Legal

Privacy Notice

Last updated 20 October 2026

This notice explains how bene collects, uses, shares and protects personal data when you use bene.sg or talk to us about group insurance for your company. We handle personal data in line with Singapore’s Personal Data Protection Act 2012 (PDPA).

Who we are and what this notice covers

Bene is a Singapore employee-benefits platform operated by MKTR PTE LTD (UEN 202507548M) (“we”, “us”, “our”). It runs bene.sg, a service that helps Singapore employers compare group insurance and employee benefits from the insurers on our panel, and arrange cover.

Our Disclosures page at bene.sg/disclosures explains our services, how we are paid and which insurers we work with.

This notice covers personal data we collect through this website, our quote form, email, phone and WhatsApp, and the documents employers send us when they ask for quotes. It does not cover the websites of insurers or other organisations we link to; their own privacy policies apply.

Personal data we collect

We collect only the personal data we need to answer your enquiry, compare cover and arrange a policy. We do not ask for health information on this website. Where an insurer needs a health declaration from an employee, it is made to the insurer directly.

Depending on how you deal with us, we may collect:

Quote form details: your name, work email, phone number, company name, UEN (optional), number of employees, industry, current insurer, renewal month, the covers you are interested in, your message and your consent.
Your calculator answers. The premium calculator works out its prices in your browser. In the record of your visit described below, we note the covers and level you pick and your team size (or number of workers) as a range, such as 11 to 50. The exact numbers reach us only if you carry your answers into a quote request.
Messages you send us by email, WhatsApp or phone, and our notes of those conversations.
Messages you send to the chat assistant on our website.
Employee information that an employer sends us to get quotes or set up cover (see “Employee data sent to us by employers” below).
Technical data from your visit, such as your IP address, browser and device type, the pages you view and the site that referred you. This is recorded in the standard request logs our hosting provider keeps when your browser loads a page; it is not collected by cookies.
How you move around this website: where your visit came from (for example a search engine, another website, one of our ads or a link we shared), the pages you view in order, how long each is on your screen, how far down you scroll and which sections you reach, the features you use (such as the premium calculator, the chat assistant or our WhatsApp link), the questions you open, text you copy from our pages, how far you get through the quote form (which fields you reach, never what you type), the words you type into the site search (with email addresses, phone numbers and ID numbers removed), whether you scroll, tap or move the mouse (which tells people apart from automated programs), page errors, links that lead nowhere and how quickly pages load, your device type, operating system, browser, screen size and, where your browser shares it, your phone model, your browser’s time zone, and the country and time zone of your internet connection. This is linked to a random visit number kept in your browser tab, and so are any questions you ask the chat assistant during that visit. It is also linked to a random browser number kept in a cookie, so we can tell when the same browser comes back and how it first found us. If you send a quote request, we add where your visit came from, how many times you visited before and how you first found us, the pages and features you used and the questions you asked the chat assistant to your request, so we know which of our channels bring enquiries and what you would like to know.
If you arrive from one of our ads in ChatGPT: advertising cookies from OpenAI that record the ad you clicked and whether you then sent a quote request, plus a hashed copy of your email and phone number if you did (see “Cookies” below).

How we use personal data

We use personal data for these purposes:

To reply to your enquiry and contact you about your quote.
To prepare comparisons and request quotes from insurers on our panel.
To give advice on group insurance, arrange cover, and help with renewals, changes to your policy and questions about claims.
To keep the records we are required to keep and to meet our legal and regulatory obligations.
To measure whether our ads in ChatGPT lead to quote requests.
To understand how visitors use this website, so we can improve it.
To run and secure this website.
To send you updates about employee benefits, only if you have agreed to receive them.

Transfers outside Singapore

Some of our service providers store or process data outside Singapore.

When personal data leaves Singapore, we take steps to make sure it is protected to a standard comparable to the PDPA, as the law requires. We rely on our providers’ contractual commitments, such as their data processing terms, together with their security practices and certifications.

Cookies

This website uses essential cookies that it needs to work. These are always on.

For analytics, the site sets one cookie of its own, bene_vid. It holds only a random browser number, so we can tell when the same browser comes back. It lasts 13 months from your last visit and is not shared with anyone. The site also keeps a random visit number in your browser tab until you close it (this is not a cookie). It uses advertising cookies from OpenAI to measure our ads in ChatGPT. When you arrive from one of our ads, OpenAI’s script records the visit in cookies on this site. If you then send a quote request, we tell OpenAI that a quote request came from that visit, along with your IP address, browser type and a scrambled (hashed) copy of your email address and phone number, so OpenAI can match the request to the ad. OpenAI cannot read your email or number from the hashed copy. We do not send OpenAI your name, company or message. Turn off Advertising in “My privacy choices” and none of this is sent.

