Legal · Transparency
Privacy Policy
Last updated: · Effective: 25 February 2026
Introduction
Mivella ("we", "us", "our") is committed to handling your personal information with care and respect. This Privacy Policy explains how we collect, use, store, and protect data when you visit mivella.cyou or engage with our legal services.
We operate in accordance with Singapore's Personal Data Protection Act 2012 (PDPA) and related regulations. By using this website or contacting us, you acknowledge the practices described here.
For questions about this policy, please contact us at [email protected].
Data We Collect
We collect personal data only when you voluntarily provide it or when it arises naturally from your use of our website.
Information you provide directly
- Full name and contact details (email address, phone number)
- Details shared through our contact form or enquiry messages
- Correspondence sent to us by email or post
Information collected automatically
- Browser type, operating system, and device identifiers
- Pages visited, time on site, and referral source
- IP address (anonymised where possible)
- Cookie data (see Cookies section below)
Legal basis for processing
- Consent — when you submit a form or accept optional cookies
- Legitimate interest — for website analytics and service improvement
- Contract performance — when processing data to deliver agreed services
Retention periods
Contact enquiry data is retained for up to 24 months from the date of last contact. Client engagement records are held for 7 years in accordance with professional obligations. Analytics data is anonymised within 14 months.
How We Use Your Data
Your personal data is used only for the purposes described below. We do not sell or rent personal information to third parties.
- Service delivery — responding to enquiries and administering engagements
- Communication — sending updates relevant to your matter
- Website analytics — understanding how visitors navigate the site to improve it
- Legal compliance — meeting obligations under Singapore law
- Fraud prevention — detecting and addressing unusual or unauthorised activity
We will not use your data for unsolicited marketing unless you have given clear and specific permission to do so.
Third-party service providers
We work with trusted service providers who may process data on our behalf, including analytics platforms (such as Google Analytics) and email hosting services. These providers are bound by appropriate data processing agreements and are not permitted to use your data for their own purposes.
Protection Measures
We take the security of your personal information seriously and apply appropriate technical and organisational safeguards.
- Data transmitted via our website is protected using SSL/TLS encryption
- Access to personal data is restricted to authorised personnel with a demonstrated need
- Our systems are regularly reviewed for vulnerabilities and kept up to date
- In the event of a data breach affecting your rights, we will notify you and the relevant authority as required under the PDPA
While we take reasonable steps to protect your information, no method of electronic transmission or storage can be entirely without risk. We encourage you to exercise care when sharing sensitive details online.
Your Rights
Under the PDPA, you have the right to:
- Access — request a copy of personal data we hold about you
- Correction — ask us to correct inaccurate or incomplete data
- Withdrawal of consent — withdraw consent to processing at any time (subject to legal constraints)
- Data portability — receive your data in a structured, commonly used format where applicable
- Object to processing — raise concerns about how your data is used
To exercise any of these rights, please write to us at [email protected]. We aim to respond within 10 business days. You also have the right to lodge a complaint with the Personal Data Protection Commission (PDPC) of Singapore if you believe your data has been handled improperly.
Third-Party Links
Our website may contain links to external websites or resources for your convenience. We are not responsible for the content or privacy practices of those sites. We recommend reviewing the privacy policies of any external site before sharing your personal information.
Children's Privacy
Our services are intended for individuals aged 18 and above. We do not knowingly collect personal data from minors. If you believe a child has submitted information through our site, please contact us and we will take appropriate steps to remove it.
Policy Updates
We may update this policy from time to time to reflect changes in our practices or applicable law. When we do, we will revise the "Last Updated" date at the top of this page.
Continued use of our website following any update constitutes your acknowledgment of the revised policy. Where changes are material, we will endeavour to provide more prominent notice.
Contact Us
If you have any questions, requests, or concerns about this Privacy Policy or the handling of your personal data, please reach out to us: