Privacy Policy

1. Personal data we may collect

The personal data we collect depends on how you interact with us. It may include:

• Your name, telephone number, email address and other contact details.
• Appointment, consultation, enquiry and communication records.
• Information you voluntarily provide about your body concerns, treatment goals, health history, medication, allergies, pregnancy status, implants or other matters relevant to treatment suitability.
• Transaction and payment-related information. Where a third-party payment provider is used, that provider may process payment details under its own privacy terms.
• Photographs, treatment records or progress information where you have agreed to their collection and use.
• Website usage information, such as your IP address, browser type, device information, pages visited, referral source and cookie identifiers.
• Marketing preferences and records of consent, withdrawal or opt-out requests.

2. How we collect personal data

We may collect personal data when you:

• Complete a website form or request a consultation.
• Contact us by telephone, WhatsApp, email, social media or in person.
• Book, attend or pay for a consultation or treatment.
• Provide information during an assessment or follow-up review.
• Subscribe to updates or respond to a promotion.
• Browse our website or interact with cookies, analytics tools, embedded content or advertising technologies.

We may also receive personal data from authorised representatives, referral partners, booking platforms, payment providers or other service providers where permitted by law.

3. How we use personal data

We may collect, use or disclose personal data for purposes including:

• Responding to enquiries and arranging consultations or appointments.
• Assessing suitability, preparing personalised treatment plans and providing requested services.
• Communicating appointment confirmations, reminders, aftercare information and service updates.
• Processing payments, refunds, invoices and administrative records.
• Maintaining treatment, consent, safety and customer-service records.
• Managing feedback, requests, complaints, disputes or insurance-related matters.
• Improving our website, services, customer experience, security and internal operations.
• Complying with applicable laws, regulatory requirements, legal processes and risk-management obligations.
• Sending marketing communications where you have consented or where otherwise permitted by law.

We will not use personal data for a materially different purpose without informing you and obtaining consent where required.

4. Consent and withdrawal

You may withdraw your consent for the collection, use or disclosure of your personal data by contacting us. We will explain the likely consequences of the withdrawal and process your request within a reasonable period.

Withdrawal of consent does not affect any collection, use or disclosure that was lawful before the withdrawal. We may also retain or continue using certain information where required or permitted by law.

5. Disclosure to service providers and other parties

We do not sell personal data. We may disclose relevant personal data to parties that help us operate the business or provide requested services, including:

• Website hosting, information technology, cloud storage and cybersecurity providers.
• Appointment, customer relationship, messaging and communication platforms.
• Payment processors, banks, accountants, insurers and professional advisers.
• Marketing, analytics and advertising service providers where applicable.
• Regulators, law-enforcement agencies, courts or other authorities where required or permitted by law.
• A purchaser, successor or adviser involved in a proposed business transfer, restructuring or transaction, subject to appropriate safeguards.

We require service providers to handle personal data only for authorised purposes and to apply appropriate safeguards.

6. Cookies and website analytics

Our website may use cookies and similar technologies to remember preferences, maintain website functionality, understand traffic, measure performance and support marketing. Cookies may collect information about your device and browsing activity.

You can control cookies through your browser settings and, where available, our cookie preference controls. Blocking certain cookies may affect website functionality.

Third-party services may set their own cookies or process information under their own privacy policies. This may include analytics, maps, embedded media, social platforms, advertising tools, form-protection services and booking or messaging services.

7. Marketing communications

Where permitted, we may contact you about LAVAĒ services, promotions or updates. You may opt out at any time by using the unsubscribe method in the message or by contacting us.

We will handle telephone and messaging marketing in accordance with applicable consent and Singapore Do Not Call requirements.

8. Retention of personal data

We retain personal data only for as long as it is reasonably needed for the purposes for which it was collected, for legitimate business or safety requirements, or to comply with legal, accounting, insurance and dispute-resolution obligations.

When personal data is no longer required, we will take reasonable steps to delete, anonymise or securely dispose of it.

9. Protection and security

We use reasonable administrative, physical and technical measures to protect personal data against unauthorised access, collection, use, disclosure, copying, modification, loss or disposal. Measures may include access controls, secure hosting, password protection, software updates, backups and staff confidentiality practices.

No internet transmission or storage system is completely secure. You should avoid sending highly sensitive information through unsecured channels unless specifically requested.

10. Overseas transfers

Some service providers may process or store personal data outside Singapore. Where personal data is transferred overseas, we will take reasonable steps to ensure that it receives a standard of protection comparable to that required under Singapore law.

11. Access and correction requests

You may request access to personal data in our possession or information about how it has been used or disclosed, and you may ask us to correct inaccurate or incomplete personal data.

We may need to verify your identity before processing a request. A reasonable administrative fee may apply to an access request where permitted, and certain exceptions may apply under law.

12. Data incidents

If a data incident occurs, we will assess it, take reasonable containment and remediation steps, and notify affected individuals and the relevant authority where notification is required by law.

13. Third-party websites and services

Our website may link to third-party websites, social platforms, maps, booking tools or messaging services. We are not responsible for their privacy practices. Please review the relevant third-party privacy policy before providing personal data.

14. Children’s personal data

Our services and website are not intended to invite children to submit personal data independently. Where information relating to a minor is required, it should be provided by, or with the consent of, a parent or legal guardian.

15. Updates to this Privacy Policy

We may update this Privacy Policy to reflect changes in our services, practices, technology or legal requirements. The effective date at the top of this page indicates when the policy was last updated. Material changes may also be communicated through the website or other appropriate channels.

16. Contact and data protection requests

For questions, withdrawal of consent, access or correction requests, complaints or other privacy matters, contact: