What we do with
your personal data.
This notice explains — plainly and briefly — what personal information we collect when you use Roses & More, why we collect it, who sees it, how long we keep it, and what you can do about it. No legal complexity. Just clarity.
For the full legal detail, read our Privacy Policy →Roses & More Pte Ltd is committed to handling your personal data responsibly and in accordance with Singapore's Personal Data Protection Act 2012 (PDPA). This Data Protection Notice is a plain-language summary of our practices. Our full Privacy Policy contains the complete legal detail.
We collect only what we need. We use it only for the purposes described below. We never sell it. And we make it easy for you to understand, access, or remove what we hold about you.
What personal data
we collect.
When you book a treatment, visit our studio, or get in touch with us, we may collect the following types of information:
Name, phone number, email address, date of birth, and mailing address
Medical history, known allergies, current medications, skin concerns, and contraindication information — needed to treat you safely
Consultation notes, session records, before-and-after photographs (with your explicit consent), and progress documentation
Appointment history, payment records, and credit or package balances via Fresha and HitPay
We do not collect sensitive data we do not need. Health information is collected only where it is relevant to your treatment safety.
Why we collect
your information.
Everything we collect serves a specific, legitimate purpose. Here is what we use your data for:
- Treatment & safety — composing your treatment protocol, checking contraindications, and ensuring that everything we do is clinically appropriate for your skin and health
- Appointments & administration — managing your bookings, sending reminders, processing payments, and keeping your account accurate
- Client communication — responding to your enquiries, sharing aftercare guidance, and following up after treatment
- Marketing — sending you offers, updates, and educational content, but only if you have given us consent to do so. You can withdraw this at any time
- Legal compliance — maintaining records as required by law, and protecting our mutual interests in the event of any dispute
Who we share
your data with.
We share your data only with the service providers who help us operate — and only to the extent necessary for those services. All providers are bound by their own privacy obligations.
- Fresha — our booking and appointment management platform
- HitPay — our payment processing platform. We do not store your full card details
- Google Workspace — secure storage of client forms and communication records
- Our team — only the practitioners and staff who need your information to provide your treatment and care
- Legal authorities — only where required by law or valid legal order
We do not sell, rent, or share your personal data with any third party for marketing or commercial purposes. Not now, not ever.
How long we keep
your data.
We keep your data for as long as it is needed — and no longer. The periods below reflect both clinical best practice and Singapore legal requirements.
From your last visit — required for clinical continuity and legal compliance
As required by Singapore accounting and tax regulations
Withdrawn consent is acted on immediately — no further marketing will be sent
Depending on the analytics tool — used only in anonymised or aggregate form
When data is no longer needed, it is securely deleted or anonymised so it cannot be linked back to you.
Your rights
under the PDPA.
Under Singapore's Personal Data Protection Act 2012, you have meaningful rights over the data we hold about you. These are not complicated to exercise — just contact us.
Request a copy of the personal data we hold about you and information on how it has been used
Ask us to correct any inaccurate, incomplete, or outdated information we hold
Opt out of marketing communications or withdraw any consent you have given — at any time, with immediate effect
Request your data in a structured, machine-readable format where technically feasible
Ask us to delete your personal data — subject to any legal retention requirements that may apply. We will tell you if these apply to your request
Lodge a complaint with us directly, or escalate to the PDPC if you are not satisfied with our response
How to exercise
your rights.
To access, correct, delete, or otherwise act on your personal data, simply get in touch with us directly. We will acknowledge your request within 5 business days and respond fully within 30 days as required by the PDPA.
Email: hello@rosesnmore.com
WhatsApp: +65 8841 9188
Post: 64B Peck Seah Street, Singapore 079325
There is no fee for making a data access or correction request. If a request is manifestly unfounded or excessive, we may ask for a reasonable administrative fee — but we will always explain why first.
How we protect
your data.
We take the security of your personal data seriously and have appropriate technical and organisational measures in place:
- Password-protected and access-controlled digital systems for all client records
- Encrypted communications for any sensitive data transmission
- Physical access controls at our studio premises
- Client data accessible only to staff who need it to carry out their role
- Team members trained in data protection and PDPA obligations
- Regular review of our data handling and security practices
No digital system is entirely without risk. In the event of a data breach that could cause you harm, we will notify both you and the PDPC promptly in accordance with our mandatory breach notification obligations under the PDPA.
Cookies &
website tracking.
Our website may use cookies and similar tracking technologies for the following purposes:
- Improving website navigation and user experience
- Analysing how visitors use our site (via tools such as Google Analytics)
- Remembering your preferences between visits
You can control or disable cookies through your browser settings at any time. Disabling certain cookies may affect some website functionality. Where required by law, we will request your consent before placing non-essential cookies.
Third-party analytics tools we use operate under their own privacy terms. We use these tools only to understand aggregate site performance — not to identify individual visitors.
If something
goes wrong.
If you believe your personal data has been mishandled or your rights have not been respected, please contact us first. We take every concern seriously and aim to resolve it within 30 days.
If you are not satisfied with our response, you have the right to escalate your complaint to Singapore's Personal Data Protection Commission:
Website: www.pdpc.gov.sg
Hotline: 1800-PDPC-ACE (1800-7372-223)
Email: enquiries@pdpc.gov.sg
Updates to this notice
We may update this Data Protection Notice from time to time to reflect changes in our practices or legal requirements. Any updates will be published here with a revised date. Continued use of our services after an update constitutes your acceptance of the revised notice.
For material changes, we will make reasonable efforts to notify active clients directly. Our full Privacy Policy is always the authoritative document on how we handle your data.
Any questions?
We're here.
If anything in this notice is unclear, or if you simply want to know more about how we handle your personal data, please reach out. We are a small studio and we always respond personally.
64B Peck Seah Street, Singapore 079325
Email: hello@rosesnmore.com
WhatsApp: +65 8841 9188
Hours: Daily, 10am – 7pm
For the complete legal detail of our data practices, rights, and obligations — including international data transfers, children's privacy, and third-party service specifics — please read our full Privacy Policy.