1. Who we are
JomPlan is an online platform at https://jom-plan.com that connects members of the public with licensed insurance advisors and gives those advisors tools to manage their enquiries and customers. JomPlan is operated by D&A Wealth Management (SSM Registration No. 202603243297 [JM1050118-D]) (“we”).
Each advisor shown on JomPlan is responsible for how they personally use the information that reaches them. This notice explains what the JomPlan platform does with personal information.
2. What we collect
We collect only what you give us through a form, plus limited technical information when you use the website. You can read the website and use its calculators without giving us your name or contact details.
| When you… | We collect |
|---|---|
| Send an enquiry or book a consultation | Name, mobile number, email address, the type of enquiry and your message. If you choose to give them: date of birth, gender, occupation, smoking status, medical conditions and residential address. |
| Send an enquiry from an advisor’s campaign page | Name, mobile number and email address, and the answers to that campaign’s own questions. |
| Complete the online insurance application form | Identity details (including NRIC or passport number and date of birth), contact details and address, occupation and employer, height, weight and smoking status, health declarations, details of the person to be insured and of nominees, and bank account details for premium payment. |
| Apply for a career opportunity | Name, mobile number, email address, date of birth, gender, location, education, current status and how you prefer to be contacted. Documents you later send us by email. |
| Become a customer of an advisor | The information your advisor records in order to serve you, such as your policies and renewal dates. |
| Go through your existing insurance with your agent (a policy review) | The details described in section 6. |
| Use a calculator | Nothing. See section 4. |
| Browse the website | Limited technical information. See section 8. |
Some of this is sensitive, in particular health information. Please give it only where a form asks for it, and only about yourself or with the permission of the person concerned.
3. Why we collect it
- To pass your enquiry to an advisor so that they can reply to you.
- To prepare and process an insurance application you have asked for.
- To consider your career application.
- To let advisors serve their existing customers, for example with renewal reminders.
- To prepare a factual summary of the insurance you already hold, when you go through it with your agent (section 6).
- To keep the platform secure and keep a record of who did what.
- To understand, in general terms, which pages and campaigns people visit.
We do not sell personal information. We do not use the details you give in one of these forms to send you unrelated promotions unless you have separately agreed to that.
4. Our calculators
Your calculation stays in your browser. We do not collect or save your financial inputs or results.
This applies to the Protection Check on campaign pages and to the Protection Health Check and Legacy Boost tools on the main website. The figures you enter and the results you see are worked out on your own device. They are not sent to JomPlan, to any advisor or to anyone else, and they are gone when you leave or reload the page.
The calculators are educational estimates. They are not financial advice, a formal financial needs analysis or an insurance application. If you would like to talk to an advisor, you can contact one separately; nothing from the calculator is passed on.
We do record, without any figure, that a calculator was started or completed, as part of the general visit information in section 8.
5. Zurich campaign registration
Some campaign pages describe complimentary accident protection offered by Zurich, with a link or QR code to register. Registration takes place on the form that link opens, which is not part of JomPlan. What you enter there does not come to JomPlan. Please read the privacy information on that form.
JomPlan records only that a registration button was pressed on a campaign page, as part of the visit information in section 8. That click is not reported to Meta.
6. Reviews of your existing insurance
Your agent may go through the insurance you already hold and record it in JomPlan, so that they can prepare a written summary of it for you. The summary lists what your policies cover, as recorded on the review date.
- It is not advice and does not recommend buying, replacing or cancelling any policy.
- It does not assess whether your cover is enough.
- It does not compare or rank insurers.
- It is not an insurance application and does not change any policy.
What we record
- About you: your name and age (worked out from the date of birth) from your customer record, your marital status, and whether anyone depends on you financially. Your identity card number is not copied into the review; documents show only its last four digits.
- About family members you choose to include: their relationship to you, a short label that is not their name (for example “Child 1”), an age band (for example 6–12) and whether they depend on you. We do not record family members’ names, identity card numbers, dates of birth, contact details or health information.
