Mitsui Bussan Pana Harrison Pte Ltd (“MBPH”, “the Company”, “we”, “us”, “our”) is committed to safeguarding the privacy and confidentiality of personal data entrusted to us.

We adhere to the requirements of the Personal Data Protection Act 2012 (“PDPA”) of Singapore and other applicable regulations. This Privacy Policy outlines how we collect, use, disclose, process, store and protect your personal data.

This Policy applies to all employees, contractors and third party service providers engaged by the Company.

We respect your privacy and are committed to ensuring that your personal data is:

• Collected lawfully and fairly
• Used only for legitimate and informed purposes
• Accurate, complete and kept up to date
• Adequately protected against unauthorised access, use or disclosure
• Retained only as long as necessary to fulfil its purpose or legal obligations

In the course of our business activities, MBPH may collect from data subjects, through various means, including via referrals, introducers, events (eg. roadshows and seminars), digital platforms, social media, third-party partners (where consent has been obtained) and via forms (eg. fact find form, survey, feedback forms).

The personal data collected may include:

• Identification details (e.g. name, NRIC/FIN, passport number, date of birth, nationality)
• Contact information (e.g. residential address, telephone number, email address)
• Financial information (e.g. income, assets, liabilities, bank details, investment objectives)
• Employment and educational background (e.g. employment history, qualifications)
• Family and beneficiary information (e.g. marital status, dependants, nominees)
• Insurance and risk-related information (e.g. existing policies, claims history, underwriting information)
• Non-medical disclosures relevant to underwriting
• Any other information provided through forms, correspondence, or interactions with us

Our website may use cookies and similar tracking technologies to:

• Improve user experience
• Analyse website traffic and usage patterns
• Enhance website functionality

You may control or disable cookies through your browser settings. Please note that disabling cookies may affect certain features and performance of the website.

We collect, use and disclose your personal data for the following purposes:

(a) Service Provision & Advisory

• Identifying your financial needs and risk profile
• Providing financial planning and insurance advisory services
• Recommending suitable products from insurers and partners

(b) Policy Administration & Servicing

• Processing applications (insurance, investment, underwriting)
• Managing your policies and accounts
• Handling claims and servicing requests

(c) Operational & Business Functions

• Managing client relationships
• Responding to enquiries and instructions
• Issuing documents (eg. Policy invoices, statements, notices and correspondence

(d) Compliance & Risk Management

• Conducting due diligence, AML/CFT checks, and sanctions screening
• Preventing fraud, misconduct or unlawful activity
• Complying with legal, regulatory, and audit requirements

(e) Third-Party Engagement

We may disclose your personal data to:

• Insurers, reinsurers and product providers
• Service providers (eg. IT, payment processing, administration)
• Professional advisers (eg. legal, audit, compliance)
• Regulators and authorities where required by law

(f) Cross-Border Transfers

Where necessary, your personal data may be transferred outside Singapore. We will take reasonable steps to ensure that such transfers are in compliance with the PDPA requirements and that the receiving parties provide a standard of protection comparable to that under the PDPA.

You have the right to withdraw your consent for us to provide you with marketing, advertising and promotional information, which we believe may be of interest or benefit to you. You can do so by sending us the completed ‘Withdrawal of Marketing Consent Form” available on our website. The withdrawal of consent will come into effect within 30 working days upon receipt of your ‘Withdrawal of Marketing Consent Form’.

(g) Marketing (Optional)

We may use your personal data to provide you with information on products, services or promotions that may be of interest.

You may withdraw your consent for marketing communications at any time. Such requests will generally be processed within 30 days.

By providing your personal data to us, you consent to our collection, use, and disclosure of your personal data for the purposes stated in this Policy.

You may withdraw your consent at any time by contacting our Data Protection Officer (“DPO”).

Please note that:

• Withdrawal of consent may affect our ability to provide certain services; and
• We may continue to process your data where such processing is required or authorised under applicable law

We take reasonable steps to ensure that personal data we collect is accurate, complete and kept up to date.

You are encouraged to notify us promptly of any changes to your personal data so that we can update our records.

We implement appropriate administrative, technical and physical safeguards to protect your personal data, including:

• Role-based access controls (need-to-know basis)
• Encryption and secure data transmission
• Secure storage and document management practices
• Confidentiality obligations and regular staff training

We retain personal data only for as long as:

• It is necessary to fulfil the purposes for which it was collected; or
• Required by legal, regulatory or business obligations

Thereafter, personal data will be securely deleted, anonymised, or destroyed.

You have the right to:

• Request access to your personal data
• Request correction of any inaccuracies

Requests may be submitted to the DPO with appropriate identification and supporting documents.

• We may charge a reasonable administrative fee (currently S$30)
• Requests will generally be processed within 30 business days

For enquiries, feedback, or requests relating to your personal data, please contact:

Data Protection Officer

Email: ask@mitsui-panah.com

Address: 20 McCallum Street

We may update this Privacy Policy from time to time to reflect changes in legal, regulatory, or business requirements.

The latest version will be made available on our website. Continued use of our services constitutes your acceptance of the updated Policy.