Privacy Policy

1. Introduction

YL Beauty Aesthetics (“we”, “our”, or “us”) is committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information in accordance with the Personal Data Protection Act 2012 (PDPA) of Singapore.

By using our website or booking our services, you consent to the collection and use of your personal data as described in this policy.

2. Data We Collect

We may collect the following types of personal data:

• Contact information — name, phone number, email address
• Booking details — appointment dates, treatment preferences, and service history
• Skin and health information — skin type, conditions, allergies, or concerns you share with us during consultation
• Communications — messages sent via WhatsApp, our contact form, or email
• Usage data — pages visited, browser type, and device information collected automatically through our website

3. How We Use Your Data

We use your personal data for the following purposes:

• Managing and confirming your appointments
• Providing safe and personalised aesthetic treatments
• Maintaining your treatment records and consultation history
• Sending appointment reminders and follow-up communications
• Responding to your enquiries
• Sending promotional offers or updates, where you have provided consent
• Improving our website and services
• Complying with applicable laws and regulations

4. Disclosure of Your Data

We do not sell, rent, or trade your personal data. We may share it only in the following limited circumstances:

• Service providers — third-party vendors (e.g. hosting, analytics) who assist us in operating our website and business, under strict data protection obligations
• Legal requirements — where required by law, court order, or governmental authority

5. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law. Booking and treatment records are typically retained for a minimum of 3 years from your last appointment for operational and safety purposes.

6. Your Rights Under the PDPA

Under the PDPA, you have the right to:

• Access — request a copy of the personal data we hold about you
• Correction — request correction of any inaccurate or incomplete data
• Withdrawal of consent — withdraw your consent for us to collect, use, or disclose your data at any time (subject to legal and contractual restrictions)

To exercise any of these rights, please contact us at the details below. We will respond within 30 days of receiving your request.

7. Cookies

Our website may use cookies and similar technologies to improve your browsing experience and analyse site traffic. You can control or disable cookies through your browser settings. Disabling cookies may affect some functionality of the site.

8. Security

We implement reasonable administrative, technical, and physical safeguards to protect your personal data from unauthorised access, disclosure, or misuse. However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

9. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with a revised “Last updated” date. We encourage you to review this policy periodically.

10. Contact Us

For any questions, access requests, or data protection concerns, please contact our Data Protection Officer: