Privacy Policy — Elanthor

To ensure clarity, the terms used in this policy are defined as follows. These definitions apply throughout the document and reflect common usage in data protection practice.

Elanthor collects personal data to provide expert insurance consulting and manage client relationships. Data collection is limited to what is necessary to advise on policy selection, underwriting considerations and ongoing client support, and is handled in accordance with applicable law and professional confidentiality norms.

We collect personal data you provide when you engage Elanthor, request advice, submit applications or communicate with our advisors. This information is necessary for professional assessment and service delivery.

• Identity and contact details: full name, preferred name, residential address, email address and telephone number to establish and maintain the client relationship.
• Insurance and business information: details of existing policies, coverage history, beneficiaries, policy numbers, premium payment records and business details required to advise on suitability of plans.
• Health and medical information: medical history, current health status and medical reports when necessary for underwriting or policy assessment; such data is treated with heightened confidentiality.
• Identification and verification data: government identification numbers or documents when required for identity verification and application processing, provided in accordance with applicable law and minimization principles.
• Communications and preferences: records of communications with our advisors, stated service preferences and consent choices used to tailor service delivery and notifications.
• Payment and billing details: bank account or card information and transactional records necessary to process fees and premium administration through secure payment partners.

When you interact with our website and digital services, we automatically collect device and usage data to operate services securely, improve user experience and perform analytics.

• Device and technical information: IP address, browser type and version, operating system, device identifiers and connection data used for security and compatibility.
• Usage data: pages visited, time spent on pages, clicks and navigation patterns to help us refine content and identify usability improvements.
• Analytics and performance data: aggregated metrics collected via analytics services to monitor site performance and measure the effectiveness of informational content.
• Cookies and session identifiers: information stored in cookies to manage sessions, remember preferences and support authentication where permitted.
• Error and diagnostic logs: logs generated by servers and applications that record errors, access attempts and performance issues for operational security and troubleshooting.
• Location metadata: coarse geographic data derived from IP addresses to provide region‑appropriate content and regulatory disclosures.

Elanthor may share personal data with third parties strictly for service delivery, regulatory compliance and operational purposes. Sharing is limited to necessary recipients and governed by contractual safeguards.

• Insurance companies and underwriters: to obtain quotes, process applications and manage policy issuance and claims in line with your instructions.
• Payment processors and banking partners: to facilitate fee collection and premium handling using secure, PCI‑compliant services.
• Professional advisers and service providers: actuaries, legal advisers, medical consultants and IT or analytics service providers engaged to support our professional services under confidentiality obligations.

We process personal data for specific, documented purposes necessary to provide professional insurance consulting and to meet legal and contractual obligations. Processing is limited to relevant and proportionate activities.

• Provision of consulting services: assess needs, compare policies, prepare recommendations, and support decision‑making for senior clients seeking appropriate coverage.
• Policy application and administration: prepare and submit applications, coordinate underwriting, manage endorsements and maintain policy records.
• Payment processing and business administration: process payments, issue receipts and reconcile accounts in support of service delivery.
• Compliance and regulatory obligations: comply with anti‑funds laundering, record keeping and insurer reporting requirements as required by Singapore law.
• Security and fraud prevention: detect, contribute and prevent fraudulent activity or misuse of services and systems.
• Service improvement and analytics: analyze anonymized usage data to improve our offerings, digital interfaces and client communications.
• Client communications and support: respond to inquiries, manage appointments and provide post‑placement service and ongoing advice.
• Legal claims and dispute resolution: process data necessary to defend our legal interests or to respond to lawful requests from authorities.

Where applicable law requires us to identify a legal basis, we rely on the following bases for processing personal data. Processing is always limited to what is necessary for the stated purpose.

• Performance of a contract: processing necessary to enter into or perform insurance advisory services and related agreements you request.
• Consent: where you have provided explicit consent for specific processing activities such as direct marketing or certain uses of sensitive data for underwriting.
• Legal or regulatory obligation: processing required to meet statutory obligations under Singapore law and other applicable regulations.
• Legitimate interests: processing necessary for legitimate business interests such as security, fraud prevention and improving our services, balanced against individual rights and freedoms.

Elanthor uses cookies and similar technologies to provide essential site functionality, measure site performance and support optional features. You can manage cookie preferences through your browser or our cookie consent tool.

We use session cookies for site functionality, persistent cookies for remembering preferences, performance cookies for analytics and third‑party cookies when embedding external content or services.

Cookie categories include: strictly necessary (required for site operation), preferences (store display and language settings), analytics (collect usage metrics) and marketing (third‑party tracking for advertising where applicable).

You can manage cookies in your browser settings or via the cookie consent controls on our site. Disabling certain cookies may affect site functionality and the ability to receive tailored content.

Detailed cookie information and preference controls are available in our Cookie Policy page.

We share personal data only for legitimate business purposes and with appropriate safeguards. Third‑party recipients are subject to contractual commitments to protect the data and use it only for agreed purposes.

• Contractual service providers performing services on our behalf are given access only to the data necessary to perform their role and are bound by confidentiality obligations.
• Regulatory and law enforcement authorities, where disclosure is required by law, court order or official request.
• Insurance carriers and reinsurers involved in underwriting, policy placement and claims handling.
• Professional advisers such as legal counsel and auditors when required to obtain independent professional services.
• Payment processors and business institutions for the processing of payments and anti‑fraud checks.
• Technical platform providers and analytics vendors for website hosting, security, performance and aggregated analytics.

Some processing activities may involve transfer of personal data to recipients located outside Singapore. Transfers are carried out only when necessary for service delivery and are subject to appropriate safeguards consistent with applicable data protection laws.

