Definitions
For clarity, the terms used in this policy are defined below to explain our references to personal data, processing, users and services.
- Personal data means any information relating to an identified or identifiable natural person, such as name, contact details, company affiliation, identification numbers, or other information that can be linked to an individual.
- Processing refers to any operation performed on personal data, whether automated or not, including collection, recording, organisation, storage, adaptation, retrieval, consultation, use, disclosure, and deletion.
- User refers to an individual who interacts with Durora’s website or services, including clients, prospective clients, suppliers, advisors, and visitors seeking information about our legal consulting services.
- Service means the professional legal consulting, compliance advisory and related support that Durora provides to entrepreneurs, startups and small businesses through consultations, document preparation and ongoing advisory engagements.
- Cookies are small text files placed on a device by a website to store information about preferences or interaction history. They help improve site functionality and analytics.
Data We Collect
We collect information necessary to provide legal advice, administer client relationships, comply with regulatory obligations, and improve our services. We limit collection to data relevant to those objectives.
Information You Provide
When you engage Durora, correspond with us, or use our online forms, you may supply personal data needed to deliver services and manage the relationship.
- Identification and contact details (name, email address, telephone number, company name, job title).
- Business information and documents relevant to the legal matter (contracts, corporate records, incorporation documents).
- Payment and billing information necessary to process invoices and manage accounts (invoicing details, transaction references).
- Communications and correspondence platform with Durora, including meeting notes and instructions provided by clients.
- Identity verification information where required by law or to comply with our professional obligations.
- Optional feedback, testimonials or marketing preferences you choose to provide.
Information Collected Automatically
When you visit our website or use online services, we automatically collect technical and usage information to operate and secure the site and to analyse user interactions for service improvement.
- Device and browser information (device type, operating system, browser version).
- Log data and IP address used for security, diagnostics and to detect misuse.
- Usage data such as pages visited, time spent on pages and interaction events for analytics.
- Referrer and navigation data indicating how users arrived at the site.
- Cookies and similar tracking technologies used for session management and analytics.
- Geolocation at a coarse level derived from IP address where needed for basic analytics or compliance checks.
Third-Party Sources
We may obtain information about you from trusted third parties where necessary to provide services, complete transactions, or comply with legal obligations. We assess third parties before sharing data.
- Payment processors and business institutions for billing and payment reconciliation.
- Professional advisors and external counsel engaged to assist on a specific matter, under confidentiality arrangements.
- Analytics and hosting providers that help us operate the website and analyse usage patterns.
How We Use Personal Data
We use personal data for operational, legal and legitimate business purposes strictly related to the provision of legal services or required by law.
- To deliver consulting services, draft documents and provide legal advice requested by clients.
- To communicate with clients, schedule meetings and respond to enquiries.
- To process payments, issue invoices and maintain business records in accordance with applicable obligations.
- To comply with legal, regulatory and professional obligations, including identity checks and record keeping.
- To maintain and improve our website and services through aggregated analytics and operational monitoring.
- To manage risk, detect and prevent fraud or misuse of our services and to protect client confidentiality.
- To send administrative communications and service updates relevant to your engagements with Durora.
- With your consent, to send marketing information about events or services, where you have opted in and can opt out at any time.
Legal Bases for Processing
We process personal data only where there is a valid legal basis under applicable data protection requirements, such as performance of a contract, compliance with legal obligations, legitimate interests, or where consent has been provided.
- Performance of a contract or steps taken at the request of the individual prior to entering into a contract.
- Compliance with legal and regulatory obligations that apply to legal service providers and professional advisers.
- Legitimate interests pursued by Durora such as maintaining client relationships, ensuring the security of our services and managing business operations, balanced against individual rights.
- Consent where required for specific processing activities (for example, marketing communications), which you may withdraw at any time.
Cookies and Similar Technologies
Our site uses cookies and similar technologies to facilitate core functionality, enhance user experience and gather analytics. Cookies do not typically contain personal data beyond identifiers tied to session activity.
We use session cookies to maintain session state, persistent cookies to remember preferences, and analytics cookies to collect aggregated usage statistics. Third-party cookies may be used for analytics and service integrations.
Cookies are categorised as essential (required for site operation), performance and analytics (to improve site performance), functional (to remember settings), and optional marketing cookies (used only with consent).
You can manage or disable cookies via your browser settings or through the cookie controls presented on the site. Disabling certain cookies may affect site functionality.
Read our Cookie Policy
Sharing of Personal Data
Durora shares personal data only as necessary to provide services, fulfil obligations, or comply with lawful requests. Third-party recipients are selected on the basis of trust and contractual protections.
- Service providers engaged to support our operations (hosting, analytics, CRM, secure document storage).
- Professional advisers, external counsel and specialists retained to assist on client matters under confidentiality obligations.
- Payment processors and business institutions involved in billing and payments.
- Regulators, courts or law enforcement when required by law or to respond to lawful requests.
- Prospective purchasers or advisors in the event of a corporate transaction, subject to confidentiality safeguards.
- Other parties where you expressly instruct us to share your information.
International Transfers
Personal data may be transferred to jurisdictions outside your country where Durora’s service providers or professional partners operate. Transfers are limited to what is necessary for the provision of services or compliance.
