Privacy
Privacy Policy.
How TrustLife Legal handles personal data under the PDPA.
This Privacy Policy explains how TrustLife Legal Pte. Ltd. ("TrustLife", "we", "us", "our") collects, uses, discloses, and protects personal data when you visit trustlife.life, contact us, or engage our legal services. We comply with the Personal Data Protection Act 2012 (No. 26 of 2012) of Singapore ("PDPA") and applicable subsidiary legislation.
Data controller: TrustLife Legal Pte. Ltd., UEN 202764592M, 12 Marina View, #33-04 Asia Square Tower 2, Singapore 018961. General enquiries: [email protected]. Privacy-specific enquiries: [email protected]. Telephone: +65 6221 6058.
Effective date: 24 July 2026. We may update this policy from time to time; the latest version is always published on this page with a revised effective date.
Personal data we collect
We may collect the following categories of personal data depending on how you interact with us:
- Identity and contact data: name, job title, company name, email address, telephone number, postal address, and identification documents where required for verification or regulatory compliance.
- Enquiry and matter data: information you provide in contact forms, emails, meetings, and document uploads relating to legal enquiries, estate planning, probate, and ongoing engagements — including details of assets, beneficiaries, family relationships, and existing wills or trusts.
- Technical data: IP address, browser type and version, device identifiers, operating system, pages viewed, time spent on pages, referral URLs, and cookie data (see our Cookie Policy).
- Communication data: records of correspondence, call notes, meeting minutes, and file notes prepared in connection with your matter.
- Billing data: billing address, payment records, bank details for refunds where applicable, and tax identifiers necessary for invoicing.
- Third-party data: information about beneficiaries, executors, trustees, or counterparties that you provide in connection with estate planning or probate matters, where you represent that you have authority to disclose such data.
We collect personal data directly from you, from your authorised representatives, from publicly available sources where relevant to a matter (such as land registry or corporate registry records), and automatically through website technologies where you have consented or where collection is necessary for our legitimate interests.
Purposes of collection and use
We use personal data for the following purposes:
- Responding to enquiries and scheduling intake meetings;
- Conducting conflict checks before accepting new matters;
- Providing legal services under engagement, including drafting wills and trusts, probate applications, corporate advisory, contract drafting, conveyancing, and compliance work;
- Managing client relationships, matter files, and document retention;
- Invoicing, payment processing, debt recovery, and accounting;
- Complying with legal and regulatory obligations, including anti-money laundering requirements, Law Society of Singapore rules, and court orders;
- Improving our website, security, and service quality through aggregated analytics where you have consented;
- Sending service-related communications where you are an existing client;
- Establishing, exercising, or defending legal claims;
- Maintaining professional indemnity insurance and managing firm risk.
We do not sell personal data. We do not use your data for lifestyle marketing, wellness programmes, cryptocurrency promotions, or unrelated third-party advertising.
Legal bases under the PDPA
Under the PDPA, we rely on one or more of the following bases:
- Consent: where you tick the PDPA consent box on our contact form or otherwise agree to collection for a specified purpose;
- Contractual necessity: where processing is necessary to perform a solicitor-client engagement or take pre-contractual steps at your request;
- Legal obligation: where we must retain records, conduct due diligence, or report to regulators, courts, or law enforcement;
- Legitimate interests: where processing is necessary for our business operations, website security, fraud prevention, or firm administration, balanced against your rights — provided such interests are not overridden by your data protection interests.
You may withdraw consent for marketing or non-essential cookies at any time by contacting [email protected]. Withdrawal does not affect processing already lawfully performed or processing necessary for ongoing legal services, regulatory retention, or litigation.
Disclosure to third parties
We may disclose personal data to:
- Co-counsel, barristers, and expert witnesses engaged on your matter with your knowledge;
- Foreign counsel coordinating on cross-border estate or probate matters;
- Courts, registries, and government agencies when filing probate applications, land transfers, or regulatory submissions;
- IT service providers hosting our email, document management, and website systems under confidentiality agreements;
- Accountants, auditors, and insurers for firm compliance and professional indemnity purposes;
- Regulators, courts, and law enforcement when required by law, court order, or to protect our legal rights;
- Successors in the event of a merger, acquisition, or restructuring of the firm, subject to equivalent data protection obligations.
Where personal data is transferred outside Singapore, we ensure that recipients provide a standard of protection comparable to that under the PDPA, through contractual clauses or other approved mechanisms.
Data retention
We retain personal data for as long as necessary to fulfil the purposes described above:
- Enquiry data: up to twenty-four months if no engagement follows, unless you request earlier deletion and no legal hold applies;
- Client matter files: minimum seven years after matter closure, or longer where required by Law Society guidance, limitation periods, or ongoing litigation;
- Will and trust originals: retained in secure storage for the duration of our records policy or until you request return;
- Website logs: up to twelve months unless required for security investigations;
- Cookie consent records: six months from the date of your choice, consistent with our cookie banner settings.
