Respecting your privacy in Singapore

At Sun Life Assurance Company of Canada Singapore Branch (“we”, “us”, or “our”), protecting your personal data is one of our highest priorities. We are committed to handling your personal data responsibly and transparently. This Notice outlines how we collect, use, disclose, and otherwise process your personal data in compliance with the Personal Data Protection Act (“PDPA”). It applies to all personal data in our care, including information managed by trusted partners and service providers acting on our behalf.

Personal data refers to any information that can identify you either on its own or together with additional data we may access. We use and disclose your personal data only for purposes for which it was collected and never sell your information.

What personal data we collect from you

Depending on the products, services, and your interactions with us, the types of information we may collect include:

• Contact details such as your name, mailing address, email address, and phone number
• Demographic information such as your age, employment or business details, marital status, beneficiary details, nationality, and residence details
• Health information, such as lifestyle habits, health and smoking status, medical history, diagnoses, and family medical information
• Financial information such as budget, investment funds and accounts, other insurance policies, tax-related details, retirement goals, source of income, assets and liabilities, bank details, risk tolerance (including your financial needs), and company-related information for business owners
• Family-related and business associates' information such as that of your immediate family members, business partners and close associates
• Identifiers such as bank account number and government issued identification documents
• Supporting documents such as tax related documents, bank statements, identity verification materials, wills, proof of relationship, power of attorney
• Information related to your interactions with us, such as survey responses and complaint records
• Records collected from our websites, including the visitor’s IP address, number of new and repeat visitors, records of how long the visitors visit, the geographic location of the visitors and similar details, interactions with online advertisements. All such information is collected in an aggregate and anonymous format. You are not required to provide personal information to use our websites, unless a feature requires it.

We generally only collect your personal data when you provide it to us either directly or via a third party who has been duly authorised to disclose your personal data to us.

How We Use and Share Your Personal Data

We may collect, use and/or share your personal data for purposes including, but not limited to:

• Fulfilling our obligations in connection with the products and services you have requested
• Verifying your identity
• Responding to, handling, and processing queries, requests, applications, complaints, and feedback from you
• Managing your relationship with us
• Processing payments or credit transactions
• Complying with applicable laws, regulations, guidelines, or to assist in law enforcement and investigations conducted by any governmental, industry associations and/or regulatory authority
• Purposes for which you have provided the information (including marketing consent and surveys)
• Transmitting to our Head Office, subsidiaries or affiliates
• Transmitting to third parties including our service providers, outsourced vendors, distributors, reinsurers, medical providers, industry associations, and relevant governmental and/or regulatory authorities
• Transmitting to auditors, court of law and tribunals and
• Other incidental business purposes related to or in connection with the above

These purposes may continue to apply even after your relationship with us has ended or altered in any way, for a reasonable period thereafter (for example, as needed to enforce our contractual rights).

If your personal data needs to be transferred outside Singapore, we will ensure that your data continues to be protected as required under the PDPA.

Protecting Your Personal Data

We implement robust technical, physical, and organisational safeguards to protect your personal data from loss, theft, unauthorised access, disclosure, copying, use, or modification. Access to your data is limited strictly to those who have a business need to know.

Our online security safeguards include a wide range of technical solutions and security practices designed to work together to keep your personal data safe. If we become aware of any breach of your personal data, we will notify you as required under PDPA. For more information, please visit our Security pages.

Keeping Your Personal Data Accurate

We generally rely on the personal data provided by you or your authorised representative. To help us keep your information current, complete, and accurate, kindly update us as soon as there are any changes to your personal data. You can do this through your authorised representative or by contacting us directly using the contact details below.

Accessing or Correcting Your Personal Data

If you would like to:

• Request for access to a copy of the personal data which we hold about you or information about the ways in which we use or disclose your personal data, or
• Request a correction or update to your personal data,

you may submit your request by using the contact details provided below.

Please note that a reasonable fee may apply for access requests. If so, we will inform you of the fee before processing your request.

We will acknowledge your request within 14 calendar days of receipt. If we are unable to fulfil your request within 30 calendar days, we will inform you of the expected timeframe. Should we be unable to provide or correct your data, we will explain the reasons, unless we are not required to do so under the PDPA.

Withdrawing Your Consent

Your consent for the collection, use, and disclosure of your personal data (including marketing consent) remains valid until you choose to withdraw it in writing. To withdraw your consent, please submit a written request via the contact details below.

We will acknowledge your request within 14 calendar days of receipt. If we are unable to process your request within 30 calendar days, we will inform you of the expected timeline.

Whilst we respect your decision to withdraw your consent, please note that depending on the nature and scope of your withdrawal request, we may not be able to continue providing the product or service rendered to you. Should this request result in the termination of your insurance contract we will notify you before processing your request. Should you wish to cancel your withdrawal of consent, please inform us in writing in the manner described below.

Withdrawing consent does not affect our right to continue to collect, use and disclose personal data where such collection, use and disclose without consent is permitted or required under applicable laws.

Legitimate Interests Exception

In compliance with the PDPA, we may collect, use or disclose your personal data without your consent for the legitimate interests of Sun Life Assurance Company of Canada Singapore Branch. In line with the legitimate interests’ exception, we will collect, use or disclose your personal data such as for the following purposes:

• Fraud detection and prevention; and
• Detection and prevention of misuse of services.

Retention of Personal Data

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required or permitted by applicable laws. Once your data is no longer needed for those purposes, or retention is no longer necessary for legal or business reasons, we will securely delete or anonymise it so it can no longer be linked to you.

Use of Advanced Data Analytics

We use data analytics, including artificial intelligence to gather more meaningful insights. As a result, we’re able to: 

• make better decisions about our business processes 
• offer you more relevant products and services
• personalize interactions through all our communication channels 

We use multiple data points collected through various business lines and communication channels to understand your needs.  

We use your information for analytics in a respectful and fair manner. Whenever possible, we de-identify it to further protect your privacy. We are taking steps to ensure our use of data doesn’t introduce unintended bias. Our goal is to always treat you fairly.   

Insights from data analytics helps us be more relevant to you and conduct our business in a more efficient way. We also use analytics insights to innovate and implement new technologies and automation.

Contact Our Data Protection Officer

You may contact our Data Protection Officer if you have any enquiries or feedback on our personal data protection policies and procedures, or if you wish to make any request, in the following manner:

Name: The Data Protection Officer
Email: clientforlife.sg@sunlife.com
Address: 50 Raffles Place, #26-04 Singapore Land Tower, Singapore 048623

Last updated: August 2026