elseco Asia Pte. Ltd.

Privacy Policy

Last updated: October 2026

1. Introduction and definitions

1.1 elseco Asia Pte. Ltd., a company incorporated in Singapore (UEN 202622518M) whose registered address is 60 Paya Lebar Road, #07-45, Paya Lebar Square, Singapore 409051 (“we”, “us” or “our”) is committed to protecting Personal Data in accordance with the Personal Data Protection Act 2012 (“PDPA”).

1.2 This Privacy Policy sets out the basis on which we collect, use, disclose and otherwise process Personal Data, the circumstances in which we do so, and the rights available to you in respect of your Personal Data. By accessing the Website, submitting an enquiry through it, or otherwise providing Personal Data to us, you acknowledge that you have read and understood this Privacy Policy.

1.3 This Privacy Policy applies to Personal Data collected through www.else.co/singapore (the “Website”) and through communications between you and us arising from the Website and relating to an enquiry made through the Website. It forms part of, and must be read together with, our Website Terms of Use (www.else.co/terms-singapore).

1.4 In this Privacy Policy:

(a) “DPO” means our Data Protection Officer referred to in clause 10;

(b) “PDPC” means the Personal Data Protection Commission of Singapore;

(c) “Personal Data” means data about an individual who can be identified from that data, or from that data and other information to which we have or are likely to have access; and

(d) “You” (or “your”) means any individual whose Personal Data is collected, used or disclosed through the Website.

2. Personal data we collect

2.1 We may collect the following Personal Data that you provide to us directly through our enquiry form or otherwise when you contact us:

(a) your first name and last name;

(b) your email address;

(c) your telephone number, where you select to provide it;

(d) your company name, where you select to provide it;

(e) your capacity in contacting us (for example, as an insurance broker, client or other visitor), where you select to provide it;

(f) the details of your enquiry and the contents of any attachment you upload; and

(g) your contact preferences and your selection (if any) to receive communications.

2.2 We may collect the following technical data automatically when you visit the Website: IP address; browser type and version; device information; and cookie identifiers (see clause 9).

2.3 You must not include sensitive Personal Data (including health, financial or identity document information) in your enquiry or in any attachment. You are responsible for ensuring that any Personal Data of a third party that you provide to us is provided with that third party’s authority and consent.

2.4 The Website is not directed at individuals under 18 years of age, and we do not knowingly collect their Personal Data. If you are under 18, you should have a parent or legal guardian contact us on your behalf.

2.5 At the point at which Personal Data is collected through our enquiry form, we display a notice of the purposes for which it is collected, used and disclosed, together with a link to this Privacy Policy.

3. Purposes of collection, use and disclosure

3.1 We collect, use and disclose Personal Data for the following purposes:

(a) to receive, route and respond to your enquiry and to provide the information or services you request;

(b) to communicate with you using the contact method you have indicated;

(c) where you have given consent, to send you news, updates and information about our services;

(d) to operate, maintain and secure the Website;

(e) to detect, prevent and address fraud, security incidents and technical problems; and

(f) to comply with applicable laws, regulations and legal processes.

3.2 We will not use your Personal Data for a purpose other than those stated in clause 3.1 unless we have notified you of the new purpose and, where required by the PDPA, obtained your consent.

4. Basis for collection, use and disclosure

4.1 We collect, use and disclose Personal Data only on one or more of the following bases under the PDPA:

(a) consent, where you have given your consent, including by selecting the marketing consent option on our enquiry form;

(b) deemed consent, where you voluntarily provide Personal Data to us for a purpose that is reasonable and apparent in the circumstances, including by submitting an enquiry so that we may respond to it; and

(c) legal requirement or exception, where the PDPA or another written law requires or permits us to collect, use or disclose Personal Data without consent.

4.2 We keep a record of each consent given through the Website, including the date and the wording presented to you at the time, for as long as we rely on that consent.

5. Disclosure to third parties

5.1 We do not sell Personal Data. We may disclose Personal Data to the following categories of recipients, to the extent reasonably necessary for the purposes in clause 3.1:

(a) service providers acting on our behalf;

(b) professional advisers, including lawyers, accountants and auditors;

(c) government, regulatory and law enforcement authorities, where required by law or in response to a valid legal request;

(d) any actual or prospective purchaser or successor in connection with a merger, acquisition or sale of all or part of our business or assets; and

(e) our insurers and underwriting partners, where your enquiry requires it.

5.2 We require each service provider that processes Personal Data on our behalf to protect that Personal Data to a standard consistent with the PDPA and to use it only for the purposes for which it was disclosed.

6. Location of personal data and overseas transfers

6.1 Personal Data may be stored or processed in Singapore or other jurisdictions, depending on the location of our service providers and the infrastructure used to operate the Website and provide our services.