When retention periods expire, we securely delete or anonymise personal data unless further retention is required by law.
Security measures
We implement appropriate administrative, technical, and physical safeguards to protect personal data against unauthorised access, collection, use, disclosure, copying, modification, disposal, or similar risks. Measures include access controls on matter files, encrypted email where practicable, secure office storage for original documents, staff confidentiality obligations, and periodic review of IT systems.
No method of transmission over the internet is completely secure. While we strive to protect your personal data, we cannot guarantee absolute security of data submitted through our website contact form. For highly sensitive documents, we recommend delivery by hand or encrypted file transfer arranged at intake.
Your rights under the PDPA
Subject to exceptions under the PDPA, you have the right to:
- Request access to personal data we hold about you;
- Request correction of inaccurate or incomplete personal data;
- Withdraw consent for processing that relies on consent (without affecting prior lawful processing);
- Request information about how your personal data has been used or disclosed within the past year.
To exercise these rights, email [email protected] with sufficient detail to identify you and your request. We respond within thirty days unless an extension is permitted under the PDPA. We may charge a reasonable fee for manifestly unfounded or excessive requests.
If you are a beneficiary or third party named in a client's estate document, your access rights may be limited by solicitor-client privilege, the client's instructions, or other persons' privacy interests. We assess each request on its facts.
Children's data
Our website and services are directed at adults. We do not knowingly collect personal data from individuals under eighteen without parental or guardian involvement in an estate planning context. If you believe we have collected a minor's data in error, contact us at [email protected].
Data breach notification
In the event of a data breach that is likely to result in significant harm or affect a significant number of individuals, we will notify the Personal Data Protection Commission of Singapore and affected individuals as required under the PDPA and PDPC guidance. Our internal breach response procedure includes containment, assessment, notification, and remediation steps. Records of breaches and our response actions are maintained for regulatory review where required.
Marketing and service communications
We do not send lifestyle marketing, wellness promotions, or unrelated third-party offers. Where you are an existing client, we may contact you about matter updates, billing, regulatory changes affecting your estate structure, or firm announcements directly relevant to services you have engaged. You may opt out of non-essential firm newsletters by emailing [email protected]. Opting out of marketing does not affect communications necessary to perform an active engagement or comply with law.
Website analytics
We may use privacy-conscious analytics tools to understand aggregate website traffic — such as page views, referral sources, and device types — without building advertising profiles. Where analytics cookies are used, they are described in our Cookie Policy and, where required, activated only after consent. Analytics data is not linked to estate matter files unless you separately submit identifying information through our contact form.
Solicitor-client privilege and third-party requests
Personal data held in client matter files may be subject to legal professional privilege. We assess access, correction, and disclosure requests with regard to privilege, our duties to clients, and the rights of other individuals named in estate documents. We may decline to disclose privileged material to third parties unless required by court order or with appropriate client consent. This does not prevent you from accessing personal data we hold about you in your capacity as a client or enquirer, subject to applicable exceptions under the PDPA.
Automated decision-making
We do not use automated decision-making or profiling that produces legal or similarly significant effects without human review. Conflict checks and intake triage may use structured internal tools, but acceptance of matters and advice to clients always involve qualified solicitors exercising professional judgment.
Cross-border transfers
Our primary systems and matter files are maintained in Singapore. Where we engage foreign counsel, cloud providers, or expert witnesses outside Singapore, personal data may be transferred to jurisdictions with different data protection laws. In such cases we implement contractual safeguards, confidentiality obligations, and access controls designed to ensure a standard of protection comparable to the PDPA. Details of specific transfers relevant to your matter can be discussed at intake or upon request where we act for you.
Changes to this policy
We may update this Privacy Policy when our practices change, when we introduce new website features, or when law or PDPC guidance requires revision. The effective date at the top of this page indicates the latest version. Material changes affecting how we use personal data collected before the change will be communicated where required by law. Continued use of the website after an update constitutes acknowledgement of the revised policy for website interactions; active client matters remain governed by engagement terms and applicable professional obligations.
Contact and complaints
For privacy enquiries or to exercise your rights:
TrustLife Legal Pte. Ltd.
Data Protection Contact
Email: [email protected]
Address: 12 Marina View, #33-04 Asia Square Tower 2, Singapore 018961
If you are not satisfied with our response, you may lodge a complaint with the Personal Data Protection Commission of Singapore at www.pdpc.gov.sg.
Last updated: 24 July 2026