Privacy Policy

What is the Privacy Policy?

The Privacy Policy defines the principles governing the collection, use, sharing, and processing of users’ personal information by Blonde Beauty and its affiliated companies. It applies to websites and apps owned and operated by Blonde Beauty, collectively referred to as “Services.”

This policy is applicable to personal data owned or under our control, including data owned by organizations we use to collect, use, share, or process data for our purposes. The collection, use, sharing, or processing of personal data on behalf of the government or state agencies will comply with state regulations on data management.

Users acknowledge reading and understanding the policy along with our Terms of Use. By using the Services, users agree to these terms, constituting a contract between them and Blonde Beauty. Users explicitly permit us to collect, use, share, or process their personal data as per this policy.

The policy covers data collected from individuals, potential users, and authorized representatives of service users in accordance with current laws on personal data security. It applies to websites, apps, and services provided by Blonde Beauty.

You confirm that you have read and understood this policy, as well as our Terms of Use. When using the Services, you confirm your agreement with our Terms of Use, and this agreement constitutes a contract between you and us. You also acknowledge that you have provided clear consent for us to collect, use, share, or process your personal data according to this policy.

What data will we process?

When used in this Policy, ‘personal data’ means data, whether true or not, about an individual who can be identified: (a) from that data, or (b) from that data and other information to which we have access or are likely to have access.

Depending on the nature of your interactions with us and the services we provide, some examples of personal data that we may collect from you include names, identification numbers such as national identification numbers, passports, work permits, and birth certificates, contact information such as residential address, email address, or phone number, nationality, age, gender, date of birth, marital status, medical records, images, and other audio-visual information, recruitment information, and financial information such as credit card numbers, debit card numbers, or bank account information, applications/browsers, and information about devices.

We may also collect information from external sources such as partners, suppliers, and third parties. We require these third parties to have the right to collect, use, and share your information before providing it to us.

How we collect and use personal data?

We generally do not collect your personal data unless (a) personal data is provided to us voluntarily directly from you or through a third party authorized by you to share your personal data with us (‘your authorized representative’), after (i) you (or your authorized representative) have been informed of the purposes for which the data is collected (please read the purposes mentioned below), and (ii) you (or your authorized representative) have consented to the collection and use of your personal data for those purposes, or (b) the collection and use of personal data without consent is permitted or required by the current data protection laws. We will seek your approval before collecting any additional personal data.

We may use your personal data for any and all of the following purposes:

• To provide, enhance, and create current and new Services;
• To offer personalized experiences, including displaying advertisements, to ensure that everything you see is truly interesting and useful to you;
• To handle and process your inquiries, requests, registrations, complaints, and feedback, and send you administrative communications regarding our websites and Services;
• To send you secure electronic messages and personalized emails related to your interests inferred from your use of the Services, including news, announcements, reminders, and opportunities from us;
• To analyze statistics on user trends, behaviors, and activities, including the frequency of access to viewed topics on the website, how the Services are used, and the number of emails received and opened by users;
• To provide you and others with demographic characteristics and interests in more relevant content, including advertising both on and off our websites and applications;
• To offer customer potential building services;
• To detect and prevent fraud and other threats to the Services and our users;
• To identify issues with the Services;
• To conduct research and evaluation activities, including the activities described below;
• To manage and verify your accounts and identity;
• To transfer to unrelated third parties including our partners, service providers, agents, and other third parties, both in and outside Singapore, to fulfill the purposes mentioned above;
• To send you promotional information (including by direct mail, email, phone calls, and text messages) or otherwise contact you about products, services, programs, or other topics that we think you may be interested in with your consent as required by current data protection laws;
• To invite you to participate in research based on factors such as how you use our Services;
• To comply with any laws, regulations, practice rules, guidelines, or current rules or to support law enforcement and investigations conducted by any government and/or regulatory agency;
• For any other purposes that you have provided information for;
• For any other random purposes arising from or related to the purposes mentioned above.
• For any other purposes not mentioned above (except as permitted or required by law), we will seek your consent before using your personal data.

The purposes listed in the above terms may continue to apply even in the event that the relationship between you and us is terminated or changed in any way, for a reasonable period thereafter (including, if applicable, a period allowing us to enforce our rights under the contract with you), unless you have clearly notified us that you have withdrawn your consent for the purposes mentioned above.

We may combine your personal information with other information collected about your use of the Services, and supplement it with information from external sources for the purposes described in this Policy. For example, the information we collect about you may be combined with other information we already have through third parties for research and evaluation purposes, including assessing the effectiveness of displayed content, advertisements, or programs. We may generate aggregate information reports for current or potential advertisers and other business partners, which cannot identify a specific individual user on our websites.

How personal data is shared?

