Privacy Policy

1. Information We Collect

• Contact details — name, phone number, email address.
• Booking & service records — appointments, treatments taken, packages and purchase history.
• Scalp & hair information — notes and images relating to treatments (including AI scalp analysis) that you provide or consent to.
• Payment information — processed via bank transfer or QR/e-wallet; we do not store full card or bank account credentials.
• Website & chat usage data — messages you send our AI chat assistant, and basic analytics and cookie data when you use this website.

2. How We Use Your Information

• To provide, personalise and improve our services and treatments.
• To manage bookings, payments, packages and customer records.
• To send appointment reminders, promotions and updates (only where you have opted in).
• To notify our staff of new chat enquiries so we can follow up with you promptly.
• To comply with legal and regulatory obligations.

3. Our AI Chat Assistant

Messages you send to our website chat assistant are processed by a third-party AI service provider (Google Gemini) in order to generate a reply, and are also relayed internally to our staff by email so a team member can follow up if needed. Please avoid sharing sensitive personal or medical information in the chat beyond what is necessary to answer your question.

4. Disclosure of Information

We do not sell your personal data. We may share it with trusted service providers who act on our behalf (such as payment processors, booking or messaging platforms, and our AI chat provider), and with authorities where required by law.

5. Cookies

This website may use cookies to analyse traffic and improve your experience. If you arrive from one of our Google ads, Google Ads may also set a cookie so we can tell whether the ad led you to book or contact us — for example by tapping a booking, WhatsApp or phone button. We receive only a count, not your identity. You can disable cookies in your browser settings, or manage ad personalisation at adssettings.google.com, though some features may not function properly as a result.

6. Data Security & Retention

We apply reasonable technical and organisational safeguards to protect your data against unauthorised access, loss or misuse, and retain it only for as long as necessary for the purposes above or as required by law.

7. Your Rights

Under the PDPA, you may request access to, correction of, or deletion of your personal data, and may withdraw consent to marketing communications at any time, by contacting us using the details below. If you are located in the European Economic Area, United Kingdom, or another jurisdiction with similar data protection laws, you may have additional rights (such as data portability and objection to processing) under those laws; we will honour such requests to the extent they apply to us.

8. Contact Us

WhatsApp / Phone: 011-3300 0930 · Email: healoasis1@gmail.com