Privacy Policy

1. Data Controller

Award Owner Frame
20 Kallang Avenue #09-11, Singapore, 339411
Email: [email protected]
Tel: +65 6295 7318

2. Legal Framework

The processing of personal data is carried out in accordance with applicable data protection legislation.

3. Data We Collect

• Full name
• Email address
• Phone number
• Physical address
• Service history and preferences

4. Purpose of Processing

• Appointment booking and service delivery
• Customer communication and support
• Sending appointment reminders
• Improving our services
• Compliance with legal obligations

5. Cookie Policy

Type	Name	Purpose	Duration
Essential	ck_consent	Stores cookie consent preference	1 year
Functional	session_id	Maintains your session	Session
Analytics	_ga	Google Analytics usage tracking	2 years

6. Data Sharing

We do not sell your data to third parties. We only share data with technical service providers under confidentiality agreements and with authorities when required by law.

7. Retention Period

We retain data for as long as necessary to provide our services and to comply with our legal obligations.

8. Your Rights

• Access: Know what data we hold about you
• Rectification: Correct inaccurate or incomplete data
• Erasure: Request deletion of your data where applicable

9. Children's Privacy

We do not knowingly collect data from children under 16 without parental consent.

10. Security

We implement technical and organizational measures to protect your data including SSL encryption, restricted access and regular backups.

11. Changes to This Policy

We may update this policy periodically. Material changes will be communicated by email or via a notice on the site.

12. Contact for Privacy Matters

For privacy inquiries, contact us at the email or address listed in Section 1. We aim to respond to all inquiries within 30 days.

13. Accuracy of what we hold

We rely on you to tell us when your details change. If a company contact leaves, write to us and we will update the record rather than continue sending material to a person who no longer works there.

14. Security measures

Access to reader and advertiser records is limited to staff whose work requires it. Accounts are removed on the day a person leaves. Records are held on systems that require individual credentials, never on shared logins.

15. Reporting an incident

If personal data is lost or exposed, we establish the facts and the scope first, then notify the Commission and the people affected in line with the notification obligation under the Act.