Privacy notice (PDPA)

Who we are

SurrenderPolicy is responsible for the personal data collected through this website and when we buy policies. Our Data Protection Officer can be reached at contact@surrenderpolicy.com.

What we collect

When you ask for a check: your name, mobile number and email, and the policy details you give us, such as the insurer, plan, dates, premiums, surrender value, ownership and nomination.
When you contact us: what you write to us.
When you ask for a quote: any policy documents you choose to attach, such as a statement or benefit illustration.
When you sell a policy to us: the identity details and documents needed to complete the legal transfer, collected only through our secure upload or in person, and your bank account details for payment.
When you browse: technical data from strictly necessary cookies, and from analytics cookies only if you allow them. Cookie preferences

Why we use it

To assess whether we would buy your policy, and to contact you about it.
To prepare and complete a purchase, including notifying your insurer of the assignment.
To meet our legal obligations.
To send occasional updates, only if you agreed to receive them.

Your NRIC

We do not ask for your NRIC number or a copy of your NRIC to give you a check. We collect it only when we need to verify your identity to complete the legal transfer of a policy, in line with the PDPC's advisory guidelines on NRIC numbers.

Who we share it with

Your insurer, to record the assignment.
Our professional advisers, such as lawyers and auditors, under a duty of confidence.
Service providers who host our website and email, such as Netlify and Microsoft, only to run those services for us.
Authorities, where the law requires it.

Withdrawing consent

You can withdraw your consent at any time by writing to our Data Protection Officer. We stop using your data for that purpose within 10 working days. If a purchase is under way, withdrawing consent may mean we cannot complete it.

How long we keep it

Enquiries that do not lead to a purchase are deleted after 12 months. Records of completed purchases are kept for 5 years, or longer if the law requires it.

How we protect it

Access is limited to the people who need it. We receive identity documents only through a secure upload, never by WhatsApp or web form. Policy documents you choose to attach to our quote form travel over an encrypted connection and are stored by our form provider. Our website and email providers may store data outside Singapore; we use providers that protect it to a standard comparable to the PDPA.

Access and correction

You can ask what personal data we hold about you, how it has been used, and to correct it. Write to our Data Protection Officer. We respond within 30 days, or tell you when we can if we need longer.

Contact

Data Protection Officer, SurrenderPolicy. Email contact@surrenderpolicy.com.