Privacy Policy

This Privacy Policy explains how ECLADO PTE. LTD. ("Eclado", "we", "us") collects, uses, discloses, and protects your personal data in accordance with Singapore’s Personal Data Protection Act 2012 (PDPA). It applies to our website, member accounts, treatments, and in-store services.

1. The personal data we collect

• Your name and WhatsApp number, to create and secure your member account.
• A one-time passcode (OTP) we generate to verify it is really you.
• Your membership tier, packages, purchases, gift redemptions, and order history.
• Treatment and appointment records, and the skin concerns, conditions, allergies or other health information you choose to share so we can advise on suitable treatments.
• Payment confirmation details from our payment provider (we never receive your full card number).
• Messages you send us through WhatsApp, our contact form, or in store.
• Basic technical information your browser sends automatically, such as device and usage data, to keep the site secure and working well.

2. How we collect it

We collect personal data directly from you — when you register, book or receive a treatment, place an order, redeem a gift, contact us, or visit our studio — and automatically through standard website technology.

3. Why we use your data

• To create and protect your account and verify your identity by OTP.
• To assess treatment suitability, deliver your treatments safely, and give appropriate aftercare.
• To process orders, payments, deliveries, memberships, packages, and gift redemptions.
• To respond to your enquiries and provide customer care.
• To send service messages about your account, orders, or appointments.
• To send marketing updates — only if you have given separate, optional consent.
• To keep our services secure and to meet our legal and accounting obligations.

4. Consent under the PDPA

We collect, use, and disclose your personal data only for purposes you would reasonably expect, or that we have told you about and you have consented to. Health-related information you share for a treatment is used only to advise on and provide that treatment safely. Service messages needed to run your account, orders, and appointments do not depend on marketing consent.

5. WhatsApp and one-time passcodes

We use your WhatsApp number to send login and verification codes, appointment reminders, and important service messages. These are essential to operate your account. Standard WhatsApp/Meta terms also apply to your use of WhatsApp.

6. Marketing messages and how to stop them

We send marketing only with your separate, optional consent. You can withdraw it at any time — reply STOP on WhatsApp, change the setting in your member portal, or email us. Withdrawing marketing consent will not affect your membership, appointments, or the service you receive.

7. Who we share your data with

We do not sell your personal data. We share it only with trusted service providers who help us run our business, under contracts that require them to protect it, including:

• Stripe, for secure payment processing.
• WhatsApp / Meta, for account verification and messaging.
• Our hosting and IT providers, for running and securing the website.
• Delivery partners, where needed to fulfil a product order.
• Government authorities or advisers, where the law requires or permits it.

8. Transfers outside Singapore

Some of our service providers may process data outside Singapore. Where this happens, we take steps required by the PDPA to ensure your data receives a comparable standard of protection.

9. How long we keep your data

We keep your personal data only as long as needed for the purposes above or as required by law (for example, accounting records). OTP and short-lived verification data are deleted automatically once they expire. When data is no longer needed, we securely delete or anonymise it.

10. How we protect your data

We use reasonable administrative, technical, and physical safeguards — including access controls and encryption in transit — to protect your data against unauthorised access, loss, or misuse.

11. Your rights: access and correction

Under the PDPA you may ask for a copy of the personal data we hold about you and how we have used it, and ask us to correct anything inaccurate. You may also withdraw consent for non-essential uses. To make a request, email cs@eclado.com.sg. We will respond within a reasonable time.

12. Cookies

We use a small number of cookies and similar technologies that are necessary for the site to work, to keep you signed in, and to remember your language. We do not use them to track you across other websites.

13. Changes to this policy

We may update this policy from time to time. The version and effective date appear at the top of this page, and material changes may be highlighted to you.

14. How to contact us

For any privacy question or request, contact our Data Protection Officer: email cs@eclado.com.sg, call +65 9615 7968, or write to ECLADO PTE. LTD., 176 Orchard Road, #02-50/51, The Centrepoint, Singapore 238843.