Legal

Privacy notice

This notice explains how KOMO Wellness Singapore handles personal data under Singapore's Personal Data Protection Act 2012 (PDPA). Last updated 27 October 2026.

This notice covers this website and the services provided at our Singapore studios. It does not cover third-party sites we link to. We keep the notice short and in plain English; if anything is unclear, contact us using the details at the end.

Who we are

KOMO Wellness Singapore ("KOMO", "we", "us") operates the studios at Wheelock Place, Holland Village and Great World City, and this website at sg.komowellness.com. Our data protection officer can be reached at dpo@komowellness.com.

What we collect

Contact details you give us: name, email, phone or WhatsApp number.
Appointment details: studio, ritual, date and time, and any notes you choose to share.
Health and sensitivity information you volunteer, such as pregnancy, recent colour, migraines or scalp sensitivity. We use this only to keep your treatment safe and comfortable.
Enquiry and waitlist details: your message, studio preference and the interest you select.
Attribution data: campaign parameters such as gclid, wbraid, utm_source, utm_medium and utm_campaign, plus the page you submitted from. This tells us which advertising brought you to the site.
Technical data: IP address, browser type, device type, and pages viewed, collected through analytics where you have consented.

We do not collect payment card details on this website. Payment is taken at the studio.

Why we collect it

To confirm, reschedule or cancel your appointment.
To answer your enquiry or add you to a studio waitlist.
To keep your treatment safe, including noting sensitivities you tell us about.
To send a one-time follow-up about your visit, where you have agreed.
To measure which advertising and pages lead to bookings, in aggregate.
To meet legal, accounting and licensing obligations.

Consent and marketing

We ask for consent before contacting you for marketing. Submitting a booking or enquiry is consent to contact you about that booking or enquiry, and nothing more. You can withdraw marketing consent at any time by replying to any message or emailing dpo@komowellness.com.

Cookies and analytics

We use Google Analytics 4 and Google Ads conversion measurement. Analytics and advertising storage are set to denied by default, and are only enabled if you accept analytics cookies in the consent banner. You can change your choice at any time by clearing this site's data in your browser and reloading the page.

We use Consent Mode v2 so that Google receives a signal about your choice. Where consent is denied, measurement is limited to aggregated, cookieless signals.

Who we share it with

Our booking and messaging providers, who process data on our instructions.
Google, for analytics and advertising measurement, subject to your consent.
Professional advisers and auditors, where required.
A regulator or authority, where the law requires it.

We do not sell personal data. Where a provider processes data outside Singapore, we require comparable protection through contractual terms.

How long we keep it

Booking and treatment records: up to 24 months after your last visit, for continuity of care.
Enquiries and waitlists: up to 12 months after the last contact, or until the studio opens and the list is closed.
Marketing consent records: for as long as consent is active, plus 12 months.
Accounting records: as required by Singapore law.

Your rights

You can ask us to:

Tell you what personal data we hold about you and how it has been used.
Correct inaccurate data.
Withdraw consent for marketing or for optional analytics.
Delete data we no longer need, subject to legal retention requirements.

Email dpo@komowellness.com. We respond within 30 days. We may ask for proof of identity to protect your data.

Security

We use access controls, encryption in transit and limited staff access to protect personal data. No system is perfectly secure, but we review our controls regularly and act on incidents promptly.

Children

Our services are intended for adults. Guests under 18 need a parent or guardian to book and consent. We do not knowingly collect data from children online.

Complaints

If you are unhappy with how we have handled your data, contact us first at dpo@komowellness.com. You can also contact the Personal Data Protection Commission of Singapore at pdpc.gov.sg.

Changes

We may update this notice from time to time. The date at the top shows the latest version. Material changes will be announced on this page.

Questions about your data? Email dpo@komowellness.com and we will reply within 30 days.

This notice is provided for transparency and is reviewed by our appointed data protection officer. It does not create rights beyond those in the PDPA.