Privacy Policy

Last updated: 30 June 2026

1. Introduction

Icon Law LLC (“Icon Law”, “we”, “us” or “our”) is committed to protecting the privacy and security of the personal data entrusted to us. This Privacy Policy explains how we collect, use, disclose, process and safeguard your personal data, and describes your rights, in accordance with Singapore’s Personal Data Protection Act 2012 (the “PDPA”) and its subsidiary legislation.

By interacting with us, submitting information to us, accessing this website, or engaging our services, you acknowledge that you have read and understood this Privacy Policy and consent to the collection, use and disclosure of your personal data as described here.

2. What is Personal Data

“Personal data” means data, whether true or not, about an individual who can be identified from that data, or from that data and other information to which we have or are likely to have access. This may include information such as your name, contact details and other information described below.

3. Personal Data We Collect

Depending on your relationship with us, we may collect the following categories of personal data:

• Identity and contact data — name, job title, organisation, postal address, email address and telephone number.
• Client and matter data — information you provide when seeking or receiving legal advice, including information necessary for client due diligence, know-your-client (KYC), anti-money laundering and conflict-of-interest checks.
• Financial and billing data — billing details, payment information and records of transactions with us.
• Recruitment data — where you apply for a role with us, your CV, qualifications, employment history and references.
• Website and technical data — IP address, browser type, device information, pages viewed and other usage data collected automatically through cookies and similar technologies (see Section 8).
• Communications — the content of enquiries, correspondence and messages you send to us.

Where you provide us with personal data relating to a third party (for example, your colleagues, directors, shareholders or family members), you represent and warrant that you have obtained that individual’s consent for us to collect, use and disclose their personal data in accordance with this Privacy Policy.

4. How We Collect Personal Data

• Directly from you — when you enquire about or engage our services, complete a form on our website, correspond with us, or apply for a position.
• Automatically — when you visit our website, through cookies and similar technologies.
• From third parties — from your organisation, other parties to a matter, referral sources, public registries, regulators and screening or verification service providers.

5. Purposes for Which We Use Personal Data

We collect, use and disclose personal data for purposes reasonably required to provide our services and operate our practice, including to:

• provide legal advice and services, and carry out the matters for which we are engaged;
• establish and manage our client relationship, including client onboarding, KYC, anti-money laundering and conflict checks;
• process billing, payments and accounting;
• respond to your enquiries and communicate with you;
• assess and process job applications and recruitment;
• send you legal updates, event invitations and marketing communications where you have consented to receive them;
• maintain, operate, improve and secure our website;
• comply with applicable laws, regulations, court orders and the requirements of regulatory or law-enforcement authorities; and
• protect and enforce our legal rights and interests.

6. Consent

We will obtain your consent before collecting, using or disclosing your personal data, unless such collection, use or disclosure without consent is required or permitted under the PDPA or other applicable law. In certain circumstances, your consent may be deemed under the PDPA — for example, where you voluntarily provide your personal data for a purpose that is reasonably obvious.

You may withdraw your consent to our continued collection, use or disclosure of your personal data at any time by contacting our Data Protection Officer (see Section 13). Please note that withdrawing consent may mean that we are unable to continue providing certain services to you.

7. Disclosure of Personal Data

We may disclose your personal data, on a need-to-know basis and subject to appropriate safeguards, to:

• our partners, lawyers and staff involved in your matter;
• third-party service providers who support our operations, such as IT, hosting, document management, payment processing and professional advisers;
• other parties to a matter and their advisers, courts, tribunals, and counterparties, where necessary to carry out your instructions;
• regulatory, governmental or law-enforcement authorities where required or permitted by law; and
• agents engaged to perform client due diligence and screening.

We do not sell your personal data to third parties.

8. Cookies and Website Analytics

Our website uses cookies and similar technologies to enable core functionality, remember your preferences, and understand how the site is used so that we can improve it. You can set your browser to refuse some or all cookies, or to alert you when cookies are being sent; however, some parts of the website may not function properly if you do so.

9. Transfer of Personal Data Outside Singapore

Where we transfer personal data outside Singapore — for example to service providers hosting data overseas — we will take reasonable steps to ensure that the receiving party is bound by legally enforceable obligations to provide a standard of protection comparable to that under the PDPA.

10. Protection of Personal Data

We implement reasonable administrative, technical and physical measures to protect personal data in our possession or under our control against unauthorised access, collection, use, disclosure, copying, modification, disposal or similar risks. While we strive to protect your personal data, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

11. Accuracy and Retention

We make reasonable efforts to ensure that personal data we collect is accurate and complete. Please inform us of any changes to your personal data so that our records remain up to date. We retain personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required to satisfy legal, regulatory, professional or accounting obligations, after which it will be securely disposed of or anonymised.

12. Your Rights — Access and Correction

Subject to the PDPA, you may request access to the personal data we hold about you and information about how it has been used or disclosed, and you may request correction of any error or omission. We may charge a reasonable fee for processing an access request and will inform you in advance. To make a request, please contact our Data Protection Officer using the details below. We may need to verify your identity before responding.

13. Data Protection Officer

If you have any questions, feedback or complaints about this Privacy Policy or how we handle your personal data, or if you wish to make an access, correction or consent-withdrawal request, please contact our Data Protection Officer:

14. Complaints

If you are not satisfied with our response, you may lodge a complaint with the Personal Data Protection Commission of Singapore (PDPC) at www.pdpc.gov.sg.

15. Third-Party Links

Our website may contain links to third-party websites. This Privacy Policy does not apply to those websites, and we are not responsible for their privacy practices. We encourage you to review the privacy policies of any third-party sites you visit.

16. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. The updated version will be posted on this page with a revised “Last updated” date. Your continued use of our website or services after any update constitutes your acknowledgement of the revised Privacy Policy.

17. Contact Us

For general enquiries, you may contact us at enquiry@iconlaw.sg.

This Privacy Policy is provided for general information and does not constitute legal advice.