Legal
While our Privacy Policy explains what we collect and why, this policy sets out how we govern and protect that data internally, in line with our obligations under Singapore's Personal Data Protection Act 2012 ("PDPA").
Last updated: 31 July 2026.
EDL Management Services has appointed a Data Protection Officer ("DPO") responsible for ensuring we comply with the PDPA, overseeing this policy, and acting as the point of contact for data protection queries and complaints. You can reach our DPO using the details in Section 11.
We treat all personal data we hold with care, but we apply extra caution to categories that are especially sensitive given the nature of our work:
| Category | Examples |
|---|---|
| Identity & verification | Full name, NRIC/passport/driving licence number, date of birth |
| Estate & financial | Beneficiary designations, asset gifts, percentage allocations, organisation/charity details |
| Family & relationship | Spouse, children, guardians, executors, and their relationship to you |
| Special circumstances | Exclusions and the reasons behind them, guardianship arrangements for minors |
Estate and financial data, and data about minors, are only ever used for the purpose of preparing your Will and related documents, and are only shared as described in Section 6.
We collect full NRIC, passport, or other national identification numbers only because accurately verifying a Testator's identity is essential to a legally sound Will, consistent with our Letter of Engagement. We do not use your NRIC number as a general account identifier, and we do not collect it for any purpose beyond identity verification for the engagement you've asked us to arrange.
Where a field on our forms allows it, and an NRIC or passport number genuinely isn't available (for example, for some beneficiaries or organisations), you may enter "NA" instead of leaving it blank, rather than provide a number that isn't required.
Access to personal data we hold is limited to the people who need it to do their work: the EDL representative handling your engagement, and the assigned paralegal, Will Writer, or witness working on your specific matter. Form submissions and internal notifications are transmitted over encrypted (HTTPS) connections.
We use a small number of reputable third-party service providers to run our website and internal operations. They only process data on our instructions, and only for the purposes described here:
| Provider | Purpose |
|---|---|
| Netlify | Website hosting and secure storage of form submissions |
| Resend | Delivering internal notification emails to our team when a form is submitted |
We do not use these providers, or any other, for advertising or marketing purposes.
EDL works with a network of independent professionals, including paralegals who draft Wills, witnesses who attest them, and licensed advisors such as financial consultants who may refer clients to us for estate planning. Where these professionals receive personal data from us, or provide it to us with your consent, they are expected to:
Witnesses specifically may retain a copy of your final, signed Will for their own records, solely to be referred to if they are later called upon as a witness.
| Data | Retention period |
|---|---|
| Will Writing form & drafts (held by drafting partner) | Deleted once your Will is finalised |
| Engagement records (held by EDL) | Five years after your passing, or five days after you engage us to rewrite your Will, whichever is first |
| Witness copy of final Will | Until no longer needed for the purpose above |
| General enquiries that don't lead to an engagement | Deleted periodically once no longer needed to respond to you |
| Financial and corporate records | As required under Singapore accounting and tax law |
When data is disposed of, we do so securely, such that it cannot practicably be reconstructed or retrieved.
If we become aware of a data breach that is likely to result in significant harm to affected individuals, or that is of a significant scale, we will notify the Personal Data Protection Commission and affected individuals as required under the PDPA's mandatory breach notification obligations, and take prompt steps to contain and investigate the breach.
Everyone who handles personal data on our behalf, whether an EDL representative or a partner professional, is expected to understand and follow this policy and our Privacy Policy, and to treat client information as confidential at all times, consistent with the confidentiality terms in our Letter of Engagement.
We review this policy periodically and update it as our practices, service providers, or legal obligations change. The "last updated" date at the top reflects the most recent revision.
EDL Management Services — Data Protection Officer
Email: admin@edlmgtsvc.com
Address: 810 Geylang Road #03-145A, City Plaza, Singapore 409286
UEN: 52981830B
Related reading: Privacy Policy · Terms of Use · Disclaimer · Engagement Terms