Privacy Policy

Last updated: 25 September 2026.

Our Identity and Role as Data Controller

journoflaxi operates this commercial website focused on health insurance products and services in Singapore. We act as the data controller under the Personal Data Protection Act 2012 (PDPA) for personal data collected through the site, contact forms, policy applications, and related interactions. Our registered address is 1 Finlayson Green, Singapore 049246 and we can be reached at [email protected] or +65 1800 248 8000.

Scope of This Notice

This privacy policy applies to all visitors, prospective customers, policyholders, and other individuals who interact with our website or provide personal data in connection with our health insurance offerings. It covers data collected online, via the contact form, cookie technologies, and any offline submissions that feed into our systems.

Categories of Personal Data and Sources

We collect identification details such as name, identification number, contact information including email and phone, demographic data, employment and financial information relevant to insurance premiums, and health-related data including medical history, claims records, and lifestyle factors. Sources include direct input through forms, third-party insurers or medical providers with consent, cookies and analytics tools, and publicly available records where permitted.

Purposes of Processing and Legal Bases

Data is processed to assess insurance applications and underwrite policies with consent as the primary basis; to fulfil contractual obligations once a policy is issued; to comply with regulatory requirements such as anti-money laundering checks; to improve website functionality and user experience through analytics; and to send service updates or marketing communications where consent has been obtained. Each purpose is tied to a specific legal basis under the PDPA including consent, contractual necessity, and legitimate interests balanced against individual rights.

Whether Providing Data Is Required

Supplying certain personal data is mandatory to obtain a health insurance quote or bind a policy. Failure to provide required information may result in our inability to proceed with an application, issue coverage, or process claims. Optional fields, such as additional lifestyle details, may enhance service quality but are not compulsory.

Cookies and Similar Technologies

We use cookies and similar tracking technologies to enable core site functions, remember preferences, analyse traffic, and support marketing efforts. Details on the types of cookies, their purposes, and how to manage preferences are set out in our separate Cookie Policy accessible via the site-wide cookie banner.

Processors, Recipients and Lawful Disclosures

Personal data may be shared with trusted service providers acting as data processors including cloud hosting providers, claims administrators, reinsurers, and analytics platforms. Categories of recipients also include regulatory bodies when legally required and professional advisers under confidentiality obligations. We do not sell personal data.

International Transfers

Some processors or group entities may be located outside Singapore. In such cases we rely on contractual safeguards, consent where appropriate, and ensure transfers comply with PDPA requirements for protection of personal data abroad.

Retention Periods

Personal data is retained only as long as necessary for the purposes collected, typically for the duration of an active policy plus seven years thereafter to meet regulatory, accounting, and claims obligations. Criteria for longer retention include legal disputes or mandatory record-keeping periods under Singapore law.

Security and Data Minimisation

We implement reasonable technical and organisational measures such as encryption, access controls, and regular audits to protect personal data. Data collection is limited to what is relevant and proportionate, and we encourage users to provide only necessary information.

Data Subject Rights

Individuals may request access to their personal data, correction of inaccuracies, withdrawal of consent, data portability where applicable, and cessation of certain processing. Requests can be submitted via the contact form on our Contacts page or by emailing [email protected]. We will respond within the timelines prescribed by the PDPA.

Right to Withdraw Consent and Object to Marketing

Consent for marketing communications or profiling can be withdrawn at any time by using the unsubscribe link in emails, adjusting cookie preferences, or contacting us directly. Objections to direct marketing will be honoured promptly.

Right to Complain to the Supervisory Authority

If you believe your personal data has been handled in breach of the PDPA you have the right to lodge a complaint with the Personal Data Protection Commission of Singapore. Contact details are available on the PDPC website.

Children and Age Restrictions

Our health insurance products and website are intended for adults aged 18 and above. We do not knowingly collect personal data from individuals under 18 without verified parental or guardian consent. If such data is discovered it will be deleted promptly.

Automated Decision-Making and Profiling

We may use automated tools to generate insurance quotes or assess risk based on the data provided. Individuals have the right to request human review of any solely automated decision that produces legal or significant effects.

Policy Changes

We may update this privacy policy to reflect changes in law, business practices, or technology. The effective date of the current version is 25 September 2026. Continued use of the site after updates constitutes acceptance of the revised terms.