Privacy Policy
1. Who we are
The data controller is Wrplus OÜ, a company registered in Estonia. For any privacy request, contact our data protection point of contact at privacy@wrplus.health.
2. What we collect
- Information you give us through the quote form: your name, email address, WhatsApp contact, your situation, your age, and any optional notes you write.
- Technical information collected automatically: the source of your visit (UTM parameters), the page URL, and your IP address in standard server logs.
- Analytics: we use privacy-first website analytics that do not use advertising cookies and do not build a profile of you.
3. Why we use it, and our legal basis
- To respond to your comparison request and contact you — basis: your consent.
- To introduce you to a licensed insurer, if you ask us to — basis: your consent.
- To send the monthly newsletter, if you opt in — basis: your consent, withdrawable at any time.
- To measure aggregate, anonymous site performance and prevent abuse — basis: our legitimate interest.
4. Who we share it with
We never sell your data. We share it only with:
- The licensed insurer we introduce you to — only if you consent, and only the details needed to prepare a quote.
- Service providers acting on our instructions: Google (form, spreadsheet and script processing), Telegram (lead notifications to our team), our website host, and our analytics provider.
5. Health and sensitive data
We do not require any medical or health details to contact you. If you choose to mention health information in the optional notes field, you do so voluntarily. We will not transmit medical details to any insurer without your separate, explicit consent.
6. International transfers
Your data may be processed in Estonia, Thailand, and the United States (Google services). Where data leaves Thailand or the EU, transfers rely on appropriate safeguards such as Standard Contractual Clauses, together with your consent.
7. How long we keep it
We keep lead data for 24 months after your last interaction with us, unless you subscribe to the newsletter (kept until you unsubscribe). You can ask us to delete your data sooner at any time.
8. Your rights
You have the right to access, correct, delete, restrict, or object to the processing of your data, to data portability, and to withdraw consent at any time. To exercise any right, email privacy@wrplus.health; we respond within 30 days. You may also lodge a complaint with the Thai Personal Data Protection Committee (PDPC) or your local EU supervisory authority.
9. Security
We protect your data with two-factor authentication on all accounts, access restricted to authorised people only, secure storage of credentials and API tokens, and regular encrypted backups. We collect the minimum data needed (a short form).
10. Changes to this policy
We may update this policy as our service or the law evolves. Material changes will be announced on this site.
Contact
Questions about your privacy? Write to privacy@wrplus.health or hello@wrplus.health. See also our Terms & Conditions.