Introduction
The Kopi Notes (thekopinotes.com) is a Singapore-based personal finance and investing education website operated by Annie Yong. We are committed to protecting your personal data in accordance with the Singapore Personal Data Protection Act 2012 (PDPA).
This Privacy Policy explains what data we collect, how we use it, and your rights regarding your personal information. By using our website, you agree to the practices described in this policy.
Data We Collect
We may collect the following types of personal data when you interact with our website:
Information you provide directly: When you submit forms on our website (such as the insurance enquiry form or newsletter signup), we collect details including your name, email address, phone number, and any messages you include.
Automatically collected data: When you browse our website, we automatically collect certain technical information through cookies and analytics tools, including your IP address, browser type, device information, pages visited, time spent on pages, and referring URLs.
Insurance Enquiry Form
Our website features an insurance enquiry form (powered by WPForms) that collects the following information: First Name, Last Name, Email Address, Phone Number, Insurance Type (selected from a dropdown menu), and an optional message.
Important: Data submitted through this form is shared with our partner insurance advisory group for the purpose of connecting you with qualified insurance advice. Form submissions are sent to our team at [email protected] for processing and coordination with our insurance advisory partners.
By ticking the consent checkbox on the form and clicking submit, you expressly consent to the collection and sharing of your data for this purpose. You may withdraw this consent at any time by contacting us at [email protected].
Why We Collect Data
We collect and use your personal data for the following purposes:
Connecting you with insurance advisory partners: When you submit an insurance enquiry, we share your details with our partner insurance advisory group so they can provide you with relevant insurance advice and quotations.
Improving our content: Analytics data helps us understand which topics and tools are most useful, allowing us to create better personal finance and investing content for our readers.
Communicating updates: If you subscribe to our newsletter, we use your email to send you content updates, new articles, and relevant personal finance information.
PDPA Compliance
The Kopi Notes complies with the Singapore Personal Data Protection Act 2012 (PDPA). Under the PDPA, we are required to obtain your consent before collecting, using, or disclosing your personal data, and to use it only for purposes you have consented to.
We obtain your consent through clear opt-in mechanisms, including the consent checkbox on our insurance enquiry form. You may withdraw your consent at any time by emailing [email protected]. Upon receiving your withdrawal request, we will stop collecting, using, or disclosing your personal data for the relevant purposes, though we may need to retain certain data to comply with legal obligations.
For international visitors, we also recognise the principles of the EU General Data Protection Regulation (GDPR). If you are accessing our website from the European Economic Area, you may have additional rights under GDPR, including the right to data portability and the right to lodge a complaint with your local data protection authority.
Cookies & Analytics
Our website uses cookies and similar technologies to enhance your browsing experience:
Google Analytics: We use Google Analytics to understand how visitors interact with our website. It collects anonymised data about page views, session duration, traffic sources, and user demographics. Google Analytics uses cookies to distinguish unique users and throttle request rates.
WordPress Cookies: Our content management system (WordPress) sets functional cookies to remember your preferences, manage sessions if you leave a comment, and ensure the website operates correctly.
Cloudflare Cookies: Our CDN and security provider, Cloudflare, sets cookies to identify trusted web traffic, apply security settings, and manage bot protection. These cookies are essential for the security and performance of our website.
You can manage or disable cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of our website.
Third-Party Services
We use the following third-party services to operate and improve our website:
WPForms: Powers our contact and insurance enquiry forms, processing your form submissions securely.
WordPress: Our content management system for publishing and managing website content.
Bluehost: Our web hosting provider, where our website data and databases are stored on secure servers.
Cloudflare: Provides content delivery network (CDN) services, DDoS protection, and security features to keep our website fast and secure.
Google Analytics: Provides website traffic analysis and audience insights to help us improve our content.
Each of these services has its own privacy policy governing how they handle data. We encourage you to review their respective policies for more information.
Data Retention
We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected:
Form submission data (including insurance enquiry data) is retained for up to 2 years from the date of submission, or until you withdraw your consent, whichever comes first.
Analytics data is retained in accordance with Google Analytics’ data retention settings and policies.
Newsletter subscriber data is retained for as long as you remain subscribed. You can unsubscribe at any time using the link in our emails.
Your Rights Under PDPA
Under the Singapore PDPA, you have the following rights regarding your personal data:
Right of Access: You may request access to the personal data we hold about you and information about how it has been used or disclosed in the past year.
Right of Correction: You may request that we correct any inaccuracies or incomplete information in your personal data.
Right to Withdraw Consent: You may withdraw your consent for the collection, use, or disclosure of your personal data at any time, subject to legal and contractual restrictions.
Right to Request Deletion: You may request that we delete your personal data where it is no longer necessary for the purpose for which it was collected.
To exercise any of these rights, please contact us at [email protected]. We will respond to your request within 30 days.
Data Security
We take reasonable measures to protect your personal data from unauthorised access, collection, use, disclosure, or similar risks. These measures include SSL/TLS encryption across our entire website, secure hosting with Bluehost, Cloudflare security protections, and restricting access to personal data to authorised personnel only.
While we strive to protect your personal data, no method of transmission over the internet or electronic storage is completely secure. We cannot guarantee absolute security but are committed to maintaining appropriate safeguards.
Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. Any changes will be posted on this page with an updated revision date. We encourage you to review this policy periodically.
Last updated: June 2026
Contact Us
If you have any questions about this Privacy Policy, wish to exercise your data rights, or need to withdraw consent, please contact us at:
Email: [email protected]
Website: thekopinotes.com