Privacy Policy Overview

Definitions

This section provides plain-language definitions of terms used throughout the policy to assist understanding of data practices and responsibilities.

Purposes of Processing

We process personal data for specific, explicit and legitimate purposes necessary for service delivery and legal compliance. Processing is limited to what is relevant and proportionate.

• To provide legal advice, case management and document preparation for seniors
• To communicate with clients, schedule appointments and manage enquiries
• To verify identity and conduct due diligence required under applicable laws
• To manage billing, payments and related business administration
• To maintain client records and to respond to legal requests or regulatory obligations
• To protect systems and detect or prevent fraud and security incidents
• To carry out internal reporting, quality assurance and service improvement activities
• To send transactional communications related to the provision of services and important updates

Legal Basis for Processing

Processing is carried out under lawful bases applicable to the jurisdiction and context of the processing activity. Where relevant, we rely on contractual necessity, consent, legal obligations or legitimate interests.

• Performance of a contract or steps at the request of the individual prior to entering a contract
• Compliance with legal obligations such as anti-funds laundering checks and regulatory reporting
• Consent where required for optional services or marketing communications; individuals may withdraw consent at any time
• Legitimate interests when processing is necessary for secure and efficient service delivery, provided those interests are balanced against individual rights

Cookies and Tracking Technologies

Virelia uses cookies and similar technologies to operate the website, measure usage and provide a user-friendly experience. You can manage cookie preferences through your browser or our cookie controls where provided.

We use session cookies for essential site functions, persistent cookies for preferences and analytics cookies to understand site usage. Third-party cookies may be used by analytics providers.

Categories include strictly necessary cookies, performance and analytics cookies, and functional cookies. Marketing cookies are not used unless explicit consent is provided.

Most browsers allow you to block or delete cookies via settings. Blocking certain cookies may affect site functionality. For specific control, use the cookie preferences available on the site.

Detailed cookie information

Data Sharing and Disclosure

Virelia shares personal data only when necessary for service provision, with partners who provide services on our behalf, or when required by law or a competent authority.

• Service providers such as secure cloud hosting, payment processors and document management vendors
• Professional advisers and cooperating legal counsel engaged to support a matter
• Government agencies, courts or regulators where disclosure is required by law
• Third parties designated by the client, such as caregivers or authorised representatives with appropriate consent
• Analytics and technical service providers that assist in maintaining and improving the website
• Acquirers or advisors in the event of a business reorganisation, subject to confidentiality protections

International Transfers

Personal data may be transferred to service providers located outside Singapore for processing. Transfers are subject to contractual safeguards, data protection assessments or other measures to ensure an adequate level of protection.

Where transfers occur, Virelia implements safeguards such as standard contractual clauses, data processing agreements and access controls to protect personal data consistent with applicable law.

Data Retention

Virelia retains personal data only as long as necessary for the purposes outlined in this policy, for legal compliance, and for legitimate operational needs. Retention periods are regularly reviewed.

Account and client relationship records are retained for a period consistent with legal and regulatory obligations, typically several years after the conclusion of services depending on case type.

Communications and case notes are retained for the duration of the engagement and for a period afterwards to meet evidentiary or compliance needs.

System logs and analytics data are retained for operational and security purposes for a limited time, after which they are deleted or anonymised.

When data retention periods expire or data is no longer necessary, records are securely deleted or irreversibly anonymised in accordance with our data disposal procedures.

Your Rights

Subject to applicable law, individuals have rights with respect to their personal data and may submit requests to exercise those rights. Requests should include sufficient information to locate the relevant records.

• Right to access and obtain a copy of personal data held by Virelia, and to request corrections or updates where information is inaccurate
• Right to access: you may request a copy of personal data Virelia holds about you and information about its processing.
• Right to rectification: you may request correction of inaccurate or incomplete personal data.
• Right to erasure: in certain circumstances you may request deletion of personal data that is no longer necessary for its original purpose.
• Right to restriction of processing: you may request temporary restriction where you contest accuracy or object to processing.
• Right to data portability: where applicable, you may request a copy of personal data in a machine-readable format for transfer to another controller.
• Right to object: you may object to processing for direct marketing or processing based on legitimate interests, subject to applicable law.
• Right to withdraw consent: where processing is based on consent, you may withdraw consent at any time without affecting processing prior to withdrawal.

Exercising your privacy rights

To exercise any of the rights listed above, submit a written request to Virelia at our postal address or email. Include your name, contact details, a clear description of the requested action, and any information that will help us locate the relevant records. We may request additional information to verify your identity before processing the request to protect your privacy.

[email protected]

We aim to respond to valid requests within 30 days of receipt. Complex or large requests may require additional time; if so, we will notify you and explain the reason for any delay and the expected response timeframe.