Privacy-Policy: Effective 06/Jul/2026

This document (“Data Protection Policy”) applies to all personal data collected by Bee Choo Origin which comprise of Bee Choo Corporation Pte. Ltd. (operating under the trade name “Bee Choo Origin”), and its related entities “Origin BeeChoo Herbal Hair Care Pte Ltd” and “Regrow Herbal Labs Pte Ltd” (collectively referred to as “Bee Choo Origin”, “us”, “we” or “our”) and the Personal Data Protection Notice (“Notice”) on our website (i.e. beechoo.com/privacy-policy).

 

The purpose of this Data Protection Policy is to inform you of how the we manage Personal Data which is subject to the personal data protection principles under the Singapore Personal Data Protection Act (“PDPA”).

 

Your choice of interacting with us, submitting information to us, or signing up for any products and services offered by us, using our services at any of Bee Choo Origin’s outlets as advertised on our website, you agree and consent to us, and/or agents, authorised service providers/vendors or relevant third parties, collecting, using, disclosing and sharing amongst ourselves your Personal Data as set forth in this Data Protection Policy.

 

This Data Protection Policy supplements but does not supersede nor replace any other consents you may have previously provided to us in respect of your Personal Data, and your consents herein provided are additional to any other rights which we may have at law to collect, use or disclose.

 

We may from time to time update this Data Protection Policy to ensure that this Data Protection Policy is reasonably consistent with industry trends and/or legal or regulatory requirements. Subject to your rights at law, you agree to be bound by the prevailing terms of this Data Protection Policy as updated from time to time on our Website.

 

Personal Data

 

• “Personal Data” in this Data Protection Policy refers to any data, whether true or not, about an individual who can be identified (a) from that data; or (b) from that data and other information to which we have or are likely to have access, including data in our records as may be updated from time to time.

 

• Below are examples of such Personal Data you may provide to us from time to time including (but not limited to) the following:
• your name;
• your NRIC/Passport number (where you provide this to us; the Company does not require NRIC or passport verification for Hair Treatment Package registration);
• your photograph, taken at the time of Hair Treatment Package registration, which serves as the primary means of identifying you as the Package holder in place of NRIC/passport verification;
• telephone number;
• mailing address;
• email address; and
• any other information relating to any individuals which you have provided to us when you filled and submitted any forms to us.

 

Collection of Personal Data

 

• Here are some ways in which we collect Personal Data from you:

 

• when you submit any form in connection with or relating to our products and/or services;
• when you enter into any contract with us for the purchase of our products and/or services; or provide us with any documents to support your use of our services;
• when you register for an account on our website, including any login credentials and profile information you provide;
• when you interact with our staff/employees/consultants, and/or agents  through telephone calls, letters, face-to-face meetings, social media platforms and/or via emails for any reason;
• when you submit your queries or contact us through our website and/or use of our website to interact with us for any purpose;
• when you request that we include you in our mailing lists for general updates or promotions or advertisements or special events or competitions;
• when you respond to any feedback initiatives, surveys or promotions  administered by us/our agents/our authorised representatives or provide additional Personal Data upon request;
• when your images are captured by our CCTV cameras while you are in our premises, or by photographs, or videos taken by us/our agents/our authorised representatives, when you attend any events at our premises or such designated locations;
• when we take your photograph at the time you register for a Hair Treatment Package, for the purpose of identifying you as the Package holder, as the Company does not require NRIC or passport verification for this purpose;
• when you submit your Personal Data to us for any other reason, whether voluntarily or otherwise.

 

• In the event that you provide us with Personal Data relating to any third party (including but not limited to information of your spouse, children, parents, relatives or friends or colleagues), you represent and warrant that you have the permission and consent of such third party to provide their Personal Data to us for the purposes as made known to you and warrant to indemnify us for any breach if such consent/permission is found to be absent.

 

• To facilitate our provision of the products and/or services to you in a timely manner, it is your duty to ensure that all Personal Data provided to us is complete, accurate, true and correct.

