How this site handles your information

This site, lujiajun.com, is run by me, Lu Jia Jun. I'm a Financial Adviser Representative of Great Eastern Financial Advisers Private Limited (GEFA), RNF No. LJJ300837068. This policy explains what personal data the site collects, why, who else handles it, and how you can see, correct or delete it. It follows Singapore's Personal Data Protection Act 2012 (PDPA), and it's written in plain English on purpose.

What I collect, and when

• Free guides, checklists and calculators: your email address, and which resource you asked for.
• Product waitlists: your email address, and which product you want to hear about.
• The contact form: your name, email and message.
• Booking a call: the time we agree over WhatsApp or email.
• WhatsApp, Instagram or email: whatever you send me, including your phone number, Instagram username or email address.
• The pre-meeting fact sheet (optional): any financial details you choose to fill in and email back, such as income, spending, policies, and CPF or SRS balances. Only share what you're comfortable with; you can bring it to the call instead.
• Policy statements for a Policy Snapshot: the statements you email me, with your NRIC or FIN, address and phone number covered first. They will still show your name, your policy details and what you've paid in, which is what I need to build your page. Please email them rather than sending them through Instagram DMs.
• Buying a template: payment is handled by Stripe. I receive your email, what you bought and the amount. I never see your card details.
• The client portal (existing clients only): your login email and the portfolio information I load for you.
• Site usage: which pages are viewed and which buttons are clicked, logged without your name or email, so I can see what's useful.

What I use it for

• Sending you the resource, product or reply you asked for.
• Follow-up emails. If you sign up for a free resource, a waitlist or the calculators, I'll email you now and then about insurance, investing and how I work. Every email has a one-click unsubscribe link, and you can also just reply and ask me to stop.
• Arranging and preparing for calls you book.
• Building your Policy Snapshot from the statements you send, and walking you through it.
• Delivering purchases and handling refunds.
• Understanding which parts of the site are useful, so I can improve it.
• Keeping records that the law or GEFA's regulatory obligations require.

If you become a client, the information you give during a fact-find and any applications is collected for GEFA and handled under GEFA's own data protection policy, which you'll receive at that stage.

What I don't do

• I don't sell, rent or trade your personal data.
• There are no advertising trackers or ad pixels on this site.
• I won't call, text or WhatsApp you with marketing unless you've asked me to or given clear consent. I respect Singapore's Do Not Call Registry.

Who else handles it

Only the services that keep the site and its emails running, each using your data only to provide that service:

• Cloudflare hosts the site, protects it from abuse, and counts visits without cookies (Cloudflare Web Analytics).
• Supabase stores sign-ups, enquiries, the anonymous usage log and the client portal's data.
• Brevo sends the emails you ask for and the follow-up emails, and manages unsubscribes.
• Stripe processes payments for the paid templates.
• WhatsApp (Meta), if you choose to message me there.
• Instagram (Meta), if you choose to message me there.
• Google Fonts, jsDelivr and esm.sh deliver the site's fonts and code libraries. Like any web server, they see your IP address when your browser loads a file from them.

Data stored outside Singapore. Some of these providers store or process data outside Singapore. Where that happens, I rely on their contractual commitments and security measures to protect your data to a standard comparable to the PDPA.

Cookies and browser storage

• This site doesn't use cookies for tracking or advertising, which is why there's no cookie banner.
• Cloudflare Web Analytics and the site's own usage log work without cookies.
• When you unlock the calculators, the site saves a small note in your browser so you aren't asked for your email again. Clearing this site's data in your browser removes it.
• Stripe's checkout pages may set their own cookies so they work properly and to prevent fraud, under their own privacy policies.

How long it's kept

• Sign-up emails: until you unsubscribe or ask me to delete them. After an unsubscribe I keep only what's needed to make sure you aren't emailed again.
• Enquiries and booking details: up to two years after our last contact, unless you become a client.
• Policy statements and your Snapshot page: I use your documents only for your Snapshot, and keep them only as long as I need to and my firm's record-keeping rules require.
• Purchase records: five years, for tax and accounting purposes.
• Client records: as long as GEFA's regulatory record-keeping rules require.

How it's protected

Sign-ups, enquiries and client data are stored with access controls, and access is restricted to me. If a data breach is likely to cause you significant harm, I'll tell you and the Personal Data Protection Commission, as the PDPA requires.

Your rights

You can ask to see the personal data I hold about you, ask me to correct it, ask me to delete it, or withdraw your consent for any use, including follow-up emails, at any time. Email lujiajun@rep.greateasternfa.sg and I'll respond within 30 days. Withdrawing consent may mean I can't provide something that depends on it, and I'll tell you if that's the case.

Changes to this policy

If this policy changes in any meaningful way, the date at the top will change too. If a change affects how I use data you've already given me, I'll ask for your consent where the law requires it.