Last updated: 14 November 2026
1. Who we are
C S Chow & Co (UEN T08PF0918H) is a public accounting practice at 2 Venture Drive #11-02 Vision Exchange, Singapore 608526. In this notice "we", "us" and "our" mean C S Chow & Co. "You" means a visitor to www.cschow.com.sg, a person who contacts us, or a client.
We follow the Personal Data Protection Act 2012 of Singapore (PDPA). We also owe our clients a duty of confidentiality under the professional code that applies to public accountants in Singapore.
2. What this notice covers
This notice covers our website, our enquiries by WhatsApp, phone and email, and the personal data of our clients and their staff, officers and shareholders that we hold to deliver our services. Our engagement letter with each client adds specific terms for the work we do.
3. What personal data we collect
From website visitors:
- The pages you visit, your device type, your browser and your approximate location. We also record which contact button you click (WhatsApp, phone or email). We never record the number or address you contact. We collect these through Google Analytics.
- Your use of embedded YouTube videos. Google collects this under its own policy.
From people who contact us:
- Your name, mobile number, email address and company name.
- The details you share in your message, for example your business type and the service you ask about.
- Your WhatsApp profile name and number if you message us on WhatsApp.
From clients:
- Contact details of directors, shareholders, staff and authorised persons.
- Identity documents and address proof, collected for client due diligence under the Corporate Service Providers Act and the anti-money laundering and countering the financing of terrorism rules.
- Payroll, tax and accounting records that contain personal data, collected to prepare financial statements, tax returns, payroll and statutory filings.
- Billing and payment records.
We do not ask for personal data through the website. The contact buttons open WhatsApp, your phone or your email app, and we receive only what you send.
4. Why we use your personal data
- To reply to your enquiry and to give you a quote.
- To provide audit, tax, accounting, payroll, corporate secretarial, valuation and advisory services.
- To complete client due diligence and meet our legal and professional duties, including record keeping and reporting to authorities.
- To bill you and collect payment.
- To send you articles and updates about our services, if you asked for them or you are an existing client.
- To understand how visitors use our website and to improve it.
5. Consent
We collect, use and disclose your personal data with your consent, or when the PDPA allows it without consent. If you send us your details to ask about our services, we treat that as consent to use them to answer you. We do not collect more than we need for the purpose we told you about. We ask for fresh consent if the purpose changes.
For client work, we also rely on the PDPA exceptions that apply to legal obligations, to the performance of our contract with you, and to legitimate interests when we have assessed that the benefit outweighs the effect on you.
6. Who we share your personal data with
We share personal data only when needed, and only with:
- Government agencies and regulators such as IRAS, ACRA, MOM and CPF Board, when we file for you or the law requires.
- Other professionals you ask us to work with, for example your bank, lawyer or financial adviser.
- Service providers who help us run the practice, such as email, cloud storage, messaging and website analytics providers. They act on our instructions.
- Our professional body or a regulator, when they carry out a quality review or an inspection of our work.
We do not sell personal data.
7. Cookies and website tools
Our website uses Google Analytics to count visits and see which pages people read. It sets cookies on your device. We do not use it to identify you by name. Embedded YouTube videos load from the privacy-enhanced YouTube domain and set cookies only when you play a video. Your browser settings let you block or delete cookies. The website will still work.
Our AI avatar runs on HeyGen, a third-party service. When you talk to the avatar, your questions go to HeyGen. Read the HeyGen privacy terms before you start, and do not share client names, account numbers or other confidential details with the avatar.
Our pages link to WhatsApp, LinkedIn, YouTube and Google. Those services have their own privacy policies and we do not control them.
8. Marketing messages
We send marketing messages only to people who agreed to receive them and to existing clients. We check the Do Not Call Registry before we send a marketing call, text or WhatsApp message to a Singapore number, unless you gave us clear consent. Reply "stop" to any message or email us, and we will remove you.
9. Withdrawing consent
You have the right to withdraw your consent at any time by emailing us. We will tell you what happens if you withdraw, for example that we might not be able to keep you informed of our services or continue an engagement. We will act on your request within a reasonable time, normally within 10 business days. We might still keep data that the law or our professional standards require us to keep.
10. Access and correction
You have the right to ask for a copy of the personal data we hold about you and how we used or disclosed it in the past year. You also have the right to ask us to correct data that is wrong or out of date. Send your request to the contact in section 14. We might ask you to prove your identity first. We will reply within 30 days. If we need more time, we will tell you and give a date. We might charge a reasonable fee for an access request and we will tell you the amount first.
11. Keeping your personal data accurate and safe
We take reasonable steps to keep the data we hold accurate. Please tell us when your details change.
We protect personal data with access controls, passwords and multi-factor sign-in on our systems, encrypted devices and storage, and restricted access to client files. Only people who need the data for their work see it. We require our service providers to protect it too.
If a data breach is likely to cause you significant harm, or affects 500 or more people, we will notify the Personal Data Protection Commission within 3 calendar days of deciding it is notifiable. We will also notify you without delay if the breach is likely to cause you significant harm.
12. How long we keep your personal data
We keep personal data only while we need it for the purpose we collected it. For clients, we normally keep working papers, accounting records and due diligence records for five years after the engagement ends. We keep them longer when a law, a regulator or a dispute requires it. We keep enquiry details for up to two years if you do not become a client. We then delete or anonymise the data, and we destroy paper records securely.
13. Transfers outside Singapore
Some of our service providers, such as Google, store data on servers outside Singapore. When we transfer personal data out of Singapore, we make sure the recipient protects it to a standard comparable to the PDPA, usually through a contract or the provider's data protection terms.
14. Contact us
For any question, request or complaint about your personal data, contact our Data Protection Officer:
C S Chow & Co, Data Protection Officer
2 Venture Drive #11-02 Vision Exchange, Singapore 608526
Email: henry@cschow.com.sg
WhatsApp or phone: +65 9876 3553
Please include your full name, your contact details and a short description of your request. We deal with every request in confidence. If you are not satisfied with our reply, contact the Personal Data Protection Commission at www.pdpc.gov.sg.
15. Changes to this notice
We will update this notice when our practices or the law change. We will post the new version on this page with a new date. The change takes effect when we post it.