy.

For privacy-related enquiries, please contact us at [email protected].

We may collect the following categories of personal data:

• Contact details — name, email address, and telephone number submitted via our contact form.
• Enquiry content — the description of your matter or situation as provided in message fields.
• Technical data — browser type, IP address, pages visited, and session duration collected via analytics tools.
• Cookie preferences — your consent choices stored locally in your browser.

We collect only what is reasonably necessary for the purpose of responding to your enquiry and improving the quality of our website.

• Contact forms on our website when you submit an enquiry.
• Direct correspondence by email or telephone.
• Automatically via cookies and analytics scripts when you browse our website (where consent is given).
• From documents or information you voluntarily share in the course of an advisory engagement.

Under the PDPA, we process personal data on the following bases:

• Consent — where you have submitted your details through our contact form or opted in to communications.
• Contractual necessity — where data is required to carry out an advisory engagement you have requested.
• Legitimate interests — for the improvement of our website and service quality, balanced against your privacy rights.
• Legal obligation — where we are required to retain or disclose data under applicable Singapore law.

• To respond to your enquiry and provide the advisory services you have requested.
• To communicate updates relevant to your matter or to our services.
• To analyse and improve how our website functions and how our content is presented.
• To comply with our legal and regulatory obligations as an advisory firm operating in Singapore.
• To maintain records of our engagements for professional and administrative purposes.

We do not sell, rent, or trade your personal data to any third party for commercial marketing purposes.

We may share your personal data with the following categories of recipients, where necessary:

• Technical experts and consultants — engaged to support the legal and engineering analysis of your matter (e.g., quantity surveyors, delay analysts), under confidentiality agreements.
• Website service providers — including hosting, analytics, and form processing platforms that operate on our behalf under data processing agreements.
• Regulatory or legal authorities — where we are required to disclose information by law, court order, or regulatory directive.

Any transfer of personal data outside Singapore, where required, is conducted in accordance with Schedule 1 of the PDPA.

We retain personal data only for as long as necessary to fulfil the purpose for which it was collected:

• Enquiry records — retained for up to 12 months from last contact, unless an engagement proceeds.
• Engagement records — retained for 7 years following the conclusion of the advisory matter, in line with standard professional practice.
• Analytics data — aggregated and anonymised data may be retained for up to 26 months.

Upon expiry of the retention period, personal data is securely deleted or anonymised.

We implement appropriate technical and organisational measures to protect your data against unauthorised access, loss, or disclosure, including:

• Encrypted transmission of data via TLS/HTTPS protocols.
• Access to personal data restricted to authorised personnel on a need-to-know basis.
• Secure document handling procedures within our advisory practice.
• Regular review of data handling practices against PDPA obligations.

In the event of a data breach that is likely to result in significant harm, we will notify the Personal Data Protection Commission (PDPC) and affected individuals in accordance with the PDPA's mandatory breach notification requirements.

Our website uses cookies to support basic functionality and, where you have consented, to collect analytics data. Cookies do not identify you personally without additional information.

You may manage your cookie preferences at any time via our Cookie Policy page. Withdrawing consent for non-essential cookies does not affect your ability to use the website.

Under the PDPA, you have the right to:

• Access personal data we hold about you and request information about how it is being used.
• Correction of any personal data that is inaccurate or incomplete.
• Withdrawal of consent for processing that is based on consent, without affecting the lawfulness of prior processing.
• Erasure of personal data that is no longer necessary for the purpose for which it was collected, subject to our legal retention obligations.
• Lodge a complaint with the Personal Data Protection Commission (PDPC) at pdpc.gov.sg if you believe your rights have not been respected.

To exercise any of these rights, please write to us at [email protected]. We will respond within 10 business days.

Our website may contain links to external websites, including government portals, legal resources, and professional body directories. We are not responsible for the content or privacy practices of those sites. We encourage you to review the privacy policies of any external site you visit.

Our advisory services are directed at businesses and individuals aged 18 and above. We do not knowingly collect personal data from persons under 18. If you believe a minor has submitted personal data through our website, please contact us so we can delete it promptly.

We may update this Privacy Policy from time to time to reflect changes in our practices or legal obligations. When we do, we will revise the "Last Updated" date at the top of this page. Continued use of our website following any update constitutes your acknowledgement of the revised policy.