Definitions
For clarity, the following definitions explain terms used in this policy and how they apply to everyday client engagements and website interactions.
- Personal data means any information relating to an identified or identifiable individual. In the context of our legal consulting services, this may include founder names, contact details, identification documents provided during company incorporation, and structured data used in legal agreements or due diligence.
- Processing refers to any operation performed on personal data, such as collection, storage, consultation, sharing, analysis, and deletion. For example, when Feranova reviews a contract that includes named stakeholders, that review is a processing activity.
- User denotes anyone who visits uhtnova.digital, requests information, or engages Feranova for legal services. Clients under active service agreements are treated as users for the purposes of rights and data handling described here.
- Service describes the legal consulting and advisory activities Feranova provides to entrepreneurs, including company formation assistance, contract drafting and review, compliance checks, and ad hoc legal advice.
- Cookies are small text files stored on a device to enhance site functionality and analytics. Feranova uses cookies to improve navigation, remember preferences during a session, and gather usage patterns for site improvement.
Information We Collect
We collect data directly from users, automatically through site interactions, and from third-party sources in limited circumstances. Below are typical categories and concrete examples tied to common scenarios such as onboarding a new client or performing a document review.
Data Provided by Users
When you contact Feranova or sign up for services, we collect information necessary to evaluate and perform legal tasks. Examples are drawn from recurring engagement scenarios.
- Contact details: name, email address, phone number provided when requesting a consultation or sending documents for review.
- Business information: company name, registration number, business activity descriptions, and partner details submitted during incorporation or advisory projects.
- Identification and verification documents: copies of identity documents or corporate records when required to complete compliance checks or formal filings.
- Contract and transaction materials: uploaded agreements, term sheets, and business summaries supplied for review in a client engagement.
- Communications: emails, meeting notes, and consultation recordings (where consented) that document advice provided and the facts of the engagement.
- Payment and billing details: invoicing information and transactional records necessary to process payments for services.
Automatically Collected Data
We collect technical and usage information automatically to maintain the site and understand how users interact with our content. Data helps in scenario planning and improving client onboarding workflows.
- Device and browser information: type of device, browser version, and operating system used to access uhtnova.digital.
- IP address and geolocation derived from IP, used for basic security checks and to detect unusual access patterns.
- Usage data: pages visited, time spent on pages with case studies, and resources downloaded for internal analytics and service design.
- Referrer data: the site or campaign that led you to uhtnova.digital, used to evaluate outreach effectiveness.
- Cookie identifiers and session vouchers necessary for site navigation and preference storage.
- Error logs and performance metrics collected to troubleshoot technical issues and improve reliability.
Third-Party Sources
In certain scenarios we may receive information from third parties relevant to a client engagement, for example during due diligence or when integrating with payment processors.
- Payment processors and invoicing platforms supplying transaction confirmations and billing records.
- Public registries and corporate databases used for verification of company details during incorporation work.
- Referring partners or platforms that share basic contact details when a prospective client requests an introduction.
How We Use Personal Data
We use collected data to perform services, fulfill agreements, and operate the website. Below are practical purposes aligned with typical legal workflows and client scenarios.
- Provide and manage legal consulting services, including document review, contract drafting, and incorporation support.
- Communicate with clients about case progress, deliverables, and administrative matters such as invoices and scheduling.
- Perform identity verification and compliance checks in situations where regulation or a transaction requires verification.
- Improve site content and client onboarding by analyzing anonymized usage patterns and feedback from case-based engagements.
- Detect and prevent fraud, abuse, or other security incidents affecting client data or the integrity of services.
- Fulfill legal obligations, such as recordkeeping demands or responding to lawful requests from regulators and authorities.
- Maintain internal records related to service delivery, including archival of finalized agreements and case notes.
- Send operational messages such as appointment confirmations, deadlines for filings, or updates related to an ongoing legal process.
Legal Basis for Processing
We rely on appropriate legal bases for processing personal data in connection with services and website use. These bases mirror common legal obligations and legitimate interests in professional services contexts.
- Performance of a contract: processing necessary to deliver agreed legal services or to take steps at a client's request prior to entering into a service agreement.
- Legal compliance: processing required to meet regulatory obligations, such as anti-funds laundering checks or statutory filings.
- Legitimate interests: for activities like fraud prevention, security, and service improvement where our interest is balanced against individual rights.
- Consent: where required for specific processing activities not covered above, such as explicit consent to record consultations.
Cookies and Tracking
Feranova uses cookies and similar technologies to ensure the website functions efficiently and to gather analytics that inform improvements to content and client-facing processes.
We use session cookies for navigation, persistent cookies to remember preferences, and analytics cookies to aggregate usage statistics. No profiling for advertising is performed.
Categories include essential cookies (site functionality), performance cookies (analytics), and preference cookies (language and display settings).
Users can manage cookie settings through their browser controls and opt out of non-essential analytics via available preference tools on the site.
Cookie Policy and Preferences
Data Sharing and Disclosure
We limit data sharing to service-related needs, trusted providers, and legal requirements. Practical examples include sharing documents with a registrar when filing incorporation forms or with a payment processor to settle invoices.
- Professional service providers engaged to support an engagement (e.g., notaries, specialist counsel) under confidentiality arrangements.
- Payment processors and banks to facilitate billing and refunds.
- Regulatory authorities or courts when disclosure is required by law or for compliance with official inquiries.
- Technology vendors that host or maintain parts of our systems, under contractual data protection terms.
- Third parties involved in a specific transaction, for example, counterparties to an agreement where sharing is necessary to complete the service.
- Anonymized and aggregated datasets used for internal analysis and service improvement without identifying individuals.
