Legacy Planner a division of Income Insurance Limited

← Back to assessment

Personal Data Protection Notice

Last updated: 1 January 2026

This notice explains how Legacy Planner, a division of Income Insurance Limited (“we”, “us”, “our”), collects, uses, discloses and protects your personal data in accordance with the Personal Data Protection Act 2012 of Singapore (the “PDPA”). By submitting the retirement readiness assessment, you acknowledge that you have read and understood this notice.

1.Personal data we collect

When you use our retirement readiness assessment and interact with us, we may collect:

• Your name and contact details (mobile number and email address).
• Information you provide in the assessment, such as your age range, target retirement age, desired retirement income, current level of preparedness, and whether you hold existing retirement or estate-planning arrangements (for example CPF nomination, Lasting Power of Attorney, insurance nomination or a will).
• Technical and marketing data such as device and browser information, IP address, and identifiers from cookies and advertising tools (including the Meta Pixel and Google services).

2.How we use your personal data

We use your personal data to:

• Prepare and provide your personalised retirement assessment.
• Contact you (by phone, WhatsApp or email) to discuss your results and relevant financial-planning solutions, and to arrange a follow-up with a licensed adviser.
• Comply with applicable laws, regulations and industry requirements.
• Carry out internal analysis and improve our services and marketing.

3.Consent

By submitting the form and ticking the consent box, you consent to our collection, use and disclosure of your personal data for the purposes described above. Where we rely on your consent, you may withdraw it at any time (see section 7).

4.Who we may share it with

We may disclose your personal data to:

• Income Insurance Limited and its authorised representatives and licensed advisers, so they can follow up on your assessment.
• Trusted service providers who help us operate — for example customer-management (CRM), cloud hosting, communications and analytics providers (including GoHighLevel, Google and Meta) — who are bound by confidentiality obligations.
• Regulators, authorities or other parties where required or permitted by law.

Some of these providers may store or process data outside Singapore. Where this happens, we take steps to ensure your data receives a standard of protection comparable to that required under the PDPA.

5.Cookies & tracking

Our site uses cookies and pixels (including the Meta Pixel and Google tools) to measure and improve our advertising and understand how visitors use the page. You can manage cookies through your browser settings; disabling them may affect how the site works.

6.How long we keep it

We retain your personal data only for as long as necessary to fulfil the purposes set out above, or as required by law, after which it is securely deleted or anonymised.

7.Your rights under the PDPA

You may, at any time:

• Request access to the personal data we hold about you.
• Request correction of any inaccurate or incomplete data.
• Withdraw your consent to our use of your data — though this may mean we are no longer able to provide certain services to you.

To make a request, please contact our Data Protection Officer below.

8.How we protect your data

We put in place reasonable administrative, technical and physical safeguards to protect your personal data against unauthorised access, use, disclosure or loss.

9.Contact — Data Protection Officer

10.Changes to this notice

We may update this notice from time to time. The latest version will always be published on this page, so please check back periodically.