Privacy Policy

Last updated: 18 September 2026

This policy explains how Legendary Consultancy Pte. Ltd. ("we", "us") collects, uses, discloses and protects personal data, in line with Singapore's Personal Data Protection Act 2012 (PDPA).

What we collect

Only what we need to compare your insurance:

• Your name and contact details
• Your vehicle registration number and vehicle details
• Your current policy details, including expiry date, excess and no-claim discount
• Your claims and driving history, where an insurer requires it to quote
• The contents of your messages to us

If you send us a photo of a document, we collect what's in that document.

We do not collect NRIC numbers, in whole or in part. We ask you to cover the NRIC number on any document before you send it. If a document reaches us with an NRIC number visible, we mask it on receipt and delete the unmasked copy — including from the message thread — within five working days. Where an insurer needs an NRIC number to issue a policy, the insurer collects it from you directly at the point of purchase. We do not collect it for them.

We do not collect payment details of any kind, and we never ask about your earnings or your borrowing. If anyone claiming to be us asks you for any of that, it isn't us — message us on our published number to check.

How you give consent

You consent to this policy when you send us your renewal notice, policy schedule or vehicle details on WhatsApp or by email. We set out these purposes before we collect anything, and we collect only what those purposes need.

Why we collect it

• To obtain insurance quotes for you from insurers on our panel
• To explain those quotes to you and answer your questions
• To arrange a policy, if you choose to take one up
• To send you service messages about your enquiry, on WhatsApp or by email
• To measure how our advertising performs, using the Meta pixel described below
• To meet our legal and regulatory obligations

We use your data for these purposes and no others. We do not sell personal data, and we do not pass your contact details to third parties for their own marketing.

If we ever want to send you a marketing message that isn't about an enquiry you started, we'll ask for your clear consent first, and you can withdraw it at any time. Before we send any marketing message to a Singapore telephone number we check the Do Not Call Registry, unless you've given us clear and unambiguous consent in writing to receive it.

Who we share it with

Insurers on our panel — only the details needed to produce a quote, and only the insurers relevant to your enquiry.

Service providers who help us operate, including our messaging and customer-record systems. They act on our instructions, may only use the data to provide their service to us, and are bound to protect it.

We may also disclose data where the law requires it.

Transfers outside Singapore

Some of the service providers we use — including WhatsApp and our customer-record system — store or process data on servers outside Singapore.

Where we transfer personal data overseas, we satisfy ourselves that the recipient is bound by legally enforceable obligations to protect it to a standard comparable to the PDPA, as section 26 of the PDPA and Regulation 10 of the Personal Data Protection Regulations 2021 require.

You can ask us where your data is held by emailing our Data Protection Officer.

How we use WhatsApp

If you message us on WhatsApp, the conversation is carried over WhatsApp's own infrastructure and is subject to WhatsApp's privacy terms as well as this policy. We keep a record of the conversation in our customer-record system.

You can stop receiving messages from us at any time by telling us to stop. We'll confirm and stop.

Cookies and advertising

This site uses two kinds of cookie. Essential cookies make the site work and can't be switched off. Analytics and advertising cookies tell us how the site is used and whether someone who saw one of our advertisements went on to visit. We ask for your consent to the second kind before we set them, and you can change your answer at any time from the link in the footer.

We use the Meta pixel. It records which pages were visited and what was clicked. It does not record what you type — this site has no forms — and we have not enabled Meta's Automatic Advanced Matching. We do not send Meta any details about your insurance or your finances.

You can also control this through your browser settings and through your ad preferences on Facebook and Instagram.

How long we keep it

We keep your data for as long as needed for the purposes above, and for as long as any legal or regulatory requirement demands.

Where you asked for a comparison and didn't proceed, we delete or anonymise your data once it's no longer needed for any business or legal purpose, and in any event within 12 months. You can ask us to delete it sooner and we will — unless a legal or regulatory requirement means we have to keep a specific record, in which case we'll tell you what we're keeping and why.

Your rights

Under the PDPA you may:

• Ask what we hold about you and how we've used it
• Correct anything inaccurate
• Withdraw consent to us contacting you or using your data. We'll act on it, and tell you if it means we can no longer help with something

Email our Data Protection Officer at dpo@legendaryconsultancy.asia.

Keeping it safe

We restrict access to those who need it, use access-controlled systems, and review those arrangements. No system is perfectly secure, but we take this seriously and we'd rather hold less of your data than more.

If something goes wrong

If a data breach happens that is likely to result in significant harm to you, or that affects 500 or more people, we notify the Personal Data Protection Commission within 3 calendar days of assessing it as notifiable, and we notify you as soon as practicable — as Part 6A of the PDPA requires.

Data Protection Officer

Write to the Data Protection Officer with any question, access or correction request, or complaint about how we handle personal data. We acknowledge within 5 working days. We respond as soon as reasonably possible, and if we cannot respond within 30 days we will tell you when we will.

Changes

We'll post any changes here with an updated date. Where we can, we'll tell you directly about material changes.