International Data Transfers
When data is transferred outside Singapore, we take steps to ensure an adequate level of protection. Transfers typically occur when a service provider or vendor is located abroad and supports activities such as secure document storage or specialized legal research.
Safeguards include contractual clauses requiring equivalent data protection standards, assessing third-party compliance, and limiting transfer scope to what is necessary for the specific service.
Data Retention
Retention periods reflect the type of data, legal obligations, and practical needs for client service continuity. Below are examples tied to common legal workflows.
Client account records and engagement agreements are retained for a period consistent with professional obligations and recordkeeping practices, typically no less than five years after the end of an engagement unless otherwise required by law.
Routine communications such as emails and meeting notes are retained for the duration of the engagement and for a reasonable period thereafter to preserve the history of advice and any operational need, generally aligned with account retention timings.
System logs and security records are retained for a limited period to support incident contribute and system health monitoring, typically between 6 months and 2 years depending on the log type.
Upon expiry of retention periods or at a client’s request where applicable, personal data is securely deleted or anonymized unless ongoing retention is required for compliance or legitimate business reasons.
Security and Data Protection Measures
Feranova implements administrative, technical, and physical safeguards proportionate to the sensitivity of the data and the nature of our services. Measures are designed to protect client information during typical legal tasks such as document platform, contract drafting, and filing with authorities.
- Access controls and role-based permissions to limit data access to authorized personnel engaged on a particular client matter.
- Encrypted storage and secure transmission protocols (TLS) for electronic platform of documents and client communications.
- Regular backups, patch management, and periodic security reviews to identify and mitigate vulnerabilities.
Your Rights as a User or Client
Clients and users have rights regarding their personal data. We provide practical steps and scenarios to help exercise these rights effectively in the context of legal consulting engagements.
- Access: request a copy of personal data we hold about you related to a specific engagement.
- Rectification: ask us to correct inaccurate or incomplete data that affects service delivery.
- Erasure: request deletion of personal data when retention is no longer necessary, subject to legal or contractual constraints.
- Restriction of processing: request limits on how we process data during a dispute about accuracy or legal basis.
- Objection: object to processing based on legitimate interests where appropriate, for example in certain analytics contexts.
- Data portability: request a structured copy of personal data provided directly for transfer to another service provider where feasible.
- Withdraw consent: where processing is based on consent, withdraw that consent for future processing.
- Lodge a complaint with a supervisory authority if you consider that your rights have been infringed.
How to Make Rights Requests
To exercise any rights, contact Feranova using the details below. Provide sufficient information to identify yourself and specify the right you wish to exercise. We may request verification documents for security before processing certain requests. Typical response times and steps are outlined to make the process straightforward, and examples of common requests are provided to assist founders and administrators.
[email protected]
We aim to respond to rights requests promptly and typically within 30 days of receipt. Complex requests or those requiring verification or coordination with third parties may take longer; we will communicate any delays and a realistic timeframe for completion.
Data Protection and Legal Basis
At Feranova we treat personal data with care. This section explains the legal bases we rely on when processing personal data of entrepreneurs and business representatives in Singapore and beyond. We describe what data we collect when providing business legal consulting services, why we need it, and how we use case-based examples to show real-world application of each processing purpose. We also outline rights available to data subjects and steps to exercise those rights through our contact points.
- Contract performance: personal and company contact details, corporate records and transactional information processed to deliver consulting projects, draft agreements, and implement legal steps tied to a specific engagement.
- Legitimate interests: basic business contact information and non-sensitive company data used to improve service delivery, run analytics on typical case scenarios, and tailor practical legal playbooks for entrepreneurs.
- Compliance with legal obligations: identity and corporate documentation retained to satisfy anti-funds-laundering checks, statutory reporting, and obligations under Singapore law when relevant to a matter.
- Consent: where explicit consent is requested (for marketing communications or certain profiling activities), we will obtain it prior to processing and make it easy to withdraw.
- Data minimization and retention: we collect only data needed for the stated purpose and retain it according to a retention schedule tied to the engagement type and statutory requirements.
- Cross-border transfers: when sharing data with trusted external experts or cloud providers outside Singapore, we rely on appropriate safeguards such as contractual clauses and assessed provider security practices.
If you are subject to EU data protection rules and wish to contact a supervisory authority, we will provide assistance where applicable. For queries related to data processing carried out by Feranova from Singapore, contact our data protection lead at our office address or through the contact page on uhtnova.digital.
Marketing Communications and Preferences
We may send targeted newsletters and invitations to seminars that illustrate practical legal scenarios for startups and SMEs. Communications focus on actionable guidance and case studies: for example, how a newly incorporated tech startup navigated partner agreements or how an SME limited liability restructure reduced operational risk. You may opt out at any time.
To unsubscribe from marketing, use the link at the bottom of our emails, update your preferences on uhtnova.digital, or contact [email protected]. We will action unsubscribe requests within a reasonable timeframe and confirm removal where feasible.
Children and Minors
Our services are directed to entrepreneurs and business representatives. We do not knowingly collect personal data from children under 18 in the context of our consulting services. If we become aware that we have inadvertently collected such data, we will take steps to delete it promptly.
Third-Party Links and Services
Our site and communications may link to third-party tools (payment processors, cloud collaboration platforms, legal databases). These third parties have their own privacy practices. When we engage third parties to support client work (e.g., escrow services or expert witnesses), we disclose relevant data only as necessary under contractual safeguards.
Changes to This Policy
We review and update our privacy practices periodically to reflect changes in law, technology, or service offerings. Material changes will be communicated by posting an updated policy on uhtnova.digital and, where appropriate, by direct notification to affected clients. Minor clarifications may be applied without prior notice.