Cookie & Data Policy
Controller: BrokerFish Ltd, Brighton Place Lot U0213–U0215, Jalan Bahasa, 87000 Wilayah Persekutuan Labuan, Malaysia.
Contact: [email protected]
Last updated: 22 July 2026
1. Cookies & browser storage we use
You can browse and compare plans without accepting non-essential cookies. We ask for your consent before setting anything that isn’t strictly necessary, and you can change your choice at any time using the Cookie settings link in the footer.
| Name | Purpose | Category | Set when | Retention |
|---|---|---|---|---|
bf_consent | Remembers your cookie choice so we can honour it | Strictly necessary | You choose Accept or Reject | Up to 6 months |
authjs.session-token, authjs.csrf-token, authjs.callback-url | Keep a signed-in administrator logged in and protect the login form (CSRF) | Strictly necessary | Only for BrokerFish staff using the admin console | Session |
bf_introducer | Remembers the referral link you arrived through, so your enquiry is handled correctly | Referral (consent required) | You arrive via a referral link and accept non-essential cookies | Up to 90 days |
_ga, _ga_<id> | Google Analytics — measures how the site is used, in aggregate | Analytics (consent required) | Only after you accept non-essential cookies | Up to ~2 years (Google) |
bf-test-mode-unlocked | Remembers a tester entered the internal preview password (not a cookie — session storage) | Functional | Only on the internal /test preview | Cleared when the tab closes |
We do not use advertising or marketing trackers, and we do not sell your data. Google Analytics and the referral cookie load only after you accept; if you reject, they are not set (and any existing ones are cleared).
2. Personal & health data (applications)
Comparing plans needs no personal data. If you choose to submit an application, we collect the details on the form — your identity and contact information, the plan you chose, your signature, any dependants’ details, and the insurer’s medical questionnaire answers and any medical documents you upload. Medical information is special-category data and is collected only to prepare and place your insurance application.
Your application is emailed to BrokerFish and provided to the insurer you selected so it can be placed. It is stored on our hosting (Render) and in email (Google Workspace). We share it with the insurer you chose and those service providers — not with advertisers.
3. Your rights
You can ask to access, correct, or erase your data, object to or restrict processing, or withdraw consent. Contact [email protected]. Because your application is passed to an insurer, you may also need to contact that insurer about the copy they hold.
For any question about this policy or your data, contact [email protected].