Where transfers occur, Durora implements appropriate safeguards such as contractual commitments, standard contractual clauses or reliance on jurisdictions with adequate protections. Additional technical measures like encryption are used where appropriate.
Data Retention
We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, to meet legal and professional obligations, and to resolve disputes or enforce agreements.
Client account records and files are kept for a period consistent with professional practice and regulatory requirements; where relevant this may extend up to seven years after the end of an engagement, subject to legal retention rules applicable in Singapore.
Communications and correspondence related to matters are retained for as long as necessary to provide ongoing services and to address any follow-up obligations or inquiries.
Technical logs and analytics data are retained for operational and security purposes for defined periods, typically no longer than necessary for diagnostic or fraud prevention needs.
Upon request, we will evaluate deletion requests and, where appropriate and lawful, remove personal data from active systems. Certain data may be retained where retention is necessary for legal compliance, dispute resolution or legitimate business needs.
Security Measures
Durora applies a combination of organisational, technical and physical measures to protect personal data against unauthorised access, disclosure, alteration or destruction. Measures are proportionate to the sensitivity of the data and the risks involved in processing.
- Encryption of data in transit and at rest where appropriate, and secure access controls.
- Role-based access management, multi-factor authentication for privileged access, and regular access reviews.
- Ongoing staff training, incident response procedures and periodic security assessments.
Your Rights
Subject to applicable law, individuals have rights in relation to personal data held by Durora. Rights may vary depending on jurisdiction and applicable legal exceptions.
- Right to access: request confirmation of processing and access to personal data held about you.
- Right to rectification: request correction of inaccurate or incomplete personal data.
- Right to erasure: request deletion of personal data where there is no overriding legal or regulatory reason to retain it.
- Right to restriction of processing: ask for processing to be limited in certain circumstances while matters are verified.
- Right to object: object to processing based on legitimate interests or for direct marketing purposes.
- Right to data portability: request a copy of personal data in a structured, commonly used and machine-readable format where applicable.
- Right to withdraw consent: where processing is based on consent, you can withdraw that consent at any time without affecting prior processing.
- Right to lodge a complaint with a supervisory authority if you consider our processing of personal data to be unlawful.
Making a Rights Request
To exercise your rights, contact Durora's privacy team with a clear description of your request. Reasonable steps will be taken to verify your identity before responding. Contact options include email to [email protected], phone at +6586112499, or written request to Singapore, 30.
[email protected]
We aim to respond to valid requests promptly and generally within 30 days of receipt. In complex cases or where additional verification is required, the response period may be extended and you will be informed.
Regulatory and International Rights
If you are subject to the EU General Data Protection Regulation or other international data protection laws, additional rights may apply. Durora will comply with requirements applicable to personal data processed under those regimes to the extent they are relevant to our operations.
- EU residents may have rights such as access, rectification, erasure, restriction, portability and objection; to exercise these rights please contact [email protected].
- We process personal data to perform contract-related services for entrepreneurs, including corporate formation, contract review and regulatory compliance advice. Processing is limited to what is necessary to deliver paid and advisory services requested via Durora on dturora.biz.
- Recipients of personal data may include trusted professional advisers engaged for a specific engagement (such as tax advisers or external counsel), payment processors, and technical service providers that host or maintain the Durora platform. We apply contractual safeguards and data minimisation when sharing with third parties.
- Personal data will be retained only for as long as required to provide the requested services, to comply with legal and regulatory obligations applicable in Singapore, or to resolve disputes. Typical retention periods vary by record type (client files, billing records, and communications) and are documented internally to support compliance.
- You have rights to access, correct, restrict processing, and request portability of your personal data where applicable under relevant law. To exercise these rights, verify your identity and submit a request to the Durora data protection contact. We assess requests in line with applicable statutory tests and limits.
- If you are not satisfied with how we handle your personal data, you may raise a concern with Durora first; if unresolved you may contact the Personal Data Protection Commission (PDPC) in Singapore or other appropriate supervisory authority depending on your jurisdiction.
Supervisory authority for data protection enquiries in Singapore: Personal Data Protection Commission (PDPC). For matters originating outside Singapore, you may also contact the relevant national supervisory authority. Durora will cooperate with competent authorities subject to applicable law.
Marketing and Communications
Durora may send service updates, legal briefing notes, event invitations and targeted communications relevant to business legal needs. Communications are based on your consent or our legitimate interest to provide information about services similar to those you used. Content is tailored for entrepreneurs and corporate decision-makers to support compliance and informed planning.
You may opt out of marketing communications at any time using the unsubscribe link in promotional emails or by contacting [email protected]. Opting out will not affect transactional emails related to services you requested.
Children and Minors
Durora is intended for business users and entrepreneurs. We do not knowingly collect personal data from individuals under the age of 18. If we become aware that we have inadvertently collected data of a minor, we will take reasonable steps to delete that information in accordance with applicable law.
Links to Third-Party Sites
Durora may link to external websites and tools operated by third parties. Those sites have their own privacy notices and practices. Durora is not responsible for third-party content or practices. We recommend reviewing the privacy policies of any external site before submitting personal information.
Changes to This Policy
Durora reviews this privacy policy periodically to reflect legal and operational changes. Material updates will be posted at dturora.biz/privacy with the revision date. Non-material updates may be made without prior notice; we encourage returning users to check the policy regularly. Current policy revision posted 12-05-2026.
