Privacy Policy
This policy explains how GlowWithin ("we", "us") collects, uses, discloses and protects your personal data in line with Singapore's Personal Data Protection Act 2012 (PDPA). By using our website, submitting a form or using our services, you agree to the practices described here.
1. The personal data we collect
- Contact details: your name, mobile number and email address.
- Skin and health information you choose to share: your main skin concern, photos of your skin, and information about your health, lifestyle, sleep, stress, diet and menstrual cycle that you give us during consults and check-ins.
- Order and delivery details: your delivery address and order history. Card payments are handled by our payment provider; we do not store your full card number.
- Website and advertising data: information collected through cookies and similar tools (including the Meta Pixel), such as pages visited, device and browser type, and whether you submitted a form.
2. Why we collect it
- To respond to your enquiry and contact you by WhatsApp, call, SMS or email.
- To assess your skin, prepare and adjust your personalised formula, and provide our consults and follow-ups.
- To process payments and deliver your orders.
- To keep records required by law and for our legitimate business purposes.
- To measure and improve our website and advertising.
- To send you tips and offers, only if you have agreed to receive them.
3. Consent and withdrawal
We collect, use and disclose your personal data with your consent or as otherwise permitted by the PDPA. You may withdraw your consent at any time by emailing [email protected]. We will process your request within a reasonable time. Withdrawing consent may mean we can no longer provide some or all of our services to you.
4. Who we share it with
We do not sell your personal data. We share it only as needed with:
- Our TCM skin specialists and staff involved in your care.
- Service providers who help us run our business, such as our customer relationship and messaging platform, payment processor, delivery partners and IT providers.
- Advertising partners such as Meta, for measuring and improving our ads.
- Authorities, where required by law.
These parties may only use your data for the purposes we engage them for. Some of them store data outside Singapore. Where we transfer data overseas, we take steps to ensure it receives protection comparable to the PDPA.
5. Cookies and tracking
Our website uses cookies and the Meta Pixel to understand how visitors use the site and to measure our advertising. You can block or delete cookies in your browser settings. Some parts of the site may not work as intended if you do.
6. Marketing messages
We will only send you marketing messages if you have agreed to receive them, and we comply with Singapore's Do Not Call rules. You can opt out at any time by replying STOP or emailing us.
7. How long we keep it
We keep your personal data only as long as needed for the purposes above, or as required by law. After that, we delete or anonymise it.
8. How we protect it
We use reasonable security measures, such as access controls and secure platforms, to protect your personal data from unauthorised access, use or disclosure. No method of transmission over the internet is completely secure, but we work to protect your information.
9. Access and correction
You may ask to access the personal data we hold about you, or to correct it, by emailing [email protected]. We may need to verify your identity first, and may charge a reasonable fee for access requests as allowed by the PDPA.
10. Changes to this policy
We may update this policy from time to time. The latest version will always be on this page, with its effective date.
11. Contact us
Data Protection Officer, GlowWithin
Email: [email protected]