TRW & Co · Privacy notice
Privacy Notice
This privacy notice explains how TRW & Co's Singapore office handles personal data under Singapore's Personal Data Protection Act 2012: what we collect through our website, email and telephone, why we use it, who we share it with, how long we keep it, and how you can access, correct or withdraw consent.
Key pointContacting us through the website is treated as consent to use your details to respond, but please do not send sensitive or third-party information until we confirm that we can act for you.
At a glance
Limited collection
We collect contact details and message content you send us, application documents, and aggregate website analytics data.
No sale of data
We disclose personal data only to our network offices, service providers, advisers and authorities where needed or required by law.
Overseas transfers protected
Data may be accessed from other TRW & Co offices; we require protection comparable to the PDPA standard.
Access within 30 days
We respond to access requests as soon as reasonably possible and tell you in writing if we need longer than 30 days.
DPO contact
Email our Data Protection Officer at info@trw.co to access or correct data, withdraw consent or raise a concern.
Swipe or scroll →
About this privacy notice
This privacy notice explains how TRW & Co’s Singapore office (“TRW & Co”, “we”, “us”) collects, uses, discloses and looks after personal data in connection with the website sg.trw.co and enquiries made through it. It is written to meet our obligations under Singapore’s Personal Data Protection Act 2012 (PDPA), which the Personal Data Protection Commission (PDPC) administers.
“Personal data” means data, whether true or not, about an individual who can be identified from that data, or from that data together with other information we hold or are likely to have access to. Where we act for a client, personal data processed on that matter is also governed by our engagement terms and our professional duties of confidentiality.
We collect what you give us when you contact us, plus limited website analytics. We use it to respond to you, check conflicts, provide services and run the website. We do not sell personal data. You can ask to see or correct your data, or withdraw consent, by emailing our Data Protection Officer at info@trw.co.
What personal data we collect
We collect only what we need for the purposes set out in this privacy notice.
| Source | Personal data |
|---|---|
| Contact forms on the website | Name, email address, telephone number, organisation, role, and the content of your message |
| Email and correspondence | Your contact details, email content and attachments, and any information you choose to include |
| Telephone calls | Your name, number and notes of the call |
| Applications for internships or roles | CV, transcript, cover note and any other information you send in support |
| Analytics cookies and server logs | IP address, device and browser type, pages visited, referring page and approximate location derived from your IP address |
| Clients and their counterparties | Identification and matter information needed for conflict checks, client due diligence and the work itself |
Please do not send sensitive personal data, such as health, financial or identity document details, or information about other people, through the website or by email before we have confirmed that we can act for you. If you give us personal data about another person, please make sure you are entitled to do so.
Why we use personal data
We use personal data for the following purposes, which we consider a reasonable person would think appropriate in the circumstances:
- responding to enquiries made through the website, by email or by telephone;
- carrying out conflict checks before deciding whether we can act;
- meeting legal and regulatory obligations, including client identification and anti-money laundering checks where they apply;
- providing legal services, managing matters, billing and keeping records;
- considering applications for internships and other roles;
- operating, securing and improving the website, including understanding how pages are used;
- sending insight or event information, but only where you have asked for it or consented; and
- establishing, exercising or defending legal claims.
If we wish to use personal data for a new purpose, we will tell you and, where the PDPA requires, ask for your consent first.
Consent and withdrawal of consent
The PDPA generally requires consent for the collection, use and disclosure of personal data, unless an exception applies. When you contact us voluntarily for a purpose, such as making an enquiry, you are treated as consenting to our use of the data you provide for that purpose. Some processing, such as conflict checks and record-keeping required by law, may rely on exceptions under the PDPA.
How to withdraw consent
You may withdraw consent at any time by giving reasonable notice to our Data Protection Officer at info@trw.co. We will tell you the likely consequences of withdrawal, for example that we may not be able to continue responding to an enquiry or acting on a matter, and will then stop collecting, using or disclosing the data for the relevant purpose unless the PDPA or other law permits or requires us to continue. Withdrawal does not affect our ability to keep records we must retain by law.
Marketing communications
We send updates about our insight or events only to people who have asked for them or agreed to receive them. Each communication will explain how to unsubscribe, and you can also email us. We do not send marketing messages to Singapore telephone numbers without the consent required under the PDPA’s Do Not Call provisions.
Who we disclose personal data to
We do not sell personal data. We disclose it only where needed for the purposes above, to:
- other offices and personnel within the TRW & Co network who work on your enquiry or matter, or who support firm-wide functions such as conflict checks and IT;
- service providers who host the website, provide email, IT, analytics, document management and storage services to us, under contracts that require them to protect the data and use it only on our instructions;
- co-counsel, Singapore-qualified counsel, experts, translators or other professionals instructed on a matter, where needed for the work and with your agreement as client;
- our professional advisers, auditors and insurers; and
- courts, regulators, law enforcement or other authorities where the law requires or permits.
Transfers outside Singapore
TRW & Co is an international firm headquartered in Dhaka, with offices and sites in other jurisdictions, and some of our service providers store data outside Singapore. Personal data may therefore be transferred to, stored in or accessed from places such as Bangladesh, the United Kingdom, the United Arab Emirates and other jurisdictions where we or our service providers operate.
When we transfer personal data outside Singapore, we take appropriate steps, as the PDPA requires, to ensure that the recipient is bound by legally enforceable obligations to provide a standard of protection comparable to that under the PDPA. These may include contractual commitments with service providers and internal firm policies that bind all offices.
