Privacy Policy

Cutis Medical Laser Clinics Pte Ltd

Last updated: 1 January 2026

1. Our Privacy Commitment

At Cutis Medical Laser Clinics Pte Ltd (“Cutis”, “we”, “us”, “our”), we are committed to protecting the personal data entrusted to us. Respect for patient confidentiality and responsible data stewardship are fundamental to safe, ethical, and high-quality medical care.

This Privacy Policy explains how we collect, use, disclose, store, and protect your personal data in accordance with the Singapore Personal Data Protection Act 2012 (“PDPA”) and related guidelines. It also outlines your rights and how you may exercise them.

We may update this Privacy Policy from time to time to reflect changes in law, technology, or our practices. The latest version will always be available on our website.

2. Definition of Personal Data

“Personal Data” has the meaning given under the PDPA. It refers to data, whether true or not, about an individual who can be identified from that data, or from that data together with other information to which we have or are likely to have access.

This includes, but is not limited to:

• Identification and contact information
• Appointment and transaction details
• Medical and health-related information
• Clinical photographs and imaging
• Payment and billing records
• Communication records
• Website and digital interaction data

3. Collection of Personal Data

We collect personal data in ways that are reasonable and lawful, including when you:

• Book or attend a consultation or treatment
• Communicate with us in person, by phone, email, messaging platforms, or online forms
• Register for memberships, events, surveys, or research activities
• Visit or interact with our website or digital platforms

Personal data may be collected:

• Directly from you
• From your authorised representatives
• Through third-party service providers acting on our behalf

Where required, we will notify you of the purposes for which your personal data is collected and obtain your consent, unless collection or processing without consent is permitted or required by law.

4. Purposes for Use and Disclosure of Personal Data

Your personal data may be collected, used, disclosed, and processed for purposes including, but not limited to:

A. Medical Care and Clinical Operations

• Providing medical consultations, treatments, and follow-up care
• Maintaining accurate medical records and clinical documentation
• Ensuring patient safety, continuity of care, and clinical governance
• Managing appointments, referrals, and post-treatment communications

B. Administrative and Business Operations

• Processing payments, billing, and loyalty programmes
• Managing memberships, benefits, and entitlements
• Responding to enquiries, feedback, or complaints
• Internal audits, risk management, and quality assurance

C. Communication and Marketing

• Communicating with you regarding services, updates, events, or clinic information
• Sending marketing or promotional communications where permitted by law and based on your consent or preferences
• Managing opt-in and opt-out preferences

D. Research, Education, and Service Improvement

• Conducting surveys, analytics, and service evaluations
• Supporting research activities, clinical studies, and education, where applicable and subject to appropriate consent and safeguards
• Improving our services, patient experience, and operational efficiency

Where personal data is used for purposes not previously notified to you, we will inform you and obtain consent where required, unless an exception under the PDPA applies.

5. Disclosure of Personal Data

To support our operations, we may disclose personal data to third parties for the purposes described above. These may include:

• Medical and healthcare professionals involved in your care
• IT, electronic medical record, data hosting, analytics, and cloud service providers
• Payment processors and financial institutions
• Marketing, communications, and customer engagement platforms
• Professional advisers, auditors, and insurers

Such third parties may be located in Singapore or outside Singapore. Where personal data is transferred outside Singapore, we take reasonable steps to ensure that it receives a standard of protection comparable to that under the PDPA.

We require third parties processing personal data on our behalf to implement appropriate confidentiality and security measures.

6. Disclosure Without Consent

We may disclose personal data without consent where permitted or required under the PDPA or other applicable laws, including but not limited to situations involving:

• Legal or regulatory requirements
• Public interest or public health considerations
• Emergencies involving life, health, or safety
• Investigations or legal proceedings
• Requests from law enforcement or public agencies

These instances are not exhaustive and are subject to applicable legal requirements.

7. Retention of Personal Data

We retain personal data only for as long as it is necessary to fulfil the purposes for which it was collected, or as required by law, medical standards, or regulatory obligations.

Medical records may be retained for extended periods to ensure continuity of care, meet legal and professional requirements, and support patient safety. Where personal data is no longer required, we will securely delete or anonymise it in accordance with our data retention policies.

8. Access and Correction of Personal Data

You have the right to request access to, or correction of, your personal data in our possession or control.

Requests should be submitted in writing to:
Email: hello@cutislaserclinics.com

We may require sufficient information to verify your identity and understand your request. Where permitted, we will respond within 30 days. If more time is required, we will inform you accordingly.

A reasonable administrative fee may apply for access requests, and we will notify you of any applicable charges in advance.

9. Withdrawal of Consent

You may withdraw your consent for the collection, use, or disclosure of your personal data at any time by contacting us.

Please note that withdrawing consent may affect our ability to provide certain services, including medical care, where personal data is necessary for clinical, legal, or safety reasons.

Where deletion is requested, we will assess the request in accordance with legal, medical, and regulatory obligations. Certain records, particularly medical records, may need to be retained even after consent is withdrawn.

10. Marketing Communications

If you have opted in to receive marketing communications, you may opt out at any time by:

• Clicking the “Unsubscribe” link in our emails, or
• Contacting us at hello@cutislaserclinics.com

We may continue to send you essential service-related or administrative communications where necessary.

11. Security Measures

We implement reasonable administrative, technical, and physical safeguards to protect personal data against unauthorised access, disclosure, loss, or misuse.

While we strive to protect your data, no method of electronic transmission or storage is completely secure. If you believe your personal data has been compromised, please contact us immediately.

12. Cookies and Website Analytics

Our website may use cookies and similar technologies to enhance functionality and analyse usage. We may collect information such as IP addresses, browser type, and pages visited through analytics tools such as Google Analytics. This information is generally aggregated and not used to directly identify individuals.

You may manage cookie preferences through your browser settings.

13. Competitions, Surveys, and Research Participation

Participation in surveys, research studies, or promotional activities is voluntary. Information collected may be used for analysis and service improvement and will generally be reported in aggregated or anonymised form unless otherwise disclosed to you.

14. Data Protection Officer

Cutis has designated a Data Protection Officer responsible for overseeing compliance with the PDPA and handling personal data matters.

For any questions, requests, or complaints relating to personal data protection, please contact:
Email: hello@cutislaserclinics.com

15. Contact Us

If you have any questions, concerns, or feedback regarding this Privacy Policy or our handling of personal data, please contact us at:

Cutis Medical Laser Clinics Pte Ltd
Email: hello@cutislaserclinics.com