1. Introduction

This Privacy Policy explains how Salon VN Pte Ltd (UEN 202508767M), trading as SalonVN (“SalonVN”, “we”, “us” or “our”), collects, uses, discloses and protects your personal data. We operate a Vietnamese-style beauty spa and hair studio at 688 Geylang Road, Singapore 389610, and the website salonvn.sg.

SalonVN was previously known as L&D Unisex Spa. This policy applies to personal data we collected under either name.

We comply with the Personal Data Protection Act 2012 of Singapore (“PDPA”). By visiting our website, contacting us, booking an appointment or using our services, you acknowledge that you have read this policy. Where the PDPA requires your consent, we will ask for it before we collect, use or disclose your personal data.

2. Personal data we collect

Personal data is data about an individual who can be identified from that data, or from that data combined with other information we hold. Depending on how you deal with us, we may collect:

• Contact details: your name, mobile number, email address and your WhatsApp display name or number.
• Booking details: the services you book, appointment dates and times, preferred staff member, and any messages you send us when enquiring or booking.
• Service and wellbeing information: information you volunteer so that we can serve you safely, for example ear discomfort or past ear problems before an ear cleaning, skin sensitivities or allergies before a facial, waxing or hair colouring, and hair and scalp conditions. We ask only for what is needed for the service.
• Website account and order details: if you create an account or order products on our website, your account login, billing and delivery details and order history. Payment card details are handled by our payment provider and are not stored by us.
• Photos and videos: images or video of you taken at our premises, but only with your consent (see section 4).
• Feedback: reviews, testimonials and messages you send us or post on our pages.
• Technical data: your IP address, device and browser type, pages visited and referring website, collected through cookies and similar tools (see section 6).

3. How we collect and use your personal data

We collect personal data directly from you: in person at our salon, by phone or WhatsApp, through our website forms, when you create an account or place an order, and when you message our social media pages. We may also receive it from someone who books on your behalf, in which case we rely on that person to have your consent.

We use your personal data only for purposes a reasonable person would consider appropriate, namely:

• To arrange, confirm, change or cancel your appointments and to contact you about them.
• To provide our services safely, including taking note of allergies, sensitivities or ear and skin conditions you tell us about, and keeping a record of your past treatments and preferences.
• To process orders and payments for products and packages, and to issue receipts.
• To manage packages, vouchers and promotions you purchase or redeem.
• To respond to your enquiries, feedback and complaints.
• To send you marketing messages about our services and promotions, but only where you have agreed (see section 8).
• To publish photos, videos and testimonials, but only where you have agreed (see section 4).
• To operate, secure and improve our website and services, and to analyse how visitors use them.
• To comply with our legal and regulatory obligations and to protect our rights.

If we need to use your personal data for a new purpose, we will tell you and obtain your consent first unless the law allows otherwise.

4. Consent, photos and videos, and withdrawing consent

Consent. We collect, use or disclose your personal data only with your consent, or where the PDPA allows it without consent. You give consent when you provide your details to us for a stated purpose, for example when you book an appointment or tick a box on our website. You may give consent in writing, verbally or by clear action.

Photos and videos. We sometimes film or photograph services and results for our website, TikTok, Facebook and Instagram. We do this only if you agree before filming, and you can say no without affecting the service you receive. Please tell our staff if you do not want to appear, or if you want your face, hair or name kept out of the footage. Once content is published, you may ask us to remove it, and we will do so on our own pages within a reasonable time. We cannot control copies already shared or reposted by others on those platforms.

Withdrawing consent. You may withdraw your consent to any use of your personal data at any time by contacting our Data Protection Officer (section 9). We will tell you the likely consequences of withdrawing, for example that we may be unable to confirm bookings or send order updates. We will act on your request within a reasonable time. Withdrawing consent does not affect processing we carried out before you withdrew it.