6.2 Where Personal Data is transferred outside Singapore, we will take appropriate steps to ensure that the recipient provides a standard of protection to the Personal Data that is comparable to the protection required under the PDPA, including, where appropriate, through contractual arrangements or other legally recognised safeguards.

6.3 We will implement and maintain appropriate measures to support compliance with the applicable requirements of the PDPA in relation to any overseas transfer of Personal Data.

7. Retention

7.1 We retain Personal Data only for as long as is necessary to fulfil the purposes for which it was collected or as required by law, as follows:

Category of Personal Data	Retention period
Enquiry form submissions and attachments	The period necessary to deal with your enquiry and 12 months thereafter
Marketing contact details	Until you withdraw your consent or unsubscribe
Website analytics data	14 months
Records required to be kept by law	The period required by the relevant law

7.2 When Personal Data is no longer required for any legal or business purpose, we will securely delete it or render it anonymous. We will consider in good faith any request that we delete Personal Data that is no longer needed.

8. Your rights

8.1 Subject to the PDPA, you have the right to:

(a) access: request access to the Personal Data we hold about you and information about how it has been used or disclosed in the preceding year. We will respond within 30 days after receiving your request or, if we are unable to do so, notify you of the time by which we will respond. We may charge a reasonable fee for access, and will notify you of the fee before processing the request;

(b) correction: request that we correct any error or omission in the Personal Data we hold about you, which we will do as soon as practicable; and

(c) withdrawal of consent: withdraw any consent you have given to our collection, use or disclosure of your Personal Data at any time, on reasonable notice. We will process your request within 10 business days. We will inform you of the likely consequences of withdrawal, which may include our inability to respond to your enquiry or provide certain services. You may also withdraw consent to marketing communications by using the unsubscribe link in any such communication.

8.2 You may exercise these rights by contacting the DPO using the details in clause 10. We may require you to verify your identity before acting on a request, and we may decline a request to the extent the PDPA permits.

9. Cookies

9.1 The Website uses cookies and similar technologies. Cookies are small text files placed on your device that enable a website to recognise your browser.

9.2 We use only essential cookies, which are necessary for the Website to function and to be secure. We do not use analytics, advertising or marketing cookies.

9.3 Necessary cookies do not require your consent and cannot be switched off through the Website. You may block or delete cookies through your browser settings, but if you do so, parts of the Website may not function properly.

9.4 The essential cookies we use are set out below:

Cookie name	Purpose	Duration
Crumb	Prevents cross-site request forgery, protecting forms on the Website	Session
Test	Checks whether your browser supports cookies and prevents errors	Session
RecentRedirect	Prevents redirect loops where the Website redirects a web address	30 minutes
SS_HAS_LANDED	Distinguishes a first visit from a later visit (stored as local storage)	Persistent

10. Data protection officer

10.1 We have appointed a Data Protection Officer to oversee our compliance with the PDPA. The DPO may be contacted as follows:

Data Protection Officer

Email: dpo@elsecoasia.sg

Address: 60 Paya Lebar Road, #07-45, Paya Lebar Square, Singapore 409051

10.2 Any question about this Privacy Policy, any request to exercise your rights, and any concern about our handling of Personal Data should be addressed to the DPO.

11. Security and data breaches

11.1 We make reasonable security arrangements to protect Personal Data in our possession or under our control against unauthorised access, collection, use, disclosure, copying, modification, disposal and similar risks, and against the loss of any storage medium or device on which Personal Data is stored. Those arrangements include access controls limiting access to authorised personnel, encryption of data in transit, regular software updates and security reviews, staff training on data protection, and secure disposal of records.

11.2 No method of transmission over the Internet or of electronic storage is completely secure, and we do not guarantee the absolute security of Personal Data.

11.3 If a data breach occurs that the PDPA requires us to notify, we will notify the PDPC and any affected individuals within the time and in the manner required by the PDPA.

12. Complaints

12.1 If you have any questions or concerns about your Personal Data, please contact the DPO using the details in clause 10. You may alternatively contact the PDPC:

(a) Website: www.pdpc.gov.sg;

(b) Email: info@pdpc.gov.sg.

We encourage you to raise your concern with the DPO first so that we may seek to resolve it.

13. Changes to this privacy policy

13.1 We may amend this Privacy Policy at any time by publishing the amended version on the Website, and the amendment takes effect on publication unless stated otherwise. The “Last updated” date above shows when we last changed it.

13.2 Where an amendment is material, we will post a notice on the Website. Your continued use of the Website after an amendment takes effect constitutes your acknowledgement of the amended Privacy Policy, without prejudice to any right to withdraw consent under clause 8.

13.3 This Privacy Policy is governed by the laws of Singapore and, subject to the PDPA, any dispute arising from it is subject to the non-exclusive jurisdiction of the courts of Singapore.