BeautyPro Logo

Legal Documents

Terms of Service Privacy Policy License Agreement Refund Policy Data Processing PDPA Consent

Privacy Policy

How we collect, use, and protect your personal information

GDPR Compliant
PDPA Compliant
CCPA Ready
Last Updated October 15, 2024
Version 3.2.0
Applicable Regions Global

1. Introduction

BeautyPro Pte Ltd ("we," "us," or "our") operates the BeautyPro platform. This Privacy Policy explains how we collect, use, disclose, and safeguard your information.

2. Information We Collect

2.1 Personal Information

We collect information that identifies you ("Personal Information"), including:

Category Examples Purpose
Contact Information Name, email, phone, address Account creation, communication
Account Information Username, password, profile picture Account security, personalization
Business Information Company name, tax ID, registration Business verification, billing
Booking Information Appointments, service preferences Service delivery, reminders
Payment Information Billing address, payment method Transaction processing

2.2 Automatically Collected Information

  • Device Information: IP address, browser type, operating system
  • Usage Data: Pages visited, features used, time spent
  • Location Data: With your permission, approximate location

2.3 Cookies and Tracking Technologies

We use cookies and similar technologies to:

  • Remember your preferences
  • Analyze usage patterns
  • Personalize content
  • Improve security

You can control cookies through your browser settings.

3. How We Use Your Information

Data Collection
Processing
Purpose Fulfillment

We use your information for:

Service Operation

Providing and maintaining the BeautyPro platform

Transactions

Processing payments and managing subscriptions

Communication

Sending service updates and notifications

Improvement

Analyzing usage to enhance our services

Marketing

Sending promotional materials (with opt-out)

Legal Compliance

Meeting regulatory requirements

4. Legal Basis for Processing (GDPR)

If you are in the European Economic Area (EEA), we process your information based on:

Legal Basis Description Examples
Contract Performance Processing necessary for our contract Providing booked services
Consent You have given clear consent Marketing communications
Legitimate Interests Our legitimate business interests Service improvement, security
Legal Compliance Processing required by law Tax reporting, fraud prevention

5. Sharing of Information

5.1 Service Providers

We share information with third-party vendors who perform services for us:

  • Payment processors: Stripe, PayPal
  • Hosting providers: AWS, Google Cloud
  • Analytics services: Google Analytics
  • Customer support: Zendesk, Intercom

5.2 Legal Requirements

We may disclose information if required by law or in response to valid requests by public authorities.

5.3 Business Transfers

In connection with any merger, sale of company assets, or acquisition, your information may be transferred.

6. International Transfers

Your information may be transferred to and maintained on computers located outside of your country. We implement appropriate safeguards including:

  • Standard Contractual Clauses (SCCs)
  • Data Processing Agreements
  • Encryption and security measures

7. Data Security

We implement reasonable security measures including:

  • Encryption of data in transit (TLS 1.2+) and at rest (AES-256)
  • Regular security assessments and penetration testing
  • Access controls and authentication mechanisms
  • Secure development practices (OWASP guidelines)

8. Your Rights

Right to Access

Request copies of your personal data

Right to Rectification

Correct inaccurate information

Right to Erasure

Request deletion of your data

Right to Restrict

Limit processing of your data

Data Portability

Receive your data in machine-readable format

Right to Object

Object to processing based on legitimate interests

PDPA Rights (Malaysia/Singapore)

If you are in Malaysia or Singapore, you have additional rights under the Personal Data Protection Act, including:

  • Right to access and correct personal data
  • Right to withdraw consent
  • Right to prevent processing likely to cause damage or distress

Exercising Your Rights

To exercise your rights, contact our Data Protection Officer at dpo@beautypro.com. We will respond within 30 days.

9. Data Retention

We retain your information only as long as necessary:

Data Type Retention Period Reason
Account Information 7 years after account closure Legal requirements, dispute resolution
Transaction Records 10 years Tax compliance, financial auditing
Booking History 3 years after last activity Service improvement, analytics
Marketing Data Until consent withdrawal Marketing communications

10. Children's Privacy

Our Service is not intended for children under 18. We do not knowingly collect information from children. If we become aware that we have collected personal information from a child without parental consent, we will take steps to remove that information.

Data Protection Officer

For privacy-related inquiries or to exercise your data rights:

John Smith
Data Protection Officer

dpo@beautypro.com

+65 6123 4567 (ext. 101)

We respond to all legitimate requests within 30 days. There is no charge for exercising your rights.

11. Changes to This Policy

We may update this policy. We will notify you of material changes via email or through the Service 30 days before changes take effect.

Print this policy

Download as PDF

Last reviewed: October 15, 2024