Who we are. SMEinsurance.com.sg ("the Site") is operated by Red Reef Pte Ltd ("we", "us"), a company registered in Singapore. This policy explains how we collect, use, disclose and protect personal data in accordance with the Personal Data Protection Act 2012 (PDPA).
1. What we collect
When you submit an enquiry form we collect: your name, company name, mobile number, email address, a description of your insurance needs, the page you enquired from, and a record of your consent — the exact wording you agreed to, its version, and the date and time you gave it. We also log standard technical data (such as country of connection) for security and fraud prevention. We do not knowingly collect personal data beyond what the form asks for, and we do not collect NRIC numbers.
2. Why we collect it
We collect and use your data for one primary purpose: to pass your enquiry to a licensed insurance intermediary so they can contact you with business insurance quotes. Secondary purposes are: verifying enquiries are genuine, maintaining records of consent, responding to your requests, and improving the Site.
3. Consent and disclosure
We only pass your details on if you have ticked the consent box on the form, which records your agreement for us to collect, use and disclose the data you provided to licensed insurance intermediaries for quotation purposes. We disclose your enquiry to the specific professional handling it — we do not sell, rent or broadcast your personal data to marketing lists or multiple bidders. The intermediary who receives your enquiry is independently responsible for their own PDPA obligations once they hold your data.
4. Withdrawal of consent, access and correction
You may at any time withdraw consent, request a copy of the personal data we hold about you, or ask us to correct it, by emailing dpo@smeinsurance.com.sg. We will process withdrawal and deletion requests within 10 business days and inform the intermediary your enquiry was passed to. Withdrawing consent means we can no longer progress your enquiry.
5. Retention
We retain enquiry records (including the consent record) for as long as needed to fulfil the purpose above and to meet legal and audit obligations, after which they are securely deleted. Enquiries that do not proceed are deleted no later than 12 months after submission.
6. Protection and storage
Enquiries are transmitted over encrypted connections (HTTPS) and access is limited to personnel who need it to process your enquiry. Our infrastructure providers may store data on servers outside Singapore; where they do, we take reasonable steps to ensure a standard of protection comparable to the PDPA, as the Act requires.
7. Cookies and analytics
The Site uses only the minimum cookies or similar technologies needed for it to function and for privacy-respecting, aggregate analytics. We do not run advertising trackers or sell browsing data.
8. Do Not Call Registry
The consent you give on the enquiry form includes consent to be contacted by phone call, SMS, WhatsApp or email about that enquiry, by the licensed insurance intermediary we pass it to — even if your Singapore number is listed on the Do Not Call Registry. This is permitted under the PDPA's consent provisions, and it applies to your enquiry only: it is not consent to unrelated marketing, and it does not pass to anyone else.
We keep the record of that consent — the wording shown to you, its version, and the timestamp — and provide it to the intermediary with your enquiry, so the basis for contacting you is documented on both sides. You can withdraw consent at any time using the contact details in section 4, after which neither we nor the intermediary may rely on it.
9. Contact and complaints
Our Data Protection Officer can be reached at dpo@smeinsurance.com.sg. If you are not satisfied with our response, you may contact Singapore's Personal Data Protection Commission (PDPC).
10. Changes
We may update this policy from time to time; the version on this page is the current one. Material changes will be dated here.
Last updated: 30 August 2026