Privacy Policy

1. Who We Are

This Privacy Policy explains how Bellissimo Sorelle ("we", "us", "our"), a unisex beauty salon operating in Punggol, Singapore, collects, uses, discloses, and protects personal data in accordance with Singapore's Personal Data Protection Act 2012 (PDPA).

2. Personal Data We Collect

We only collect personal data that you provide to us directly, through the following channels:

• Appointment bookings — your name, phone number, email address, and any allergies, medical conditions, or notes you choose to share so we can prepare for your treatment safely. If you opt in, we also record your consent to receive marketing messages.
• Enquiries — any name, contact details, or message content you send us via WhatsApp, phone, email, or our contact page.
• Site performance data — anonymous, aggregate Core Web Vitals measurements (e.g. how quickly a page loaded) sent automatically from your browser. These are not linked to your name or any other personal identifier — see our Cookie Policy for details.

We do not collect or store payment card details. Payment for services is made in person at the salon (PayNow, cash, or card) using the salon's own payment terminal or PayNow account, not through this website.

3. How We Use Your Data

We use the personal data described above only to:

• create, confirm, reschedule, or cancel your appointment;
• contact you about your booking (for example, to confirm details or a deposit);
• respond to enquiries you send us;
• take reasonable precautions for your safety during a treatment (e.g. noting an allergy);
• send you marketing messages, but only if you have opted in when booking; and
• maintain internal business records.

We do not use your personal data for any purpose beyond these without asking for your consent first.

4. Disclosure of Personal Data

We do not sell your personal data. We do not share it with third parties for their own marketing purposes. Your data may only be disclosed where required by law or to a service provider strictly to help us operate the website and booking system (for example, our website hosting and database providers), and only to the extent needed for that purpose.

5. Retention of Personal Data

We retain personal data only for as long as it is reasonably necessary for the purposes described in this policy, or as required by law. If you would like your data reviewed or removed sooner, please contact us using the details below and we will consider your request.

6. Your Rights Under the PDPA

Subject to applicable exceptions under the PDPA, you have the right to:

• ask what personal data we hold about you and how it is used;
• request correction of inaccurate personal data; and
• withdraw your consent to any use of your personal data (for example, to stop receiving marketing messages) at any time.

To exercise any of these rights, contact us using the details in the section below.

7. Data Security

We take reasonable technical and organisational measures to protect the personal data we hold, including restricting access to our booking and admin systems to authorised staff, secured admin sign-in, and encrypted connections to our website.

8. Children's Data

Our website and booking system are intended for use by adults booking appointments for themselves or, where relevant, their family members. We do not knowingly collect personal data directly from children through the website.

9. Changes to This Policy

We may update this Privacy Policy from time to time as our practices evolve. The "last updated" date at the top of this page reflects the most recent revision.