- About your existing policies, with any insurer: the insurer, plan name and policy number; status, dates and premium; the basic plan, riders, cover and benefit amounts; who is insured; whether the policy has exclusions (yes, no or not known), without any medical details; and where each detail came from (you, a document you showed, the insurer, or a policy your agent already services).
- Internal notes made by your agent, for example a comment on an area of cover, or a point to check with you with a follow-up date and status.
- The summary documents we produce, and a record of who created, changed or completed the review and when, who downloaded a document, and when a manager or administrator opened it.
We do not record health conditions or medical history in a policy review. You do not have to answer every question; anything you do not provide is shown as “Not provided”.
What your copy shows, and what stays internal
| Your customer copy | Kept on an internal record only (not given to you) |
|---|---|
| Your name, the last four digits of your identity card number, age, marital status, and whether anyone depends on you | Your agent’s internal notes and comments on each area of cover |
| Family members as recorded: label, relationship, age band, and whether they depend on you | Points to discuss or check with you, with their follow-up date, status and the person responsible |
| Each policy: insurer, plan, the last four characters of the policy number, status, premium, cover and benefits, who is insured, and where the details came from | Whether a policy has exclusions, and the reason a policy was left out of the totals |
| The cover recorded for each area | Policy notes and other working notes |
| The name, agent code, position and telephone number of the agent who prepared it | — |
Why we use it
- To prepare the summary and give you a copy.
- To keep a record of the summary you were given and what it contained.
- To let your agent follow up the points agreed with you.
- To let authorised supervisors in your agent’s agency oversee the work.
- To keep the system secure, including a record of who did what.
We do not use your policy review for unrelated marketing.
Who can see it
- Your agent: the agent currently assigned to you. If your account moves to another agent, that agent can also see your earlier reviews.
- Managers and administrators of the agency your agent belongs to, to supervise and support your account. When they open a review, that is recorded.
- JomPlan administrators at D&A Wealth Management, to operate the platform (section 7).
JomPlan does not send your policy review to any insurer or other organisation. Your agent gives you your copy. The service providers and authorities listed in section 7 apply as described there.
About JomPlan and your agent
JomPlan provides the software your agent uses. It is not an insurer and does not give insurance advice or recommendations. Your agent remains responsible for their own obligations to the insurers and agencies they represent.
How we protect it
- Only signed-in users can open a review. Each agent can open only the reviews of their own customers.
- The summary documents are stored encrypted. The key is kept separately from the application and from its backup copies.
- When a review is completed, its content is sealed, so any later change to that version can be detected.
- A version that has been completed is never edited. If something changes, a new version is completed.
How long we keep it
Seven years from the date the review was last completed; an update that is started but not completed does not shorten that period. Records concerned by a complaint, claim, dispute or legal request may be kept until it is resolved. Deletion is carried out by an administrator, not automatically. See section 10.
Your choices and rights
- Taking part in a policy review is your choice.
- Section 11 applies. You may ask to see your review, or ask for wrong information to be corrected.
- A completed summary is not altered. A correction is made by updating the review and completing a new version, and the earlier version is kept as a record of what you were given.
- You are not asked to sign the summary or any other document for a policy review.
- If you ask us to delete a policy review before the end of the period in section 10, we will consider the request and tell you what we can delete and what we have to keep, and why. Deletion is not immediate.
Family members
If you give us details about family members, please let them know and show them this notice.
7. Who receives your information
- The advisor concerned. An enquiry from an advisor’s campaign page goes to that advisor. Each advisor can see only their own enquiries and customers.
- JomPlan administrators at D&A Wealth Management, to operate the platform, assign enquiries that are not tied to an advisor, and handle your requests.
- Insurers, when you ask an advisor to submit an insurance application, and only for that application. JomPlan does not send policy reviews to insurers.
- Service providers: Hostinger, which provides our server and email service; Meta (Facebook), through a measurement pixel on campaign pages, only if you accept it (section 8); Google, which delivers the fonts used on our pages, and Cloudflare (cdnjs), which delivers a charting script on two calculator pages. Your browser fetches those files from them directly, which lets them see your internet address.
- Authorities, where the law requires it.
8. Website and technical information
Visit information
When you visit a page we record: the page, the page you came from, any campaign or advertisement codes in the link you followed, a random session identifier that lasts until you close the browser tab, your browser type, and a one-way scrambled form of your internet address. We do not store the address itself. We also record when a contact, registration or calculator button is used, without any content. Our web server also keeps standard access logs, which include internet addresses, for 14 days.
Storage in your browser
The JomPlan website does not set cookies of its own. It uses your browser’s storage to remember your language, the first page you visited, an enquiry you have started and your choice about the Meta pixel. You can clear this at any time in your browser settings.
Meta Pixel on campaign pages
Campaign pages ask whether you accept a measurement pixel from Meta (Facebook). It is optional. The pixel is loaded only if you press Accept; if you press Decline, or give no answer, it is not loaded and nothing is sent to Meta. If your browser sends a “do not track” or Global Privacy Control signal, we treat that as a refusal and do not ask. You can review or change your choice at any time with the Privacy Choices link at the foot of a campaign page. Your choice is kept in your browser only. Declining later stops further measurement from that browser; it does not delete information Meta has already received. If you accept, the pixel tells Meta that a page was viewed and when a contact or enquiry button is used, so that advertising can be measured. Meta may set its own cookies and receives your internet address and browser details directly. We do not send Meta the contents of any form, and nothing from a calculator. You can limit this in your Facebook advertising settings or with your browser’s privacy tools.
9. Storage and security
- Information is stored in a database on a server we rent from Hostinger, located in Malaysia (Kuala Lumpur). When your browser fetches fonts or scripts from Google or Cloudflare, or when the Meta pixel runs, technical information such as your internet address is processed by them outside Malaysia.
- The website and the systems behind it are reached over encrypted connections (HTTPS).
- Advisors and administrators must sign in. Each advisor can open only their own enquiries and customers. Administrators have wider access so that they can run the platform.
- Policy review summary documents are stored encrypted, with the key kept separately from the application and from its backup copies.
- Backup copies of the database and uploaded files are made daily and before changes to the system. They are kept on the same server, with access restricted to system administrators.
No system is perfectly secure. If you believe your information has been misused, please contact us.
10. How long we keep it
| Information | Kept for |
|---|---|
| Enquiries that did not lead to a policy | We do not apply a fixed deletion period. We keep them while they are needed to reply to you and to serve you. You may ask us to delete yours at any time. |
| Insurance applications, customer and policy records | For as long as we serve you, and afterwards for as long as the insurer and the law require. |
| Policy reviews: the review, its versions, the summary documents and the internal notes | Seven years from the date the review was last completed. If the review is updated and completed again, the seven years start again from that later date. An update that is started but not completed does not shorten the period for the summaries already completed. If a complaint, claim, dispute or legal request concerns you, we may keep the records until it is resolved. After the period, the review’s content and documents are deleted by a process an administrator runs when authorised; it is not automatic, so deletion may happen some time after the period ends. A short record without the review’s content remains: reference numbers, dates, and an entry showing that the deletion took place. Copies in backups are dealt with as described in the “Backup copies” row. |
| Career applications | No fixed deletion period is applied. You may ask us to delete yours at any time. |
| Visit information | No fixed deletion period is applied. It holds no name or contact details. |
| Backup copies | Deleting information from our live systems does not remove it from backup copies made earlier. At present those copies are not removed on an automatic schedule, so a copy may remain until older backups are cleared. |
11. Your rights and how to contact us
You may, at any time:
- Ask to see the personal information we hold about you.
- Ask us to correct information that is wrong or out of date.
- Ask us to delete information we no longer need to keep.
- Tell us to stop contacting you.
Write to info@jom-plan.com or tell your advisor. Before acting we will take reasonable steps to check that the request comes from you. Where the law requires us to keep certain records, for example of an insurance policy, we will tell you. We will reply within the time the law requires.
JomPlan (operated by D&A Wealth Management)
JomPlan Privacy Contact
Email: info@jom-plan.com
Telephone: +60 16-542 6195
Website: https://jom-plan.com
12. Changes to this notice
We may update this notice. The version and date at the top show when it last changed. This notice is published in English, Bahasa Malaysia and Mandarin.