MINE BROW PTE LTD
Privacy Policy隐私政策
Effective 4 October 2026 ｜生效日期：2026 年 10 月 4 日
This policy explains how MINE BROW PTE LTD (“Mine Brow”, “we”) collects, uses, discloses and protects personal data under Singapore’s Personal Data Protection Act 2012 (PDPA). It applies when you message us on WhatsApp, Facebook Messenger or Instagram, book or receive our services, or visit this website.
本政策说明 MINE BROW PTE LTD（下称“Mine Brow”或“我们”）如何依据新加坡《2012 年个人资料保护法》（PDPA）收集、使用、披露与保护个人资料。当您通过 WhatsApp、Facebook Messenger 或 Instagram 联系我们、预约或接受我们的服务，或浏览本网站时，均适用本政策。
1. Who we are 关于我们
MINE BROW PTE LTD (UEN 202619804R)55 Tengah Garden Walk, Singapore 699911
[email protected]
2. Personal data we collect 我们收集的个人资料
- Contact details: name, mobile number, and your WhatsApp, Messenger or Instagram account identifier and display name.
- Messages you send us and our replies.
- Service records: appointment dates, services received, product and technique details, preferences and notes.
- Personal details you choose to give us: gender, date of birth and email.
- Allergies and sensitivities you tell us about, so we can serve you safely.
- Skin and eyebrow analysis recorded by your therapist, and a face chart drawn for each treatment.
- Health declaration: your answers to health questions before treatment (for example pregnancy, medical conditions, medications or recent injections), with your signature. This is sensitive information. Only authorised staff can see it in our customer records system, and it is never sent through messaging apps.
- Photos of the treated area (before, after and at follow-up visits), taken only with your consent.
- Your electronic signature confirming each service, and the date and time you gave consent.
- 联系资料：姓名、手机号码，以及您的 WhatsApp、Messenger 或 Instagram 账号标识与显示名称。
- 您发给我们的消息及我们的回复。
- 服务记录：预约日期、所做服务、用料与技术参数、个人偏好及备注。
- 您自愿提供的个人资料：性别、出生日期及电子邮件。
- 您告知我们的过敏史与敏感情况，以确保服务安全。
- 美容师记录的皮肤与眉毛分析，以及每次疗程所画的脸部标注图。
- 健康申报：您在服务前对健康问题的回答（例如是否怀孕、身体状况、正在服用的药物或近期注射），以及您的签名。这是敏感资料，只有获授权的员工能在顾客记录系统中查看，绝不会通过任何通讯软件发送。
- 经您同意后拍摄的服务部位照片（术前、术后及回访）。
- 您为每次服务所作的电子签名，以及您给予同意的日期与时间。
3. How we use your data 资料用途
- To reply to your enquiries and manage your bookings.
- To perform services safely, taking your allergies and preferences into account.
- To check before each treatment that it is safe for you, based on your health declaration.
- To send you appointment reminders and confirmations by WhatsApp.
- To keep service records and photos for follow-ups and touch-ups.
- To record your confirmation of each service with your signature.
- To meet our legal obligations and resolve disputes.
We do not sell personal data. We use your photos or videos on social media only if you separately tick the “social media use” consent. This is optional and does not affect your service. You can withdraw it at any time; we will then stop using your photos and remove our posts that show you within a reasonable time.
- 回复您的咨询并管理预约。
- 结合您的过敏史与偏好，安全地提供服务。
- 服务前根据您的健康申报，确认服务对您是安全的。
- 通过 WhatsApp 向您发送预约提醒与确认。
- 保存服务记录与照片，用于回访及补色 / 补做。
- 以您的签名确认每次服务内容。
- 履行法律义务及处理争议。
我们不会出售个人资料。只有在您另外勾选「宣传使用同意」后，我们才会把您的照片或视频用于社交媒体。这一项可自由选择，不影响您接受服务。您可随时撤回；撤回后，我们会停止使用您的照片，并在合理时间内删除已发布的相关内容。
4. Consent and withdrawal 同意与撤回同意
We ask for your consent when we first create your customer record. You may withdraw consent at any time by emailing [email protected]. We will tell you what withdrawal means for you (for example, we may be unable to provide some services without your allergy information) and will act on your request within a reasonable time, generally within 10 working days.
我们会在首次为您建档时征求您的同意。您可随时发送电邮至 [email protected] 撤回同意。我们会告知撤回同意可能带来的影响（例如缺少过敏资料时，部分服务可能无法提供），并在合理时间内（一般为 10 个工作日内）处理您的要求。
5. Automated replies 自动回复
Initial replies to text enquiries may be drafted by an AI assistant run by a third-party provider. Our staff handle bookings and all decisions about your service. We do not use automated processing to make decisions that have legal or similarly significant effects on you.
文字咨询的初步回复可能由第三方提供的 AI 助理生成。预约及所有与服务相关的决定均由我们的员工处理。我们不会以自动化方式作出对您具有法律效力或类似重大影响的决定。
6. Who we share data with 资料共享对象
We share personal data only with service providers that help us run our business, and only as needed:
- Meta Platforms (WhatsApp, Messenger, Instagram): to receive and send messages.
- Telegram: an internal channel our staff use to read and reply to your messages. Customer summaries sent there do not include photos.
- Supabase: secure database and file storage, hosted in Singapore.
