SBC Insurance — Global Insurance Platform
Last Updated: June 2026 | Version 3.0

This Privacy Policy explains how SBC Insurance — Global Insurance Platform (“the Platform”, “we”, “us”, “our”) collects, processes, uses, stores and discloses personal data in connection with our website https://sbc-insurance.live/, and the insurance brokerage, health assistance, and related services offered through the Platform.

The Platform operates through two affiliated companies:

SBC-2563 Co., Ltd. — Licensed Non-Life Insurance Broker, registered with the Office of Insurance Commission (OIC) of Thailand. Provides insurance brokerage services including Health, Motor, Travel and other non-life insurance products through OIC-licensed Thai insurers.

SBC Global Co., Ltd. — International Health Assistance Services company registered in Thailand (DBD Reg. No. 0505566008203). Provides personal health advisory, hospital coordination, multilingual claims support and document assistance services. SBC Global Co., Ltd. is not an insurance company and does not underwrite or sell insurance products.

This Policy is intended to comply with the Thailand Personal Data Protection Act B.E. 2562 (PDPA) and, where applicable, relevant principles of the EU General Data Protection Regulation (GDPR).

By using our services, you acknowledge that you have been informed about how your personal data is processed in accordance with this Privacy Policy.

1. Data Controllers and Contact Information

The identity of the Data Controller for your personal data depends on the service you use through the Platform:

• Insurance brokerage services arranged through OIC-licensed Thai insurance partners — Data Controller: SBC-2563 Co., Ltd.
• Health assistance services (consultation, hospital coordination, claims support, document assistance) — Data Controller: SBC Global Co., Ltd.
• International insurance products (CORIS, WrLife) — Data Controller: the respective insurer. The Platform acts as intermediary only.

Contact information for Data Controller enquiries:

SBC-2563 Co., Ltd. | SBC Global Co., Ltd.
OIC Licensed Non-Life Insurance Broker | International Health Assistance Services
142/17 Moo 4, T. Maret, Koh Samui, Suratthani 84310, Thailand
Email: [email protected]

2. Categories of Personal Data Collected

The Platform collects personal data necessary to provide insurance brokerage, health assistance services, and related support. The categories collected depend on the service used.

1. Personal Identification Data
   1. Full name
   2. Date of birth
   3. Gender
   4. Nationality
2. Contact Information
   1. Residential address and country of residence
   2. Email address
   3. Telephone number and messenger contacts (WhatsApp, Telegram)
3. Service & Insurance Data
   1. Type of insurance or assistance service requested
   2. Number of persons to be insured or covered (individual, couple, family, group)
   3. Preferred language of communication
   4. Insurance policy details and coverage information
4. Financial and Payment Data
   1. Payment information
   2. Transaction details
5. Professional Information
   1. Occupation
   2. Employer details (where required for underwriting)
6. Health and Sensitive Data — Where required by insurers or for assistance services:
   1. Medical history
   2. Insurance claims history
   3. Lifestyle information relevant to risk assessment
7. Corporate / Group Client Data
   1. Company registration data
   2. Tax identification numbers
   3. Employee data required by insurers
8. Communications Data
   1. Email correspondence
   2. Call records
   3. Messaging platform communications

Sensitive data is processed only when necessary for insurance or assistance service purposes, subject to appropriate safeguards and, where required, explicit consent.

3. Sources of Personal Data

We collect personal data directly from you through:

1. Website forms and quote request forms at sbc-insurance.live
2. Insurance and assistance service application forms
3. Marketing subscription forms and Facebook Lead Forms (where marketing consent is explicitly provided)
4. Email, telephone, and messaging applications
5. Consultations with Personal Insurance Consultants

We do not purchase third-party marketing databases.

4. Legal Bases for Processing

We process personal data on one or more of the following legal grounds:

1. Contractual Necessity — To provide quotations, arrange and manage insurance policies, facilitate underwriting, process claims, coordinate assistance services, and provide client support.
2. Legal Obligation — To comply with OIC requirements, tax regulations, anti-money laundering laws, and other applicable legal requirements.
3. Legitimate Interests — To improve services, prevent fraud, manage internal operations, maintain IT security, and defend legal claims. Our legitimate interests do not override your fundamental rights.
4. Consent — Where required by law, including for marketing communications and sensitive personal data. Consent may be withdrawn at any time without affecting prior processing.

5. Marketing Communications

We send marketing communications only where explicit consent has been provided. Consent may be obtained through a dedicated opt-in checkbox on our website (not pre-selected), a Facebook Lead Form, or separate written or electronic consent.

