Introduction
The Lumé Aesthetics (“The Lume”, “we”, “us”, or “our”) is committed to protecting your personal data and respecting your privacy in accordance with Singapore’s Personal Data Protection Act 2012 (“PDPA”).
This Privacy Policy explains how we collect, use, disclose, store, and protect your personal data when you visit our website, use our services, purchase our products, or otherwise interact with us.
By accessing our website, engaging our services, or providing your personal data to us, you acknowledge that you have read and understood this Privacy Policy and consent to the collection, use, and disclosure of your personal data as described herein.
Collection of Personal Data
We may collect personal data that you voluntarily provide to us through our website, in-clinic consultations, appointments, communications, promotions, surveys, and other interactions.
The personal data we collect may include:
- Full name
- Contact number
- Email address
- Postal address
- Date of birth
- Payment and billing information
- Medical and treatment-related information where relevant
- Responses to surveys, promotions, and feedback forms
- CCTV footage captured within our premises for security and safety purposes
Certain personal data is necessary for us to provide our services. Failure to provide the requested information may limit our ability to serve you effectively.
Purposes for Collection, Use, and Disclosure
We may collect, use, and disclose your personal data for purposes including but not limited to:
- Providing aesthetic, wellness, and related services
- Managing appointments and consultations
- Processing payments and transactions
- Responding to enquiries and customer support requests
- Verifying your identity
- Administering promotions, contests, and marketing campaigns
- Sending appointment reminders and service updates
- Conducting market research and customer satisfaction surveys
- Improving our services and website functionality
- Detecting and preventing fraud or unauthorized activities
- Complying with legal and regulatory obligations
We will only collect and use personal data for purposes that a reasonable person would consider appropriate under the circumstances.
Marketing Communications
With your consent, we may send you information regarding promotions, special offers, new treatments, events, and services.
You may withdraw your consent to receive marketing communications at any time by following the unsubscribe instructions provided in our communications or by contacting us directly.
Disclosure of Personal Data
We may disclose your personal data to trusted third parties where necessary for the purposes outlined in this Privacy Policy.
Such parties may include:
- Professional advisors
- Payment service providers
- Technology and hosting providers
- Marketing and communications service providers
- Medical practitioners and healthcare partners
- Insurance providers
- Government agencies, regulators, or law enforcement authorities where required by law
All third parties engaged by us are required to maintain appropriate confidentiality and security standards.
International Transfers of Personal Data
Where personal data is transferred outside Singapore, we will take reasonable steps to ensure that the receiving party provides a standard of protection comparable to that required under the PDPA.
Where necessary, appropriate contractual safeguards will be implemented.
Cookies and Website Technologies
Our website may use cookies and similar technologies to enhance user experience, analyze website performance, and improve our services.
Cookies may collect information such as:
- Browser type
- Device information
- Website usage patterns
- User preferences
You may disable cookies through your browser settings, although certain website functions may become unavailable.
Accuracy of Personal Data
We take reasonable steps to ensure that personal data collected by us is accurate, complete, and up to date.
You are encouraged to notify us promptly of any changes to your personal information.
Protection of Personal Data
We implement appropriate administrative, physical, and technical safeguards to protect personal data against:
- Unauthorized access
- Unauthorized disclosure
- Misuse
- Loss
- Modification
- Destruction
Our security measures include secure servers, access controls, encryption technologies, and regular security reviews where appropriate.
Retention of Personal Data
We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable laws and regulations.
When personal data is no longer required, it will be securely deleted, destroyed, or anonymised.
Access and Correction Requests
You may request access to or correction of your personal data held by us.
We may require reasonable verification of identity before processing such requests.
Requests may be subject to applicable fees permitted under the PDPA.
Withdrawal of Consent
You may withdraw your consent to our collection, use, or disclosure of your personal data by providing written notice to us.
Please note that withdrawing consent may affect our ability to continue providing certain services to you.
CCTV Monitoring
For the safety and security of our patients, visitors, employees, and premises, CCTV cameras may operate within our clinic and facilities.
Recorded footage is securely stored and accessible only to authorized personnel for legitimate security and operational purposes.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in legal requirements, business practices, or operational needs.
The latest version will always be available on our website at:
Your continued use of our services after any update constitutes acceptance of the revised Privacy Policy.
Contact Us
If you have any questions, requests, or concerns regarding this Privacy Policy or our handling of your personal data, please contact our Data Protection Officer:
Email: dpo@the-lumeaesthetics.com
When contacting us, please include:
- Your full name
- Contact details
- Description of your request or concern
We will respond within a reasonable timeframe in accordance with applicable legal requirements.
Last Updated: June 2026