- Cloudflare: secure network connections, website hosting and encrypted backup storage.
- Our AI service provider: to draft initial replies to text enquiries.
- Zoho (Bigin): our previous customer records system. We have moved existing records to our new system and will close the old account.
We may also disclose personal data where required or permitted by law.
我们只在必要范围内，将个人资料提供给协助我们经营的服务商：
- Meta Platforms（WhatsApp、Messenger、Instagram）：收发消息。
- Telegram：员工阅读及回复您消息的内部工作频道；发送到该频道的顾客摘要不含照片。
- Supabase：安全的数据库与文件存储，服务器位于新加坡。
- Cloudflare：安全网络连接、网站托管及加密备份存储。
- AI 服务商：生成文字咨询的初步回复。
- Zoho（Bigin）：我们以前使用的顾客记录系统。现有记录已转移到新系统，旧账号将会关闭。
在法律要求或允许的情况下，我们也可能披露个人资料。
7. Transfers outside Singapore 境外转移
Some of these providers, including Meta, Telegram, Cloudflare, Zoho and our AI provider, may process data outside Singapore. Where this happens, we take steps to ensure your data receives a standard of protection comparable to that under the PDPA.
上述部分服务商（包括 Meta、Telegram、Cloudflare、Zoho 及 AI 服务商）可能在新加坡境外处理资料。在此情况下，我们会采取措施，确保您的资料获得与 PDPA 相当的保护水平。
8. How we protect your data 资料保护措施
Only authorised staff can access customer records, using individual logins with two-step verification. Photos, signatures and health declarations are kept in private, encrypted storage and can be viewed only by logged-in staff. When we hand you a tablet to fill in your details, it is locked to your own record. We keep encrypted backups in more than one location so that your records are not lost.
只有获授权的员工能以个人账号、并经两步验证后查看顾客记录。照片、签名与健康申报存放在加密的私有存储中，只有已登录的员工能查看。我们把平板交给您填写资料时，平板只会显示您本人的记录。我们在不止一处保存加密备份，以免您的记录遗失。
9. How long we keep data 保存期限
We keep your personal data for as long as it is needed for the purposes in this policy. Semi-permanent makeup can last many years, and records of previous pigments, techniques, allergies and skin reactions help us carry out touch-ups, corrections or removal safely, even years later. Service records, photos and signatures may also be needed to handle disputes. We therefore keep customer records on a long-term basis and review them at least once a year. Where data is no longer needed for these purposes or for legal reasons, we securely delete or anonymise it, including copies in our backups and archives.
我们会在本政策所述目的需要期间保存您的个人资料。半永久化妆可维持多年，以往的色料、技术、过敏史与皮肤反应记录，有助于我们日后（即使相隔多年）安全地为您补色、修改或去除。服务记录、照片与签名也可能用于处理争议。因此，我们会长期保存顾客记录，并至少每年检视一次。对于不再因上述目的或法律原因而需要的资料，我们会安全删除或作匿名化处理，包括备份及存档中的副本。
10. Access, correction and deletion 查阅、更正与删除
To access or correct your personal data, email [email protected] with your name and mobile number. We may ask you to verify your identity. We aim to respond within 30 days and will tell you if we need longer. We may charge a reasonable fee for access requests, and will tell you the amount first.
To have your data deleted, including messages you sent us through WhatsApp, Messenger or Instagram, email us with the subject “Data deletion request”. We will delete your data within 30 days and confirm by email, except records the law requires us to keep. Copies of messages in your own app, and data held by the messaging platforms under their own policies, are not affected. Copies in our encrypted backups are removed as those backups are replaced, and are never restored for use.
如需查阅或更正个人资料，请发送电邮至 [email protected]，并注明姓名与手机号码。我们可能需要核实您的身份。我们力求在 30 天内回复，如需更长时间会另行通知。查阅请求可能收取合理费用，收费前会先告知金额。
如需删除您的资料（包括您通过 WhatsApp、Messenger 或 Instagram 发给我们的消息），请以“Data deletion request / 资料删除请求”为邮件主题联系我们。我们会在 30 天内删除并以电邮确认，法律要求保留的记录除外。您本人应用中的消息副本，以及各消息平台按其自身政策保存的资料，不受影响。加密备份中的副本会在备份更替时一并清除，且不会被恢复使用。
11. Customers under 18 未满 18 岁的顾客
If you are under 18, a parent or guardian must give consent on your behalf.
未满 18 岁的顾客，须由父母或监护人代为给予同意。
12. Changes to this policy 政策更新
We may update this policy. The current version is always on this page, with its effective date at the top.
我们可能更新本政策。最新版本以本页面为准，生效日期见页面顶部。
13. Contact our Data Protection Officers 联系数据保护负责人
Our Data Protection Officers are the directors of MINE BROW PTE LTD. Email [email protected] or write to 55 Tengah Garden Walk, Singapore 699911. If you are not satisfied with our response, you may contact the Personal Data Protection Commission at www.pdpc.gov.sg.
本公司的数据保护负责人为 MINE BROW PTE LTD 的董事。请发送电邮至 [email protected]，或致函 55 Tengah Garden Walk, Singapore 699911。如对我们的回复不满意，您可联系新加坡个人资料保护委员会（PDPC）：www.pdpc.gov.sg。