Privacy Policy
Last updated on 17 September 2026.
Identity and Role of the Data Controller
curtainryze operates as the data controller for personal data collected through this website. We are a Singapore-based provider of health insurance products and services. Our registered address is 75 Bras Basah Road, Income Centre, Singapore 189557. For any privacy-related enquiries please contact us via [email protected] or +65 6788 1777.
Scope of This Notice
This privacy policy applies to all visitors and users of our website who are located in Singapore or who interact with our health insurance offerings. It covers personal data collected online and offline in connection with our commercial services.
Categories of Personal Data and Sources
We collect identification details, contact information, health and medical history, financial data for premium payments, and website usage information. Data is obtained directly from you, from your healthcare providers with your consent, from publicly available sources, and through cookies and analytics tools.
Purposes of Processing and Legal Bases
We process data to underwrite and administer health insurance policies, assess claims, prevent fraud, comply with regulatory obligations, and improve our services. The legal bases include contractual necessity, legal obligations under Singapore law, and legitimate interests balanced against your rights. For marketing we rely on consent.
Requirement to Provide Data and Consequences
Supplying certain personal data is necessary to obtain insurance quotes or enter into policies. Failure to provide it may prevent us from offering coverage or processing claims.
Cookies and Similar Technologies
We use cookies for essential site functions, analytics, and personalisation. Please refer to our separate Cookie Policy for full details on cookie types and management options.
Processors, Recipients and Disclosures
We share data with authorised service providers such as claims administrators, reinsurers, IT hosting companies and legal advisors. Disclosures may also occur when required by Singapore regulatory authorities or court orders.
International Transfers
Where data is transferred outside Singapore we ensure appropriate safeguards including contractual clauses approved by the Personal Data Protection Commission are in place.
Retention Periods
Personal data is retained for the duration of the insurance policy plus seven years thereafter to meet regulatory and tax requirements, after which it is securely deleted or anonymised.
Security and Data Minimisation
We implement technical and organisational measures such as encryption and access controls to protect data. We collect only the minimum data necessary for the stated purposes.
Data Subject Rights
You have rights to access, correct, withdraw consent where applicable, and request deletion of your personal data. To exercise these rights submit a request using the contact form on our Contacts page or email [email protected].
Withdrawal of Consent and Objection to Marketing
You may withdraw consent at any time by contacting us. You can also opt out of direct marketing communications through links provided in emails or by updating your preferences.
Right to Complain
If you are dissatisfied with our handling of your data you may lodge a complaint with the Personal Data Protection Commission of Singapore.
Children and Age Restrictions
Our services are intended for adults. We do not knowingly collect personal data from individuals under 18 without verified parental consent.
Automated Decision-Making and Profiling
We may use automated tools for risk assessment in insurance applications. You have the right to request human review of any automated decision that significantly affects you.
Policy Changes
We may update this policy from time to time. The current version is always available on our website with the effective date shown at the top.