Privacy Policy — Rivvex Legal Services

Rivvex is committed to handling personal data with care, transparency, and in compliance with the Personal Data Protection Act 2012 (PDPA) of Singapore. This policy explains what data we collect, why we collect it, how it is used, and the rights you hold in relation to it.

If you have questions about this policy or about how your data is handled, please contact us at [email protected].

1. Who We Are

Rivvex is a legal advisory practice registered in Singapore, operating from 1 Raffles Place, #44-02, Singapore 048616. We act as the data controller for personal data collected through our website and in connection with our legal advisory services.

2. Data We Collect

We may collect the following categories of personal data:

Identification information — name, email address, phone number
Communication data — messages submitted through our contact form or sent by email
Usage data — pages visited, browser type, referring URLs (via analytics cookies, where consented)
Matter-related data — information you share with us in connection with a legal engagement (subject to solicitor-client privilege)

3. How We Collect Data

Through our website contact form
Via email or telephone enquiries
During the course of a legal engagement
Through cookies and analytics tools (where consent is given)

4. Legal Basis for Processing

We process personal data on the following grounds:

Consent — for analytics cookies and marketing communications
Contract performance — where data is necessary to deliver the services you have engaged us for
Legitimate interests — for responding to enquiries and managing our practice operations
Legal obligation — where processing is required under Singapore law, including anti-money laundering obligations

5. How We Use Your Data

To respond to enquiries and schedule consultations
To deliver legal advisory services
To comply with applicable legal and regulatory obligations
To improve the functionality and content of our website (analytics only where consented)
To communicate updates relevant to your matter

6. Data Sharing

We do not sell, rent, or trade personal data. We may share data in the following limited circumstances:

With third parties necessary to deliver a legal engagement (such as barristers, courts, or counterparty solicitors) — only with your knowledge
With service providers who process data on our behalf (such as secure cloud storage or analytics platforms) under data processing agreements
Where required by law, court order, or regulatory obligation

7. Data Retention

We retain personal data for as long as is necessary for the purposes for which it was collected and in accordance with our legal obligations. For legal engagement records, we typically retain data for seven years following completion of a matter, in line with professional practice standards. Enquiry data from non-converted contacts is retained for up to 12 months.

8. Data Protection Measures

Encrypted storage and secure access controls
Role-based access — only those who need data for their work can access it
Regular review of third-party data processors
Breach notification procedures consistent with PDPC requirements

9. Cookies

We use cookies to operate and improve our website. Essential cookies are required for core functionality. Analytics and marketing cookies are optional and only placed with your consent. Full details are available in our Cookie Policy.

10. Your Rights

Under the PDPA, you have the right to:

Access personal data we hold about you
Correct inaccurate or incomplete data
Withdraw consent to data processing where consent is the basis for processing
Request deletion of data (subject to legal retention requirements)
Lodge a complaint with the Personal Data Protection Commission (PDPC) of Singapore

To exercise any of these rights, contact us at [email protected]. We will respond within 10 business days.

11. Third-Party Links

Our website may contain links to external sites. Rivvex is not responsible for the privacy practices of third-party websites. We encourage you to review their policies before sharing personal data.

12. Children's Privacy

Our services are intended for individuals aged 18 and over. We do not knowingly collect personal data from minors. If you believe a minor has submitted data to us, please contact us and we will address it promptly.

13. Changes to This Policy

We may update this policy from time to time. The updated version will be published on this page with a revised date. Continued use of our website following any update constitutes acceptance of the revised policy.

14. Contact

For all data-related enquiries:
Email: [email protected]
Address: 1 Raffles Place, #44-02, Singapore 048616