5. Disclosure to others and transfers outside Singapore

We do not sell your personal data. We disclose it only where necessary for the purposes in section 3, and only to:

• Our staff who need it to serve you.
• Service providers that help us run the business, such as website hosting and maintenance, booking and messaging tools (including WhatsApp), payment processors, accounting and IT support. We require them to protect your data and use it only for our purposes.
• Social media and platform providers (TikTok, Facebook, Instagram, Google) when you interact with us there or when we publish content with your consent.
• Professional advisers, regulators and authorities where we are required or permitted by law, for example to comply with a court order or a lawful request.
• A buyer or successor if our business is sold or restructured, in which case your data will continue to be protected under this policy.

Some of these providers store or process data outside Singapore. Where we transfer personal data overseas, we take steps to ensure the recipient provides a standard of protection comparable to the PDPA, for example through contractual terms.

6. Cookies, analytics and social media

Our website uses cookies and similar technologies, which are small files stored on your device. We use them to keep the site working (for example, remembering items in your cart and keeping you logged in), to understand how visitors use the site, and to improve it.

You can block or delete cookies in your browser settings. If you block essential cookies, parts of the site such as the cart and your account may not work.

Our website links to and embeds content from third parties such as Google Maps, WhatsApp, Facebook, Instagram and TikTok. Those services have their own privacy policies and collect data under their own terms, so please read them. We are not responsible for their practices.

When you message or comment on our social media pages, the platform processes that data under its own policy, and we may see your public profile name and what you send us.

7. Retention, security and data breaches

Retention. We keep your personal data only as long as needed for the purposes in section 3, or as required by law (for example accounting and tax records). When we no longer need it, we delete or anonymise it. 

Security. We take reasonable steps to protect your personal data from unauthorised access, loss, misuse or disclosure. These include limiting access to staff who need it, using passwords and access controls on our systems and phones used for bookings, and choosing service providers with appropriate safeguards. No system is completely secure, so we cannot guarantee absolute security of data you send us online.

Accuracy. We make reasonable efforts to keep your personal data accurate and complete. Please tell us when your details change.

Data breaches. If a data breach is likely to cause you significant harm, or affects a significant number of people, we will notify the Personal Data Protection Commission (PDPC) as soon as practicable and no later than 3 calendar days after we assess that it is notifiable, and we will notify affected individuals as soon as practicable.

8. Your rights, marketing messages and children

Access and correction. You may ask us for a copy of the personal data we hold about you and how it has been used or disclosed in the past year, and you may ask us to correct it. Send your request to our Data Protection Officer (section 9) with enough detail for us to identify you. We will verify your identity, and we aim to respond to access requests within 30 days. If we need more time, we will tell you why and when to expect a reply. We may charge a reasonable fee for access requests and will tell you the amount first. We may refuse a request only where the PDPA allows it, and we will explain why.

Marketing messages. We send marketing messages (for example promotions by WhatsApp, SMS, call or email) only with your consent. You can opt out at any time by replying “STOP”, by using the unsubscribe link, or by contacting us. We check the Do Not Call (DNC) Registry before sending marketing messages to Singapore telephone numbers, unless you have given us clear and unambiguous consent to contact you. Opting out of marketing does not stop service messages such as appointment confirmations.

Children. Our website and marketing are not directed at children. If you are under 18, please get a parent or guardian’s consent before giving us personal data or booking a service, and we may ask for their consent where appropriate. If you believe a child has given us personal data without consent, contact us and we will delete it.

9. Changes to this policy and how to contact us

We may update this policy from time to time, for example when our services or the law change. We will post the updated version on this page with a new “Last updated” date. Please check it regularly. Your continued use of our website or services after an update means you accept the updated policy, but where the PDPA requires fresh consent we will ask for it.

Contact our Data Protection Officer

For questions, complaints, or requests to access, correct or withdraw consent, please contact:

• Data Protection Officer: Salon VN Pte Ltd
• Email: salonvn.sg@gmail.com
• Phone / WhatsApp: +65 8102 6888
• Address: 688 Geylang Road, Singapore 389610

We will respond as soon as we reasonably can. If you are not satisfied with our response, you may contact the Personal Data Protection Commission of Singapore at www.pdpc.gov.sg.