You can turn this visit record or advertising cookies off at any time with the Analytics and Advertising switches in the “My privacy choices” panel in the footer. Turning Analytics off also deletes the bene_vid cookie. Your choices are saved in your browser.

You can also block or delete cookies in your browser settings. Some parts of the site may not work properly if you block essential cookies.

How long we keep personal data

We keep personal data only as long as we need it for the purposes it was collected for, or as the law requires. In general:

Enquiries that do not lead to cover: deleted or anonymised within 2 years of our last contact with you.
Chat assistant messages: deleted 30 days after the last message in the chat. If you rate an answer as unhelpful, we keep that question and answer for up to 180 days so we can fix it. Questions you asked before sending a quote request are kept with that request.
Records of how visitors move around this website: deleted after 13 months.
Words typed into the site search: deleted after 30 days.
Clients: kept while a policy we arranged is in force and for up to 7 years after it ends, so that we can answer questions about past cover and meet record-keeping rules.
Employee census data: kept only as long as needed to get quotes, set up cover and handle changes during the policy year, then deleted.
Records held by organisations involved in arranging or administering your cover are subject to their own retention obligations and privacy policies.

How we protect personal data

We make reasonable security arrangements to protect personal data against unauthorised access, collection, use, disclosure, copying, modification, disposal and loss. These include encrypted connections to this website, access controls and two-step sign-in on the accounts that hold client data, and limiting access to the people who need it.

If you send us an employee list, please send it as a password-protected file and share the password separately.

No method of sending or storing data is completely secure. If you think data you sent us has been exposed, contact us at hello@bene.sg straight away.

Marketing and the Do Not Call Registry

We send marketing messages, such as newsletters or updates on employee benefits, only if you have agreed to receive them. You can unsubscribe at any time using the link in the message or by telling us.

Replies to your enquiry, quotes, renewal reminders for a policy we arranged and other service messages are not marketing.

We do not send marketing messages by call, SMS or WhatsApp to a Singapore number listed on the Do Not Call Registry unless you have given us clear and unambiguous consent to do so, in writing or another accessible form.

Your rights: access, correction and withdrawal of consent

You may ask us for a copy of the personal data we hold about you, and how it has been used or disclosed in the past year. We aim to reply within 30 days. If we need longer, we will tell you when to expect a reply. We may charge a reasonable fee to cover the cost of an access request, and we will tell you the fee before we proceed.

You may ask us to correct personal data that is inaccurate or incomplete. We will correct it as soon as practicable and, where relevant, send the corrected data to organisations we disclosed it to in the past year.

You may withdraw your consent to our use of your personal data at any time by giving us reasonable notice. We will process a withdrawal within 10 business days and tell you what it means for you. For example, we may no longer be able to get quotes for you or service a policy we arranged.

To make a request, email hello@bene.sg. We may need to verify your identity before we act on it.

Employee data sent to us by employers

To quote for group cover, insurers need details of the employees to be covered. An employer may send us a census with names or identification numbers, dates of birth, gender, nationality or pass type, occupation and, for some covers, salary.

The employer is responsible for notifying its employees and obtaining any consent the PDPA requires before sending us their data. We use census data only to get quotes and to arrange and administer cover, and we share it only as needed with the insurers and organisations involved in arranging or administering your cover.

Employees with questions about their data may contact their employer or write to us at hello@bene.sg.

Children

This website is for businesses. It is not directed at children, and we do not knowingly collect personal data from anyone under 18 through it. Where group cover includes employees’ children, their details come from the employer or the employee.

Data breaches

If a data breach happens, we will assess it promptly. Where the PDPA requires it, we will notify the Personal Data Protection Commission within 3 calendar days of assessing that the breach is notifiable, and notify the people affected as soon as practicable.

Changes to this notice

We may update this notice from time to time. The date at the top shows when it last changed. If a change materially affects how we use personal data you have already given us, we will tell you before it takes effect.

Contact us and our Data Protection Officer

For questions about this notice, or to make a request about your personal data, contact our Data Protection Officer at hello@bene.sg, or call or WhatsApp +65 6277 3212, Mon to Fri, 9am to 6pm.

If you are not satisfied with how we handle your request, you may contact the Personal Data Protection Commission at www.pdpc.gov.sg.

Questions about this notice? Email our Data Protection Officer at hello@bene.sg.