Privacy Policy
Last updated: 22 September 2026.
Identity and Role of the Data Controller
storyflowxe.com acts as the data controller for personal data processed through this website. We are responsible for determining the purposes and means of processing your personal data in connection with our health insurance services offered in Singapore.
Scope of This Notice
This privacy policy applies to all visitors to our website, including prospective and existing customers, users of our blog content, and individuals who interact with our contact form. It covers data collected online and through related services provided by storyflowxe.com.
Categories of Personal Data and Sources
We collect personal data such as name, contact details, health information, policy details, and browsing data. Sources include direct submissions via forms, cookies, third-party insurers, and publicly available records where permitted under Singapore law.
Purposes of Processing and Legal Basis
Data is processed to provide health insurance quotes, manage policies, comply with regulatory requirements, improve services, and send relevant updates. Each purpose relies on consent, contractual necessity, or legitimate interests as defined under the Personal Data Protection Act.
Requirement to Provide Data
Supplying certain personal data is necessary to obtain insurance quotes or services. Failure to provide it may prevent us from offering or fulfilling health insurance contracts.
Cookies and Similar Technologies
We use cookies for functionality, analytics, and personalisation. Please refer to our separate Cookie Policy available on this site for detailed information on how these technologies operate and your choices regarding them.
Processors, Recipients and Disclosures
Personal data may be shared with authorised service providers such as claims administrators, reinsurers, and regulatory bodies when required by law. All recipients are bound by confidentiality obligations consistent with Singapore's data protection rules.
International Transfers
Where data is transferred outside Singapore, we ensure appropriate safeguards such as contractual clauses or consent are in place to protect your information in line with PDPA requirements.
Retention Periods
Personal data is retained only for as long as necessary to fulfil the purposes outlined, meet legal obligations, or resolve disputes, typically up to seven years after policy termination unless extended by regulatory needs.
Security and Data Minimisation
We implement reasonable technical and organisational measures to safeguard data and collect only the minimum information required for each purpose. No security system is infallible, and users should take their own precautions.
Data Subject Rights
You have rights to access, correct, and request withdrawal of consent regarding your personal data. To exercise these rights, contact us using the details on our Contacts page or by emailing [email protected].
Withdrawing Consent and Objecting to Marketing
You may withdraw consent or object to direct marketing and profiling at any time by using the unsubscribe links in communications or by writing to [email protected]. Such actions will not affect processing carried out before withdrawal.
Right to Complain
If you are dissatisfied with our handling of your data, you may lodge a complaint with the Personal Data Protection Commission of Singapore at their official channels.
Children and Age Restrictions
Our services are intended for adults aged 18 and above. We do not knowingly collect personal data from minors without parental consent, and any such data will be deleted upon discovery.
Automated Decision-Making and Profiling
We may use automated tools for risk assessment in insurance applications. You have the right to request human review of any decision that significantly affects you.
Policy Changes
We may update this policy periodically. Continued use of the site after changes constitutes acceptance. The effective date is indicated at the top of this page.