Retention and protection
How long we keep personal data
We keep personal data only for as long as it serves the purpose for which it was collected, or as long as we need it for legal or business purposes, such as record-keeping, limitation periods for claims or regulatory requirements. Matter files are kept for the periods required by our professional and legal obligations. Enquiries that do not lead to an engagement, and unsuccessful applications, are kept for a shorter period. When personal data is no longer needed, we delete it, destroy it or anonymise it so that it can no longer identify you.
How we protect personal data
We make reasonable security arrangements to protect personal data against unauthorised access, collection, use, disclosure, copying, modification or disposal, and against loss of storage media. These include access controls limited to people who need the data, secure email and storage services, and confidentiality obligations on staff and service providers. No method of transmission over the internet is completely secure, so please consider this before sending information to us by email.
If a data breach happens
If we suffer a data breach, we will assess it promptly. Where the breach is notifiable under the PDPA, for example because it is likely to result in significant harm to affected individuals or is of significant scale, we will notify the PDPC and, where required, the affected individuals, within the timeframes the PDPA sets.
Access and correction requests
Under the PDPA you may ask us for a copy of personal data about you that we hold, and for information about how it has been used or disclosed in the past year. You may also ask us to correct an error or omission in your personal data.
- Send your request. Email our Data Protection Officer at info@trw.co, saying what data or correction you are asking about.
- Verify your identity. We will ask for enough information to confirm who you are, so that we do not disclose data to the wrong person.
- Fees. We may charge a reasonable fee for an access request to cover our costs, and will give you a written estimate before proceeding. We do not charge for correction requests.
- Our response. We will respond as soon as reasonably possible. If we cannot respond within 30 days of receiving the request, we will tell you in writing within that period when we expect to respond, in line with PDPC guidance.
- Exceptions. The PDPA contains exceptions, for example for data subject to legal privilege or where disclosure would reveal personal data about another person. If we withhold information, we will explain why where we are able to.
Cookies and analytics
The website uses cookies, small files stored on your device, to make the site work and to understand how visitors use it. Strictly necessary cookies support basic functions such as security and page loading. Analytics cookies collect information such as pages viewed and time spent so that we can improve the content; we use this information in aggregate and do not use it to identify you personally.
You can block or delete cookies through your browser settings. Blocking analytics cookies will not stop the website working. Where the website asks for your choice about cookies, you can change it at any time. We do not use cookies to show you advertising.
Data Protection Officer, complaints and updates
We have appointed a Data Protection Officer to oversee compliance with the PDPA. Contact the Data Protection Officer at info@trw.co, by telephone on +880 1779 127165, or by post at TRW & Co, 21A Duxton Hill, Singapore 089604, marked “Data Protection Officer”.
If you are unhappy with how we have handled your personal data, please contact us first so that we can try to resolve it. You may also contact the PDPC, whose website explains its role under the PDPA and how to raise a complaint.
We may update this privacy notice to reflect changes in our practices or the law. The current version will always be on this page; please read it alongside our website terms of use. For guidance on data protection for your own organisation, see our data protection and PDPA practice page or get in touch.
This privacy notice was last updated on 20 October 2026.
Frequently asked questions
01Does contacting you through the website mean you can use my details?
When you voluntarily send us an enquiry, the PDPA treats you as consenting to our use of the details you provide for that purpose, such as replying and carrying out a conflict check. We will not use them for unrelated purposes, such as marketing, without your consent. You can withdraw consent at any time by emailing our Data Protection Officer.
02Will my personal data leave Singapore?
It may. TRW & Co is headquartered in Dhaka and has offices in other jurisdictions, and some service providers store data outside Singapore. When we transfer data overseas, we take steps required by the PDPA to ensure the recipient is bound to provide a standard of protection comparable to the PDPA, for example through contracts and firm-wide policies.
03How do I get a copy of the personal data you hold about me?
Email our Data Protection Officer at info@trw.co. We will verify your identity and may charge a reasonable fee for an access request, giving you a written estimate first. We will respond as soon as reasonably possible and, if we cannot within 30 days, tell you in writing when we will. Some information may be withheld under PDPA exceptions, such as legally privileged material.
04Do you use cookies to track me for advertising?
No. We use strictly necessary cookies to run the site and analytics cookies to understand, in aggregate, how pages are used. We do not use cookies to serve advertising. You can block or delete cookies in your browser, and the website will continue to work if you block analytics cookies.
05What happens to my internship application if it is unsuccessful?
We use application documents only to consider your application and keep them for a limited period afterwards, in case of queries or for record-keeping, before deleting or anonymising them. If you would like your application deleted sooner, email info@trw.co and we will do so unless we are required to keep it.
06Who can I complain to if I am unhappy?
Please contact our Data Protection Officer at info@trw.co first, so that we can investigate and try to resolve the issue. If you remain dissatisfied, you can contact the Personal Data Protection Commission, which administers the PDPA and can review certain matters, including complaints about access and correction requests.
Sources and official materials
- Personal Data Protection Act 2012 — The Act on Singapore Statutes Online
- PDPC: The Personal Data Protection Act — Overview of the PDPA and the PDPC's role
- PDPC: Advisory Guidelines on Key Concepts in the PDPA — Consent, purpose, access, transfer and other obligations
- PDPC: Access review checklist — 30-day response period for access requests
- Personal Data Protection Commission — Guidance, decisions and complaints
General information only, current as at 20 October 2026. It is not legal advice and does not create a lawyer–client relationship. Singapore law and regulatory practice change; check current official sources and take advice on the facts of your matter.
Talk it through
before you decide.
Share the decision, the jurisdictions and the timetable. A partner will tell you what matters, what can wait and what it will take.