Privacy policy.

Who we are

This website is operated by JK Medora PAC ("we", "us", and "our"). JK Medora PAC (UEN 202222771G) is a Public Accounting Corporation registered with ACRA, and the professional standards of ISCA and ACRA apply to its work. Our registered office is 22 Malacca Street, RB Capital Building, #03-02, Singapore 048980. We are the organisation responsible for the personal data described in this policy.

Questions about this policy, or a request about your personal data, can be sent to our Data Protection Officer at privacy@jkmedora.com.sg.

What this policy covers

This policy explains what personal data we collect through this website, why we collect it, who we share it with, and the choices and rights you have. It applies to https://www.jkmedora.com.sg and does not cover any third-party website we link to.

The personal data we collect

Information you give us

When you use the enquiry form, we collect your name, your business email address, your company, where your group is headquartered, and the details of your message, so that we can respond.

When you request one of our guides, we collect your name, your business email address, your company, and, if you provide it, your role, so that we can send you the guide and follow up about it.

Information we collect automatically

Like most websites, we use cookies and similar storage. Essential storage remembers your cookie choice and keeps the site working, and is always on. With your agreement, we also use analytics to understand how the site is used; analytics does not load unless you accept it.

Our hosting provider also records standard technical information, such as your IP address and browser type, for security and to deliver the site.

How and why we use your data

• To respond to your enquiry and correspond with you about it.
• To send you the guide you requested and, where you have agreed, occasional related updates from the practice, which you can stop at any time using the unsubscribe link.
• To operate, secure, maintain, and improve the website.
• To meet our legal, regulatory, and professional obligations.

Under the Singapore Personal Data Protection Act, we rely on your consent, and on the legitimate interests of running our practice and this website, as the basis for this use. If you are in the United Kingdom or the European Union, we rely on the equivalent bases under the UK GDPR and the EU GDPR: your consent for optional messages and analytics, and our legitimate interests for operating the site and responding to you.

Cookies and analytics

We ask for your choice on non-essential cookies through the banner shown on your first visit. Essential cookies are always on. Analytics cookies load only if you accept them, and you can change your choice at any time through the "Cookie preferences" link in the footer.

Who we share your data with

We share personal data with the service providers that help us run this website and respond to you. These are listed on our sub-processors page. We also share data with our professional and legal advisers where necessary, and with authorities where the law requires it. We do not sell your personal data, and we do not share it for anyone else's marketing.

International transfers

Some of our service providers are located outside Singapore, for example website hosting in the United States and email delivery in the European Union. Where personal data is transferred outside Singapore, we take steps to ensure it receives a standard of protection comparable to that under Singapore law, through contractual protections with each provider. For visitors in the United Kingdom or the European Union, we rely on the transfer mechanisms recognised under the GDPR.

How long we keep your data

We keep enquiry and correspondence data for as long as needed to deal with your enquiry and, where a relationship follows, for the life of that relationship and for at least five years afterwards, in line with our professional and legal record-keeping obligations. Analytics data is kept for the period set by the analytics provider. When data is no longer needed, we delete or anonymise it.

Your rights and choices

Under the Singapore Personal Data Protection Act, you may ask us for access to the personal data we hold about you, ask us to correct it, and withdraw a consent you have given. To do any of these, contact our Data Protection Officer at privacy@jkmedora.com.sg.

If you are in the United Kingdom or the European Union, you also have rights under the GDPR to access, correct, erase, restrict, and port your personal data, and to object to certain uses. We will honour these rights where they apply.

How to contact us, and how to complain

For any privacy question or request, contact our Data Protection Officer at privacy@jkmedora.com.sg, or write to us at 22 Malacca Street, RB Capital Building, #03-02, Singapore 048980.

If you are not satisfied with our response, you can complain to the Personal Data Protection Commission in Singapore. If you are in the United Kingdom, you can complain to the Information Commissioner's Office; if you are in the European Union, to your local supervisory authority.

Changes to this policy

We may update this policy from time to time. This version was last updated on 19 August 2026.