You may withdraw consent at any time by:

1. Clicking the “Unsubscribe” link in any marketing email
2. Contacting [email protected]

6. Disclosure of Personal Data

We disclose personal data only where necessary and proportionate:

1. Licensed Thai Insurance Partners — OIC-licensed Thai insurers and underwriters (including AXA Thailand, Allianz Ayudhya General Insurance, and other OIC-licensed non-life insurers) for policies arranged through SBC-2563 Co., Ltd.
2. International Insurance Partners — International insurers (including CORIS d.d., Slovenia and WrLife) as Data Controllers for their respective products. Transfers are made in accordance with Section 7.
3. Between Platform Entities — Personal data may be shared between SBC-2563 Co., Ltd. and SBC Global Co., Ltd. where necessary to deliver a complete service to the client, pursuant to an intra-group data sharing agreement and subject to equivalent data protection obligations.
4. Personal Insurance Consultants — Authorised remote consultants operating on behalf of the Platform under data confidentiality obligations.
5. Service Providers — IT providers, email platforms, payment processors, and cloud hosting services, all contractually bound to protect personal data.
6. Legal and Regulatory Authorities — Including OIC Thailand, Revenue Department, and other competent authorities where required by law.

We do not sell personal data.

7. International Data Transfers

Personal data may be transferred outside Thailand in the following circumstances:

1. To CORIS d.d. (Slovenia, EU) — as Data Controller for international health and travel insurance products arranged through the Platform.
2. To WrLife — as Data Controller for international health products arranged through the Platform.
3. To cloud service and IT infrastructure providers operating servers outside Thailand.

Where required, we implement appropriate safeguards including contractual data protection obligations, transfers necessary for contractual performance with the insurer, transfers based on your explicit consent, and transfers permitted under applicable law.

By requesting quotes or coverage from international insurers through the Platform, you acknowledge that transfer of your personal data to those insurers as Data Controllers is necessary for the provision of the requested service.

8. Data Retention

We retain personal data only as long as necessary for the purposes set out in this Policy:

1. Insurance brokerage records — up to seven (7) years or longer where required by Thai insurance law or OIC regulations.
2. Health assistance service records — duration of service agreement plus up to three (3) years.
3. Marketing data — until consent is withdrawn or data is deemed inactive.
4. Communication records — consistent with legal obligations and legitimate business needs.

9. Data Security

The Platform implements reasonable technical and organisational measures including secure hosting environments, access controls, encryption where appropriate, and need-to-know access restrictions. No electronic transmission method is completely secure and absolute security cannot be guaranteed.

Bot Protection

To protect our website forms from automated attacks and spam, we use Cloudflare Turnstile in invisible mode. This service runs in the background and may collect technical browser and network signals (such as IP address and User-Agent) to verify that interactions are performed by a human rather than a bot. For more information on how Cloudflare processes this data, please refer to the Turnstile Privacy Addendum.

10. Your Rights

Subject to applicable law and depending on your jurisdiction, you may have the right to:

1. Request access to your personal data
2. Request correction of inaccurate data
3. Request deletion where legally permissible
4. Restrict or object to processing
5. Withdraw consent at any time
6. Request data portability
7. Lodge a complaint with your local data protection authority

Requests may be submitted to: [email protected]. We will respond within thirty (30) days of receipt and identity verification. Identity verification is required before responding to data subject requests.

11. Limitation of Liability

Neither SBC-2563 Co., Ltd. nor SBC Global Co., Ltd., operating as SBC Insurance — Global Insurance Platform, shall be liable for: (i) unauthorised access resulting from events beyond our reasonable control; (ii) actions of third parties not under our direct authority; or (iii) losses arising from user negligence. Nothing in this Policy excludes liability where such exclusion is prohibited by applicable law.

12. Cookies and Tracking Technologies

Our website uses cookies and similar technologies to enhance user experience, analyse performance, and support marketing activities. You may manage or disable cookies through your browser settings. Disabling certain cookies may affect website functionality.

Where required by applicable law, we will obtain consent before placing non-essential cookies. For full details, please refer to our dedicated Cookie Policy.

13. Amendments to This Policy

We reserve the right to update this Privacy Policy at any time. The latest version will be published at https://sbc-insurance.live/. Continued use of the Platform after updates constitutes acknowledgement of the revised Policy. Where required by law, we will notify you of material changes.

ภาษาไทย

Thai language version of this Privacy Policy (ฉบับภาษาไทย):
นโยบายความเป็นส่วนตัว (ภาษาไทย)

14. Thai Language Version

A Thai language version of this Privacy Policy (นโยบายความเป็นส่วนตัว) is available on our website. In the event of any inconsistency between the English and Thai versions, the English version shall prevail to the extent permitted by applicable law.

15. Contact Us

For any questions or requests regarding this Privacy Policy or your personal data, please contact:

1. SBC Insurance — Global Insurance Platform
2. 142/17 Moo 4, T. Maret, Amphur Koh Samui, Suratthani 84310, Thailand
3. Email: [email protected]
4. Website: https://sbc-insurance.live/