Personal Data Protection Policy

INTRODUCTION

This policy statement was last updated on 4 January 2024.

The Singapore Personal Data Protection Act 2012 (the “PDPA”) protects the personal data of individuals, i.e. natural persons.

We are responsible for the personal data of all individuals in our possession or under our control. Every current, former and prospective client, employee, business partner (including agents and third-party service providers) and any other individuals who have dealings with Aesthetics International Academy Pte. Ltd. (the “Company”, “we”, “our” or “us”) has legal rights to personal data protection. We respect these rights when collecting, using, transferring, storing, accessing and correcting personal data. It is our policy to comply with the requirements of the PDPA. In doing so, we ensure our adherence with industry standards pertaining to the security and confidentiality of personal data. In case of doubt, we shall consider what a reasonable person would deem appropriate in the circumstances. A strong personal data protection policy further boosts our clients’ confidence in the discretion of our services and enhances our public image.

The PDPA applies to activities involving personal data in Singapore. Where personal data is collected overseas and subsequently transferred into Singapore, the PDPA will apply in respect of the activities involving the personal data in Singapore. Personal data collected outside Singapore may be subject to the data protection laws of the jurisdiction in which it was collected, if any, and all collection carried out by the Company shall be in accordance with applicable laws. Compliance with foreign data protection laws may affect regulatory evaluation of our compliance with the PDPA.

The PDPA is intended to be the baseline law which operates as part of Singapore law. It does not supersede existing statutes, but will work in conjunction with them and the common law. To the extent that any PDPA provisions on data collection, protection, use and disclosure is inconsistent with the provisions of other written laws, note that the provisions of the other written law shall prevail.

This Policy sets out how we manage personal data.

COLLECTION OF INFORMATION – PERSONAL DATA

We collect various types of personal data. As used in this Policy, “personal data” means data, whether

true or not, about an individual who can be identified:

a) from that data; or
b) from that data and other information to which we (and all our affiliates, partners, subsidiaries and all relevant third parties mentioned in this Policy) have or are likely to have access.

Personal data includes, without limitation, an individual’s name; address; telephone numbers; email addresses; date of birth; gender; nationality; marital status; passport number, date and place of issue; personal identification number; driver’s licence number and expiration; photographs and other audio-visual material; employment information; payment information; credit and debit card numbers; marketing preferences; preferred communication methods; and any other types of information that you choose to provide to us or that we may collect about you through your interactions with us and our affiliates, partners and subsidiaries.

We may collect personal data by way of the information that you provide to us on our website, or by any other means.

We may also collect your personal data from our partners and other independent third-party sources.

COOKIES AND OTHER WEBSITE FUNCTIONALITIES

We may automatically collect the following information about you in connection with your visit(s) to our website: technical information, including the Internet Protocol (IP) address used to connect your computer to the Internet, your login information, browser type and version, time zone setting, browser plug-in types and versions, operating system and platform; and information about your visit, including the full Uniform Resource Locators (URL) visited; date and time of visit; products or services you viewed or searched for; page response times; download errors; length of visits to certain pages; page-interaction information (such as scrolling, clicks, and mouse-overs), and methods used to browse away from the page.

When you visit our website, we may assign your computer (or any other device) with cookies (which are small text files created on your computer or device), Local Shared Objects (also known as flash cookies, which can store data more complex than simple text) and Web Beacons (tiny graphics with a unique identifier that are placed in the code of a webpage) (collectively, “Cookies“). By accessing our website, you agree that we can place Cookies on your computer or device.

The Cookies that we place on your computer or device may be used to facilitate your access to our website, gather statistical data, and personalise your online experience. We currently use Cookies on our website for purposes including, but not limited to, detecting your web browser’s multimedia capabilities, recognising you as a previous visitor and saving your website user preferences, maintaining login and password details on secure portions of the website, monitoring the traffic patterns of our website users, tracking which emails have been opened by you, and providing a unique identifier to your computer so that we can generate statistics regarding website usage.

You have the option of adjusting your browser settings to restrict or limit the use of various Cookies. However, if you choose to do so, the functionality of the website and your user experience may be affected.

USE OF PERSONAL DATA COLLECTED

We currently use and/or may in the future use your personal data for any purpose not prohibited by applicable law. This includes, but is not limited to verifying your identity where necessary to contact you regarding any relevant matter which may be of interest to you, or to comply with a court order or other legal process or other statutory and/or regulatory requirements of any governmental and/or regulatory authorities.

SHARING OF PERSONAL DATA

We may share your personal data with and among our affiliates, partners and subsidiaries, or with unaffiliated third parties including our third-party service providers, your prospective and/or current employers, recruitment agencies and relevant government agencies and/or regulatory authorities, whether in Singapore or abroad, in connection with the aforementioned purposes. Some of your non-confidential personal data may also be posted on our website.

Please contact our Data Protection Officer at the address indicated below if you wish to have your personal data removed from our website.

TRANSFERS OF PERSONAL DATA OUTSIDE SINGAPORE

In connection with the Purposes, your personal data may be transferred to countries outside of Singapore including to our third-party data storage service providers whose cloud servers and data centres may be located overseas. In situations where we transfer your personal data to countries outside of Singapore, we will take steps to ensure that appropriate levels of protection necessary to maintain the security and integrity of your personal data are in place.

WITHDRAWAL OF CONSENT

If you do not want your personal data to be collected, used, and/or disclosed by us in the aforementioned manner, you may withdraw your consent by writing to our Data Protection Officer. Please note that we may not be able to continue to provide you with certain services in the event that you choose to withdraw your consent.

ACCESS TO AND CORRECTION OF YOUR PERSONAL DATA

If you wish to access or correct any of your personal data, you can write to our Data Protection Officer at the email address indicated below. For a request to access or correct your personal data, once we have sufficient information from you to deal with the request, we will seek to respond to your access or correction request within 30 days. Where we are unable to respond to you within the said 30 days, we will notify you of the soonest possible time within which we can provide you with the information requested. Please note that a reasonable administrative fee may be payable for the handing and processing of any access requests made by you, we will communicate this fee to you after we have assessed your request.

RETENTION OF PERSONAL DATA

Personal data may be retained by us for as long as the purpose for which the personal data was collected continues, or if the retention is necessary for our legal or business purposes. We will cease to retain personal data once we no longer have a legal or business reason for doing so.

DATA SECURITY

We take reasonable care and have implemented technical, administrative, procedural and other measures to protect your personal data from unauthorised access, improper use or disclosure, unauthorised modification, unlawful destruction or accidental loss. However, we cannot assume responsibility for any unauthorized use of your personal data by third parties which are wholly attributable to factors beyond our control.

CHANGES TO POLICY

We may update this Policy from time to time without prior notice. You may check with us regularly to ensure that you are familiar with any changes.

Your continued use of our website and continued dealings with us for the provision of our products and services, after any changes to this Policy has been made, constitutes your acceptance to such changes.

CONTACT US

If you have any questions in relation to how your personal data is handled by us, please contact our Data Protection Officer at the email address below:

Name: Joyce Chua

Email address: info@beautyacademy.com.sg