Privacy statement

1. Personal data we collect

We collect only what we need to advise you and to arrange and service your insurance. Depending on the cover, this may include:

• name, contact details, date of birth, nationality, occupation and job title;
• NRIC, FIN or passport number, only where an insurer or the law requires it to identify you;
• company details, directors and shareholders, financial statements and business activities, for corporate covers such as D&O and liability;
• details of your property, contents, art, jewellery and valuables, and your vehicles and drivers, including driving and claims history;
• health and medical information, only where it is needed for the cover you apply for or a claim you make;
• policy, premium and claims records;
• our emails, WhatsApp messages and call notes with you.

If you give us personal data about another person, please make sure they know about this statement and have agreed to their data being used for these purposes.

2. How we collect it

Mostly from you directly: through meetings, calls, email, WhatsApp, proposal forms and the documents you send us, such as current policies and renewal notices. We may also receive personal data from insurers, from the person who referred you, from your company or family members when they arrange cover that includes you, and from public sources such as ACRA business records.

3. Why we use it

• to understand your needs, review your existing cover and give you advice;
• to obtain quotes and place, renew, change or cancel policies with insurers;
• to help you notify and follow through on claims;
• to send renewal reminders and keep in touch about your policies;
• to keep proper business, accounting and tax records;
• to tell you about insurance products and services that may suit you, only with your consent.

4. Who we share it with

We share your personal data only with the insurers we approach for quotes or place your cover with, and only for the purposes above. Each insurer handles your data under its own privacy policy, which may include sharing it with its reinsurers and claims service providers.

We do not sell your personal data or share it with anyone else. The only exception is where the law requires us to disclose it, for example to a regulator, government agency or court.

Our email provider and Dropbox hold our records for us as storage providers. They do not receive your personal data for their own use.

5. Transfers outside Singapore

Dropbox and our email provider may store data on servers outside Singapore. We use them because they apply strong security and data protection standards, so that your personal data receives protection comparable to the PDPA.

6. How long we keep it

We keep personal data for as long as your policies are in force, and after that for as long as we need it for claims that may still arise, for legal, regulatory, tax and accounting purposes, or to resolve disputes. When it is no longer needed, we delete it or make it anonymous.

7. How we protect it

We run a paperless office. Each client's records are kept in that client's own file, stored only in our Dropbox account and on our own network storage device (NAS). Our Dropbox account is accessed only from our own laptop and mobile phone, both of which require a password to unlock. Emails and WhatsApp messages stay in our email account and on that same phone. No one outside InsureWorkz has access to these records. No system is completely secure, but we take reasonable care to protect your personal data against unauthorised access, loss or misuse. If a data breach happens, we will act promptly and notify you and the Personal Data Protection Commission (PDPC) where the PDPA requires it.

8. Your choices and rights

• Access and correction. You may ask what personal data we hold about you and how it has been used in the past year, and ask us to correct anything that is inaccurate. We will respond as soon as reasonably possible, usually within 30 days. If an access request needs significant work, we will tell you any reasonable fee before proceeding.
• Withdrawing consent. You may withdraw your consent at any time by telling us. We will explain what this means for you first, for example, we may no longer be able to arrange or service a policy. Withdrawal does not affect records that we or the insurers must keep under the law.
• Marketing. We send marketing only with your consent, and you can opt out at any time. We respect the Do Not Call Registry.
• Keeping us updated. Please tell us when your details change, so your policies and records stay accurate.

9. This website

This website does not use cookies for advertising or tracking, and has no forms that collect your personal data. Like most websites, our hosting provider automatically records technical details such as your IP address and browser type for security and performance. The website may also use Google Fonts to display text, in which case Google receives your IP address when the page loads. The WhatsApp, email and phone links open services run by those providers, and their own privacy policies apply.

10. Changes to this statement

We may update this statement from time to time. The latest version will always be on this page, with the date it was last updated.

11. Contact us

For any question, request or complaint about your personal data, please contact our Data Protection Officer:

Charles Ong, Data Protection Officer
InsureWorkz Pte. Ltd.
Email: charles@insureworkz.com

If you are not satisfied with our response, you may contact the Personal Data Protection Commission at www.pdpc.gov.sg.