Privacy Policy隐私政策

This policy explains how MINE BROW PTE LTD (“Mine Brow”, “we”) collects, uses, discloses and protects personal data under Singapore’s Personal Data Protection Act 2012 (PDPA). It applies when you message us on WhatsApp, Facebook Messenger or Instagram, book or receive our services, or visit this website.

1. Who we are 关于我们

2. Personal data we collect 我们收集的个人资料

• Contact details: name, mobile number, and your WhatsApp, Messenger or Instagram account identifier and display name.
• Messages you send us and our replies.
• Service records: appointment dates, services received, product and technique details, preferences and notes.
• Allergies and sensitivities you tell us about, so we can serve you safely.
• Photos of the treated area (before, after and close-up), taken only with your consent.
• Your electronic signature confirming each service, and the date and time you gave consent.

3. How we use your data 资料用途

• To reply to your enquiries and manage your bookings.
• To perform services safely, taking your allergies and preferences into account.
• To keep service records and photos for follow-ups and touch-ups.
• To record your confirmation of each service with your signature.
• To meet our legal obligations and resolve disputes.

We do not sell personal data. We do not use your photos for marketing unless you give separate, express consent.

4. Consent and withdrawal 同意与撤回同意

We ask for your consent when we first create your customer record. You may withdraw consent at any time by emailing privacy@minebrow.com. We will tell you what withdrawal means for you (for example, we may be unable to provide some services without your allergy information) and will act on your request within a reasonable time, generally within 10 working days.

5. Automated replies 自动回复

Initial replies to text enquiries may be drafted by an AI assistant run by a third-party provider. Our staff handle bookings and all decisions about your service. We do not use automated processing to make decisions that have legal or similarly significant effects on you.

6. Who we share data with 资料共享对象

We share personal data only with service providers that help us run our business, and only as needed:

• Meta Platforms (WhatsApp, Messenger, Instagram): to receive and send messages.
• Telegram: an internal channel our staff use to read and reply to your messages. Customer summaries sent there do not include photos.
• Supabase: secure database and file storage, hosted in Singapore.
• Cloudflare: secure network connections and website hosting.
• Our AI service provider: to draft initial replies to text enquiries.

We may also disclose personal data where required or permitted by law.

7. Transfers outside Singapore 境外转移

Some of these providers, including Meta, Telegram, Cloudflare and our AI provider, may process data outside Singapore. Where this happens, we take steps to ensure your data receives a standard of protection comparable to that under the PDPA.

8. How we protect your data 资料保护措施

Only authorised staff can access customer records, through individual logins. Photos and signatures are kept in private, encrypted storage and are viewed through links that expire. Backups are encrypted.

9. How long we keep data 保存期限

We keep your personal data for 5 years after your last service or last contact with us, whichever is later, and then securely delete or anonymise it, unless the law requires us to keep it longer.

10. Access, correction and deletion 查阅、更正与删除

To access or correct your personal data, email privacy@minebrow.com with your name and mobile number. We may ask you to verify your identity. We aim to respond within 30 days and will tell you if we need longer. We may charge a reasonable fee for access requests, and will tell you the amount first.

To have your data deleted, including messages you sent us through WhatsApp, Messenger or Instagram, email us with the subject “Data deletion request”. We will delete your data within 30 days and confirm by email, except records the law requires us to keep. Copies of messages in your own app, and data held by the messaging platforms under their own policies, are not affected.

11. Customers under 18 未满 18 岁的顾客

If you are under 18, a parent or guardian must give consent on your behalf.

12. Changes to this policy 政策更新

We may update this policy. The current version is always on this page, with its effective date at the top.

13. Contact our Data Protection Officers 联系数据保护负责人

Our Data Protection Officers are the directors of MINE BROW PTE LTD. Email privacy@minebrow.com or write to 55 Tengah Garden Walk, Singapore 699911. If you are not satisfied with our response, you may contact the Personal Data Protection Commission at www.pdpc.gov.sg.