Privacy Policy
This Privacy Policy was last updated on 22 September 2026.
Who We Are and Our Role as Data Controller
buzzstreamix operates this commercial website offering health insurance products and services targeted at individuals and businesses in Singapore. We act as the data controller under the Personal Data Protection Act 2012 (PDPA) for the personal data we collect through the site, contact forms, quote requests and policy administration. Our registered address is 75 Bras Basah Road, Income Centre, Singapore 189557 and you may reach us at [email protected] or 6788 1777 for data protection enquiries.
Scope of This Notice and Who It Covers
This notice applies to all visitors, prospective customers, policyholders and their authorised representatives who interact with our website or provide information in connection with health insurance enquiries, applications or claims. It does not cover third-party websites linked from our blog or external service pages.
Categories of Personal Data and Sources
We collect identity details such as name, date of birth and NRIC number; contact information including email address, phone number and residential address; health and medical data such as medical history, current treatments, prescriptions and family medical background; financial information for premium payments; and technical data from your device such as IP address and browsing behaviour. Data is obtained directly from you via forms, indirectly from your employer or broker, from healthcare providers with your consent, and from cookies placed on our site.
Purpose-by-Purpose Explanation of Processing and Legal Basis
We process data to provide personalised health insurance quotes and bind policies, with consent as the primary basis; to underwrite risks and assess eligibility using health information under the legitimate interests of offering suitable products; to administer claims and make payments under contractual necessity; to comply with regulatory reporting obligations under legal requirements; to send service updates and renewal notices under legitimate interests; and to improve our website and detect fraud under legitimate interests. Each purpose is explained at the point of collection where practicable.
Whether Providing Data Is Required and Consequences
Supplying certain personal data is necessary to obtain a quote or purchase a policy. If you do not provide health or identity information we may be unable to issue cover or process claims, resulting in declined applications or delayed payments. You may still browse general content without providing personal data.
Cookies and Similar Technologies
We use cookies and similar tracking technologies to remember preferences, analyse traffic and support marketing. A separate Cookie Policy explains the categories in use and how to manage them through your browser settings or our site-wide cookie banner.
Processors, Recipients and Disclosures Required by Law
We share data with service providers such as cloud hosting platforms, payment processors, reinsurers and medical assessment partners who act as data intermediaries under PDPA. We may also disclose information to regulators, law enforcement or courts when legally required.
International Transfers and Safeguards
Some processors are located outside Singapore. We transfer data only to jurisdictions with comparable protection or under contractual clauses that require recipients to safeguard the data to PDPA standards.
Specific Retention Periods or Criteria
Policy and claims records are retained for seven years after policy expiry or claim closure to meet regulatory and accounting obligations. Marketing consent records are kept until you withdraw consent. Website analytics data is anonymised or deleted after twenty-four months.
Security and Data-Minimisation Practices
We apply technical measures including encryption, access controls and regular security reviews. We collect only the minimum data necessary for each purpose and train staff on handling sensitive health information responsibly.
Your Data Subject Rights and How to Exercise Them
Under the PDPA you may request access to your personal data, correction of inaccuracies, withdrawal of consent and cessation of use for certain purposes. Submit written requests to [email protected] or via the contact form on our Contacts page. We will respond within thirty days.
Right to Withdraw Consent and Object to Direct Marketing or Profiling
You may withdraw consent at any time by contacting us, which will not affect processing already carried out. You can opt out of marketing emails using the unsubscribe link and object to profiling for marketing by writing to [email protected].
Right to Complain to the Competent Supervisory Authority
If you believe we have breached the PDPA you may lodge a complaint with the Personal Data Protection Commission of Singapore at their official channels after first attempting resolution with us.
Children or Age Restrictions
Our health insurance products are intended for adults aged eighteen and above. We do not knowingly collect personal data from minors without verified parental consent. If we become aware of such collection we will delete the data promptly.
Automated Decision-Making and Profiling
We use automated tools to generate initial quote indications based on health and demographic inputs. Significant decisions affecting eligibility or premiums always involve human review upon request.
Policy Changes and Effective Date
We may update this policy to reflect changes in law or business practices. The current version is effective from 22 September 2026. Continued use of the site after updates constitutes acceptance of the revised terms.