Privacy Policy

1. Introduction

Durian Advisory ("we", "us", "our") is committed to the responsible handling of personal data in accordance with Singapore's Personal Data Protection Act 2012 (PDPA). This Privacy Policy explains what personal data we collect, how we use it, who we share it with, and what rights you have in relation to your personal data.

This policy applies to personal data collected through our website at durianad.biz, through enquiry forms, and through the provision of advisory services. For questions about this policy, contact us at [email protected].

2. Data Collection

2.1 Information you provide directly

• Name and contact details (email address, phone number) submitted through the website contact form
• Organisation name and role provided in the context of an enquiry
• Communication content within messages submitted to us
• Personal data provided during the course of an engagement (names of directors, officers, and other relevant individuals)

2.2 Information collected automatically

• Website usage data through cookies and similar technologies (see our Cookie Policy for full details)
• Technical data including browser type, IP address, and pages visited, collected for security and analytics purposes

2.3 Legal basis for processing

We process personal data on the basis of consent (for marketing communications and cookies), contractual necessity (for engagement delivery), and legitimate interests (for security, service improvement, and professional communications).

3. How We Use Personal Data

• To respond to enquiries and assess how we may assist
• To deliver advisory services under engagement agreements
• To prepare and submit statutory filings and regulatory notifications where authorised
• To maintain engagement records in accordance with professional obligations
• To send relevant communications about services (where consent has been given)
• To improve website functionality and user experience through analytics
• To comply with applicable legal and regulatory obligations

We do not sell personal data to third parties. We do not use personal data for automated decision-making or profiling.

4. Data Sharing

Personal data is shared only in the following circumstances:

• With ACRA, MAS, or other Singapore regulatory bodies where required by the scope of a filing engagement and with client authorisation
• With professional service providers assisting in the delivery of engagements (bound by confidentiality and PDPA-compliant data handling obligations)
• With website service providers and analytics platforms operating under data processing agreements
• Where disclosure is required by Singapore law, court order, or regulatory authority

5. Data Protection Measures

• Access to client data is restricted to advisers with a direct professional need for each engagement
• Electronic files are stored on encrypted, access-controlled systems
• Physical documents containing personal data are secured and disposed of securely when no longer required
• Website data transmission is protected via TLS encryption (HTTPS)
• In the event of a data breach affecting personal data, affected individuals will be notified in accordance with PDPA obligations

6. Data Retention

Personal data is retained for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law. Engagement records are typically retained for seven years following completion of an engagement, consistent with professional practice standards. Website enquiry data where no engagement follows is retained for twelve months.

7. Cookies

Our website uses cookies to support functionality and understand how visitors use the site. Details of the cookies we use and how to manage your preferences are available in our Cookie Policy.

8. Your Rights Under the PDPA

Under Singapore's Personal Data Protection Act, you have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate or incomplete personal data
• Withdraw consent to the use of your personal data for certain purposes
• Request that we cease or restrict use of your personal data in certain circumstances
• Lodge a complaint with the Personal Data Protection Commission of Singapore (PDPC)

To exercise any of these rights, contact us at [email protected]. We will respond within ten business days.

9. Third-Party Links

Our website may contain links to external websites. We are not responsible for the privacy practices of third-party sites and encourage you to review their privacy policies independently.

10. Children's Privacy

Our services are directed at businesses and individuals aged 18 or over. We do not knowingly collect personal data from persons under 18. If you believe we have inadvertently collected such data, contact us at [email protected] and we will take appropriate steps.

11. Policy Updates

This policy may be updated to reflect changes in our practices or applicable law. Material changes will be communicated through a notice on our website. Continued use of our website following such notice constitutes acceptance of the updated policy.

12. Contact

For all privacy-related enquiries, including data access and correction requests:

• Email: [email protected]
• Address: Durian Advisory, 77 Robinson Road, #20-03, Robinson 77, Singapore 068896

For complaints that have not been resolved to your satisfaction, you may contact the Personal Data Protection Commission at www.pdpc.gov.sg.