We may disclose and share your personal data:

• When such sharing is necessary for, or related to, providing the services you request;
• With partners, clients, third-party service providers, agents, suppliers, and other organizations we use to fulfill any of the purposes listed in Section III above for us;
• Any other party you have allowed us to share your personal data with or when necessary to fulfill any actions requested by you;
  To our partners, clients, and third parties to provide more useful services and promotional information to you (including advertisements displayed on our websites and/or third-party websites);
• With third parties that you choose to connect on our websites or users of our products and services;
• To our subsidiaries and affiliated companies within the Blonde Beauty, and will continue to adhere to this Policy.
• The purposes listed in the terms above may continue to apply even in the event that the relationship between you and us is terminated or changed in any way, for a reasonable period thereafter (including, if applicable, a period allowing us to enforce our rights under the contract with you), unless you have clearly notified us that you have withdrawn your consent for the purposes mentioned above.

Default Consent by Notice

We may collect or use your personal data, or share existing personal data for secondary purposes other than the original purposes for which the information was collected under this Policy. If we intend to rely on consent deemed to be given by notice for such secondary purposes, we will inform you about the proposed collection, use, or sharing of personal data through appropriate communication method(s).

You will have a reasonable period to notify us if you do not wish to participate in the collection, use, and sharing of your personal data for such purposes.

If beyond the deadline for opting out, you may still inform us that you no longer consent to the purposes you have previously implicitly consented to by notice by withdrawing your consent to the collection, use, or sharing of your personal data related to those purposes.

How to withdraw your consent

Your consent for the collection, use, and sharing of your personal data will remain effective until you or your authorized representative withdraws it in writing. You or your authorized representative may withdraw consent and request us to cease collecting, using, and/or sharing your personal data for any or all of the purposes listed above by sending your request via email or otherwise in writing to our Data Protection Officer using the contact details provided below. If you are unable to submit your request in writing or if you require any assistance in submitting your request, you may request to speak or meet with our Data Protection Officer.

Upon receiving a written request to withdraw your consent, we may require a reasonable time (depending on the complexity of the request and its impact on our relationship with you) to process your request and to inform you of the consequences, including any legal consequences that may affect your rights and obligations towards us. Normally, we will process your request within thirty (30) days from the date of receiving the request.

While we respect your decision to withdraw your consent, please note that depending on the nature and scope of your request, we may not be able to continue providing our goods or services to you, and in such cases, we will notify you before completing the processing of your request. If you decide to cancel your withdrawal of consent, please inform us as described above.

Please note that the withdrawal of your consent does not affect our right to continue collecting, using, and sharing personal data when such collection, use, and sharing without consent is permitted or required by applicable law.

How to access and edit personal data

If you wish to exercise (a) access requests to obtain a copy of the personal data we hold about you or information on how we use or share your personal data, or (b) correction requests to amend or update any of your personal data that we hold about you, you may submit your request via email or otherwise in writing to our Data Protection Officer using the contact details provided below. If you need assistance in submitting your request, you may request to speak or meet with our Data Protection Officer.

Please note that a reasonable fee may be charged for an access request. In such cases, we will inform you of the fee before processing your request.

We will respond to your request as promptly as possible. Our response will typically be sent within two (2) business days. If we are unable to respond to your request within thirty (30) days of receiving your request, we will inform you in writing within thirty (30) days before we can fulfill your request. If we cannot provide you with any personal data or make the corrections as per your request, we will inform you of the reasons why we cannot do so (unless we are not required to do so by applicable law).

Additionally, you may edit, update, or review the personal information you have provided to us by returning to the specific service, logging in, and changing the information as desired. You can also update any personal information you have provided to us using the contact information provided below or through the links in the “Contact” section at the bottom of each page on our website.

When you register to receive email notifications for any of our services, including email newsletters, or at any time, you may also choose not to receive further newsletters or other email notifications from us or from our advertisers, sponsors.

If you have any questions, concerns, or complaints regarding the handling of your personal data or if you wish to exercise your rights, please contact our Data Protection Officer.

How personal data is protected

To safeguard your personal data from unauthorized access, collection, use, sharing, copying, alteration, illicit processing, or similar risks, we have implemented practical and reasonable management and technical measures, such as minimizing the collection of personal data, authentication and access controls (e.g., strong password concepts, data sharing only when necessary, etc.), data encryption, anonymization of data, updating virus protection features, regular patching of operating systems and other software, secure disposal of storage media before discarding, web security measures against risks, using one-time passwords (OTP) / two-factor authentication (2FA) / multi-factor authentication (MFA) for secure access, as well as conducting regular security assessments and audits. When you input personal information (including personal health information in various services), we encrypt the transmission of that information or use SSL (Secure Socket Layer) technology.

However, you should be aware that no transmission method over the Internet or electronic storage method is entirely secure. While we cannot guarantee absolute security, we strive to protect the security of your information and continuously review and enhance our information security measures. Despite our efforts to protect your personal information, there is always a risk that an unauthorized third party may find a way to breach our security systems or that the transmission of your information over the Internet may be intercepted. Please note that you should notify us as soon as possible if you lose control of your account or become aware that your device has been compromised, and please take responsibility for the security of your passwords and account information.