Last updated: 22 Sep 2026.
Who we are and our role
buzzdashup.org operates this website and acts as the data controller under Singapore's Personal Data Protection Act (PDPA). We determine the purposes and means of processing personal data collected through our health insurance services and related online activities. Our registered address is 75 Bras Basah Road, Income Centre, Singapore 189557 and you may reach us at [email protected] or +65 6788 1777 for data protection matters.
Who this notice covers
This policy applies to all visitors to our site, individuals who request quotes or purchase health insurance products, policyholders, beneficiaries, and anyone who interacts with our blog or contact form. It does not cover third-party websites linked from our content.
Types of personal data we collect and their sources
We obtain data directly from you when you complete forms, from your device via cookies, from healthcare providers with your consent, and from publicly available sources such as business registries. Categories include identity details, contact information, health and medical history, financial data for premium payments, and browsing behaviour.
Purposes of processing and legal bases
We process data to assess insurance applications and underwrite policies on the basis of contractual necessity. Marketing communications rely on your consent or legitimate interests. Service improvement and fraud prevention are carried out under legitimate interests. Legal compliance uses the legal obligation basis. Each purpose is explained in plain terms on relevant pages so you understand the practical impact of sharing information.
Is providing data mandatory
Supplying certain data is necessary to obtain a quote or maintain a policy. If you withhold required health or identity information we may be unable to offer coverage or process claims. Optional fields such as marketing preferences can be left blank without affecting core services.
Cookies and similar technologies
We use cookies to remember preferences, analyse traffic, and personalise content. Details appear in our separate Cookie Policy accessible from the site footer. You can manage preferences through the cookie banner displayed on first visit and subsequent visits after clearing browser data.
Recipients and service providers
Personal data may be shared with reinsurers, medical assessors, payment processors, cloud hosting providers, and analytics platforms. We also disclose information when required by law enforcement or regulatory bodies. All recipients are bound by contractual safeguards or legal duties of confidentiality.
International transfers
Some processors are located outside Singapore. When transfers occur we rely on contractual clauses approved by the Personal Data Protection Commission or other appropriate safeguards to protect your data at a standard comparable to the PDPA.
How long we keep data
Policy-related records are retained for seven years after policy termination to meet regulatory and accounting requirements. Marketing consent records are kept until you withdraw consent. Browsing logs are deleted or anonymised within 24 months. Retention criteria balance legal obligations, business needs, and your rights to erasure where applicable.
Security and data minimisation
We apply technical measures such as encryption, access controls, and regular audits. We collect only the data needed for each purpose and train staff on handling practices. No security system is infallible and we encourage users to protect their own accounts with strong passwords.
Your rights under the PDPA
You may request access to your data, correction of inaccuracies, withdrawal of consent, and in limited cases data portability or erasure. Submit requests via the contact form on our Contacts page or email [email protected]. We will respond within the timelines set by the PDPA.
Withdrawing consent and objecting to marketing
You can withdraw consent at any time through account settings or by contacting us. This will not affect processing that occurred before withdrawal. You may also object to direct marketing or profiling by using the unsubscribe link in emails or updating preferences in your profile.
Complaints to the supervisory authority
If you are unsatisfied with our response you may lodge a complaint with the Personal Data Protection Commission of Singapore through their official channels. Contact details are available on the PDPC website.
Children and age restrictions
Our health insurance products and site are intended for adults. We do not knowingly collect personal data from individuals under 18 without parental consent. If we become aware of such data we will delete it promptly.
Automated decision-making and profiling
We use automated tools to assess risk and determine premiums. You may request human review of any decision that produces legal or significant effects by contacting us. Profiling for marketing is based on consent and can be stopped at any time.
Changes to this policy
We review and update this notice periodically. The effective date appears at the top. Material changes will be highlighted on the homepage and in the blog for a reasonable period. Continued use of the site after updates constitutes acceptance of the revised policy.