Legal

Privacy
Policy

How Atelier Aesthetics collects, uses and protects your personal data — in compliance with Singapore's Personal Data Protection Act (PDPA).

Last updated: 17 June 2026

1. Introduction

Atelier Aesthetics ("we", "us", "our") is committed to protecting your personal data and respecting your privacy. This Privacy Policy explains how we collect, use, disclose and protect your personal data in accordance with the Personal Data Protection Act 2012 (PDPA) of Singapore.

By engaging with our website at atelieraesthetics.asia, contacting us via WhatsApp or email, or visiting our clinic at 1 Raffles Link, #B1-28 CityLink Mall, Singapore 039393, you consent to the practices described in this policy.

2. Data We Collect

We may collect the following categories of personal data:

  • Identity data: name, date of birth, gender, nationality
  • Contact data: email address, phone number, WhatsApp number, postal address
  • Health & medical data: medical history, treatment history, skin condition information, photographs taken for clinical purposes
  • Communication data: records of consultations, WhatsApp messages, email correspondence
  • Technical data: IP address, browser type, pages visited on our website, device information
  • Usage data: how you interact with our website and communications

3. How We Collect Your Data

  • Directly from you — when you contact us via WhatsApp, email or phone
  • During consultations and treatment sessions at the clinic
  • Through our website via contact forms or enquiry submissions
  • Through cookies and similar tracking technologies on our website

4. How We Use Your Data

We use your personal data for the following purposes:

  • To schedule and manage your consultations and appointments
  • To provide medical aesthetic treatments and maintain clinical records
  • To communicate with you regarding your treatment and follow-up care
  • To respond to your enquiries and provide information about our treatments
  • To improve our website and services
  • To comply with legal and regulatory obligations
  • To send you relevant health information or appointment reminders (with your consent)

We will not use your data for direct marketing purposes without your explicit consent, and we will never sell your personal data to third parties.

5. Medical Records & Clinical Data

Medical records and clinical photographs taken during your treatment are considered sensitive personal data under the PDPA. These are:

  • Stored securely with access restricted to Dr. Sin Yong and authorised clinical staff only
  • Retained for a minimum of 6 years in accordance with Singapore Medical Council guidelines
  • Never shared with third parties without your explicit written consent
  • Never published publicly in any form without your separate written consent

Before/after clinical photographs will only be used for your personal treatment record. Any use for educational or marketing purposes requires your separate, explicit written consent.

6. Disclosure of Your Data

We may share your personal data with:

  • Referral medical practitioners or specialists if required for your care (with your consent)
  • Government authorities or regulators where required by law
  • Third-party service providers who assist with website hosting, IT services and analytics — all bound by confidentiality obligations

We do not disclose your personal data to any other third party without your consent.

7. Data Retention

We retain your personal data only as long as necessary for the purposes for which it was collected, or as required by law. Medical records are retained for a minimum of 6 years. Website technical data is typically retained for up to 12 months.

8. Cookies

Our website may use cookies to improve your browsing experience and understand how visitors use our site. You can control cookie settings through your browser. Disabling cookies may affect some functionality of the website.

9. Your Rights Under PDPA

Under the PDPA, you have the right to:

  • Access — request a copy of the personal data we hold about you
  • Correction — request correction of inaccurate or incomplete data
  • Withdrawal of consent — withdraw consent for non-essential data use at any time
  • Data portability — request transfer of your data in a machine-readable format

To exercise any of these rights, please contact us at [email protected]. We will respond within 30 days.

10. Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, disclosure, alteration or destruction. However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

11. Third-Party Links

Our website may contain links to third-party websites (including WhatsApp, Google Maps and social media platforms). We are not responsible for the privacy practices of those websites and encourage you to review their privacy policies.

12. Updates to This Policy

We may update this Privacy Policy from time to time. The updated version will be posted on this page with the revised date. We encourage you to review this policy periodically.

13. Contact Us

For any questions, requests or concerns regarding this Privacy Policy or your personal data, please contact:

You also have the right to lodge a complaint with the Personal Data Protection Commission (PDPC) of Singapore if you believe your data rights have been violated.

Chat with Dr. Sin Yong