Privacy Policy

Last updated: 23 September 2026

Identity and Role of the Data Controller

celebwaveix operates as the data controller for personal data processed through this commercial website. We are a Singapore-registered company providing health insurance products and related services. Our registered address is 1 Finlayson Green, Singapore 049246. We determine the purposes and means of processing personal data in accordance with the Personal Data Protection Act 2012 of Singapore.

Scope of This Notice

This privacy policy applies to all visitors, prospective customers, policyholders and website users located in Singapore or accessing our services from Singapore. It covers data collected via the website, contact forms, policy applications and any related interactions. It does not apply to third-party websites linked from our pages.

Categories of Personal Data and Sources

We collect identification data such as name and identification number, contact details including email and phone, health and medical information necessary for underwriting, financial details for premium payments, and technical data from device interactions. Data is obtained directly from you through forms, indirectly from healthcare providers with consent, and automatically through cookies and server logs.

Purpose-by-Purpose Processing and Legal Basis

Data is processed to assess insurance applications and issue policies on the basis of contractual necessity. Health data is processed to manage claims and provide customer support under explicit consent or legitimate interests balanced against your rights. Marketing communications occur only with consent. Compliance with regulatory obligations forms another legal basis for record-keeping and fraud prevention.

Requirement to Provide Data and Consequences

Supplying certain personal data is mandatory to obtain a health insurance quote or policy. Failure to provide required information may prevent us from offering coverage or processing claims. Optional data, such as marketing preferences, can be withheld without affecting core services.

Cookies and Similar Technologies

We use cookies and similar tracking technologies to improve site functionality, analyse usage and personalise content. A separate Cookie Policy explains the types of cookies deployed and your options for managing preferences. Please refer to that document for full details.

Processors, Recipients and Legal Disclosures

Personal data may be shared with authorised service providers such as reinsurers, claims administrators, payment processors and IT hosting companies under contractual safeguards. We may disclose information when required by law, court order or regulatory authority including the Monetary Authority of Singapore.

International Transfers and Safeguards

Some processors are located outside Singapore. In such cases we rely on contractual clauses, binding corporate rules or other mechanisms recognised under the PDPA to ensure an adequate level of protection.

Retention Periods

Policy-related data is retained for the duration of the contract plus seven years to meet statutory limitation periods. Marketing consent records are kept until consent is withdrawn. Technical logs are deleted after twenty-four months unless required for security investigations.

Security and Data Minimisation Practices

We implement reasonable administrative, technical and physical measures to protect personal data against unauthorised access or loss. Data collection is limited to what is necessary for the stated purposes and access is restricted to authorised personnel.

Data Subject Rights and Exercise Methods

You may request access, correction, withdrawal of consent or erasure of your personal data by contacting us at [email protected] or 1800 248 8000. Requests are handled within the timelines prescribed by the PDPA. A practical method includes submitting a written request via the contact form on our Contacts page or by email.

Withdrawal of Consent and Objection to Marketing

You can withdraw consent for marketing at any time through the unsubscribe link in emails or by notifying us directly. Objections to profiling for insurance purposes will be considered on a case-by-case basis where alternative processing methods are feasible.

Right to Complain to the Supervisory Authority

If you are dissatisfied with our response you may lodge a complaint with the Personal Data Protection Commission of Singapore at its official address or through its website.

Children and Age Restrictions

Our health insurance products are intended for individuals aged eighteen and above. We do not knowingly collect personal data from minors without parental consent. If we become aware that data from a child has been collected without appropriate consent we will delete it promptly.

Automated Decision-Making and Profiling

Underwriting processes may involve automated scoring based on health and risk factors. You have the right to request human review of any decision that produces legal or significant effects. Details of such requests can be submitted to [email protected].

Policy Changes and Effective Date

We may update this policy periodically to reflect changes in law or business practices. The effective date appears at the top of the page. Continued use of the site after updates constitutes acceptance of the revised terms.