Privacy Policy

1. Introduction

Obiter ("we", "us", "our") is committed to protecting the personal data of individuals who interact with our services. This Privacy Policy explains how we collect, use, disclose and protect personal data in connection with our IP documentation tools, template products and administration engagement services.

This policy applies to personal data collected through our website at obiter.sbs, via our contact forms, during client engagements and in any written communications with us.

Our practices are governed by the Personal Data Protection Act 2012 of Singapore (PDPA). For questions about this policy, contact us at [email protected].

2. Data We Collect

We collect personal data that you provide directly to us:

• Name and job title (provided via contact form or engagement onboarding)
• Email address (required for correspondence and service delivery)
• Phone number (optional, provided at your discretion)
• Company name and sector (to contextualise service scope)
• Information shared during engagements about internal IP administration workflows

We also collect certain data automatically when you visit our website:

• IP address and browser type (via server logs)
• Pages visited and session duration (via analytics, with your consent)
• Cookie preferences (stored locally, see Section 5)

3. Legal Basis and Purpose of Processing

We process personal data for the following purposes and on the following legal bases under the PDPA:

• Service delivery: to fulfil template pack orders, conduct setup engagements and deliver annual programme sessions (contractual necessity)
• Communication: to respond to enquiries and provide updates relevant to your engagement (legitimate interest)
• Website operation: to maintain and improve our website (legitimate interest)
• Analytics: to understand how our website is used, where you have given cookie consent (consent)
• Legal compliance: to meet obligations under Singapore law

Data Retention

We retain personal data for as long as necessary to fulfil the purpose for which it was collected. Engagement-related records are retained for five years from engagement close. Enquiry records where no engagement followed are deleted after twelve months. Analytics data is retained for a maximum of twenty-four months.

4. Data Sharing and Third Parties

We do not sell personal data to third parties. We may share personal data in the following limited circumstances:

• With service providers who assist in operating our website or delivering services (e.g. email hosting), under data processing agreements
• With qualified IP practitioners when substantive matters are referred, only with your knowledge and to the extent necessary
• Where required by Singapore law or a valid legal process

We do not transfer personal data outside Singapore except where technically necessary (e.g. cloud hosting) and where adequate protections are in place.

5. Cookies

Our website uses cookies and similar technologies. We use:

• Essential cookies: required for basic website operation, always active
• Analytics cookies: help us understand how visitors use our site, active only with your consent
• Preference cookies: remember your cookie choices across visits

You can manage your cookie preferences at any time through our Cookie Policy page.

6. Data Protection Measures

We take reasonable technical and organisational measures to protect personal data against unauthorised access, loss or misuse. These include:

• TLS encryption for data transmitted via our website
• Access controls limiting personal data to staff with a need to access it
• Written confidentiality agreements covering engagement-related client data
• Deletion of client register data at engagement close unless retention is agreed
• Breach notification procedures aligned to PDPA requirements

7. Your Rights Under the PDPA

Under Singapore's Personal Data Protection Act 2012, you have the right to:

• Request access to personal data we hold about you
• Request correction of inaccurate or incomplete personal data
• Withdraw consent to data processing (where consent is the legal basis)
• Request that we stop using your personal data for direct marketing purposes
• Lodge a complaint with the Personal Data Protection Commission (PDPC) at pdpc.gov.sg

To exercise any of these rights, contact us at [email protected]. We will respond within thirty days.

8. Third-Party Links

Our website may contain links to external websites. We are not responsible for the privacy practices of those sites and encourage you to review their privacy policies independently.

9. Children's Privacy

Our services are intended for use by businesses and professionals. We do not knowingly collect personal data from individuals under the age of 18. If you believe we have inadvertently collected such data, please contact us and we will delete it promptly.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be noted on this page with a revised effective date. Continued use of our services after a change constitutes acceptance of the updated policy.

11. Contact — Data Controller

Data controller: Obiter

7 Straits View, #18-02, Singapore 018936

Tel: +65 6293 6814

[email protected]