Where data is transferred internationally, Elanthor implements safeguards such as contractual data protection clauses, assessment of recipient security practices and use of service providers with recognized security certifications. Transfers are limited to jurisdictions with adequate protections or where contractual safeguards are in place.

Elanthor retains personal data only for as long as necessary to fulfil the purposes outlined in this policy, to meet legal obligations and to maintain professional records for business continuity and regulatory compliance.

Account and client records are retained for the period necessary to manage the client relationship and for a statutory retention period consistent with insurance sector record keeping requirements and our internal risk management practices.

Communications and correspondence related to policy advice, applications and claims are retained for a period appropriate to the nature of the records and regulatory expectations, subject to periodic review and secure disposal.

System logs, analytics data and backup files are retained for operational and security purposes for limited periods and are archived or deleted according to our retention schedule.

When personal data is no longer necessary and there is no legal basis to retain it, Elanthor will securely delete or anonymize the data in a manner appropriate to the sensitivity of the information.

Elanthor maintains technical and organizational measures to protect personal data against unauthorized access, loss, alteration or disclosure. Security controls are regularly reviewed and updated in line with evolving risks and industry practice.

• Encryption and access controls: data in transit and at rest is protected using industry‑standard encryption; access to systems and data is restricted on a need‑to‑know basis.
• Operational policies and staff training: staff receive role‑appropriate training on data protection, confidentiality and incident response procedures.
• Monitoring and incident response: systems are monitored for suspicious activity and we maintain incident response processes to address and remediate security events in a timely manner.

You have rights in relation to your personal data. To exercise these rights, submit a request using the contact details below. We will respond in accordance with applicable law and within reasonable timeframes.

• Right of access: you may request confirmation of whether we process your data and access to a copy of personal data we hold about you.
• Right to rectification: you may request correction of inaccurate or incomplete personal data.
• Right to erasure: where permitted by law, you may request deletion of personal data that is no longer necessary for the purposes it was collected.
• Right to restriction of processing: you may request restriction of processing in certain circumstances while data accuracy or lawful basis is verified.
• Right to data portability: where applicable, you may request a machine‑readable copy of data you have provided to us for transfer to another provider.
• Right to object: you can object to processing based on legitimate interests or for direct marketing purposes where applicable.
• Right to withdraw consent: where processing is based on consent, you may withdraw that consent at any time without affecting processing prior to withdrawal.
• Right to lodge a complaint: if you believe your rights have been infringed, you may contact Elanthor or, where applicable, the relevant supervisory authority.

Although Elanthor is based in Singapore, we recognize cross‑border considerations and the rights of data subjects under international frameworks. Where individuals are protected by the EU General Data Protection Regulation (GDPR), we will assess applicability and take appropriate measures to respect those obligations.

GDPR may apply if we process personal data of individuals located in the European Economic Area in connection with offering services to them or monitoring their behaviour. In such cases, we will implement required safeguards and honor the rights afforded by the GDPR.

• If GDPR applies, Elanthor will rely on appropriate legal bases for processing, provide necessary transparency information and respond to data subject requests in line with GDPR timelines.
• We will use appropriate transfer mechanisms such as standard contractual clauses or confirmed adequacy decisions when transferring data from the EEA to jurisdictions without an adequacy decision.
• Data subjects with rights under GDPR may contact Elanthor to exercise their rights or to request clarification about specific processing activities and safeguards in place.
• Right to lodge a complaint with a supervisory authority: Individuals who consider that the processing of their personal data infringes applicable law may lodge a complaint with the Personal Data Protection Commission (PDPC) in Singapore or pursue any other legal remedy available under local regulation.

If you believe Elanthor has mishandled your personal data, you may submit a complaint to our Data Protection Officer via the contact details below. We will record and contribute the matter, provide a written acknowledgement and an update on remedial actions where applicable. If you remain unsatisfied after internal review, you may escalate the complaint to the Personal Data Protection Commission (PDPC) in Singapore for independent review.

You have the right to access, correct, delete or restrict the processing of your personal data held by Elanthor, where such rights apply under Singapore law. To submit a formal request, please provide sufficient information to locate your records and a clear statement of the requested action. We may require identification to verify your identity before processing requests. Requests that are manifestly unfounded or excessive may be subject to reasonable limitations under applicable law.

[email protected]

We will review and respond to straightforward requests within 30 days of receipt where practicable. Complex requests or those requiring consultation with third parties may take longer; Elanthor will provide an initial acknowledgement and an estimated timeframe for completion.

Elanthor may use contact information you provide to send service-related updates, policy briefings and consultancy offers relevant to senior insurance planning. Marketing messages are sent only with consent where required by law or through an established professional relationship. We limit marketing to content that supports informed decision-making for seniors and their families in Singapore.

You can opt out of marketing communications at any time by using the unsubscribe link contained in marketing emails or by contacting our Data Protection Officer. Opting out will not prevent Elanthor from sending you operational communications about ongoing services you have requested.

Elanthor does not target services to children. We do not knowingly collect or retain personal data of individuals under 16 without verifiable parental or guardian consent. If we become aware that we have collected such data in error, we will take reasonable steps to remove it and notify the parent or guardian where appropriate.

Our website and advisory materials may reference or link to third-party websites, insurers and tools. Those third parties operate under their own terms and privacy practices; Elanthor is not responsible for third-party content, use of personal data by those parties, or any information accuracy on external sites. We recommend reviewing the privacy notice of any third party before providing personal data.

We share personal data only for legitimate business purposes and with appropriate safeguards. Third‑party recipients are subject to contractual commitments to protect the data and use it only for agreed purposes.

Detailed cookie information and preference controls are available in our Cookie Policy page.

Elanthor may update this privacy policy to reflect regulatory changes, new services, or operational adjustments. Material changes will be posted on our website and will include an updated effective date. Continued use of our services after such changes indicates acceptance of the revised policy.