 

Purposes for the Collection, Use and Disclosure of your Personal Data

 

• Below are some of the purposes for which we collect, use and disclose your Personal Data:
• providing products and services to you;
• responding to your queries, feedback, complaints and requests;
• verifying your identity or veracity of the information you have provided;
• verifying the identity of Hair Treatment Package holders by way of their registered photograph, in place of NRIC/passport verification, for purposes of package access, redemption and administration;
• complying with our administrative/operational/internal policies, processes & procedures to enhance our offerings to you & others;
• requesting for customer satisfaction feedback or participation in surveys or conducting market research and/or analysis for statistical, profiling or other purposes so that we can continually review, develop and improve the quality of our products and services offered to you;
• facilities management (including but not limited to maintaining the security of our premises) through technological advancements;
• monitoring or recording phone calls and customer-facing interactions for quality assurance, employee training and performance evaluation and identity verification purposes;
• in connection with any claims, actions or proceedings and/or protecting and enforcing our contractual and legal rights and obligations;
• conducting investigations relating to any disputes relating to our products, our services or billing practices;
• meeting or complying with any applicable rules, laws, regulations or guidelines issued by any legal or regulatory body for audit checks, due diligence and/or investigations;
• creating and maintaining your profile in our System Database for analysis of your hair/scalp condition & needs or our internal records and reference;
• providing customer service and support;
• administering debt recovery and debt management;
• taking photograph(s) and/or video(s) of you for internal sharing and dissemination,and generating publicity materials for our events and promotional activities; and/or
• any other purpose reasonably related to the aforementioned purposes.

 

Photograph-Based Identity Verification for Hair Treatment Package Holders

 

• As the Company does not require NRIC or passport verification when you register for a Hair Treatment Package, we collect and retain a photograph of you at the time of registration, which serves as the primary means of identifying you as the Package holder for the purposes of package access, redemption and administration.

 

• Your registered photograph will be retained for the duration of your Package and for one (1) year after its expiry or termination, after which it will be securely destroyed.

 

• Your registered photograph will not be used for marketing, advertising or any other purpose without your separate prior written consent.

 

• You may withdraw your consent to the collection and retention of your photograph at any time by writing to our Data Protection Officer at sayhello@beechoo.com. As the photograph is our primary means of verifying Package holders in the absence of NRIC/passport verification, you acknowledge that withdrawal of this consent may affect our ability to verify and administer your Package, and may result in the suspension or termination of the Package at our discretion, with no cash refund payable.
• This mandatory registration photograph is separate and distinct from any photographs, testimonials, or other content (“Postings”) that you may voluntarily choose to submit to us for marketing purposes (for example, before/after photos, reviews, or social media posts). Such Postings are provided on a voluntary basis, with your separate consent obtained at the time of submission, and are governed by the Company’s General Terms & Conditions rather than this section.

 

 

 

Website User Accounts

 

• If you register for an account on our website, we collect and store the personal information you provide (such as your name, email address, and password) in your user profile.
• You may view, update or correct your personal information within your account at any time, save that you cannot change your username.
• Our website administrators may also access and edit this information for the purposes of account administration, customer support and troubleshooting.
• Your account password is stored in encrypted (hashed) form and is not accessible to us or our staff in plain text.
• If you upload any images to our website (for example, as part of your account profile), please note that image files may contain embedded location data (EXIF GPS data), which other users could potentially extract. We recommend removing such metadata before uploading images if you wish to keep your location private.

 

Disclosure of Personal Data

 

• We are cognizant of the need to protect your Personal Data against unauthorised disclosure and will take such reasonable steps to avoid unauthorized disclosure of your Personal Data.

 

• Subject to the provisions of any applicable law, your Personal Data may be disclosed by us for the purposes as listed above and such entities or parties (located in Singapore or elsewhere) including (but not limited to) companies providing services to us relating to insurance, marketing and consultancy; agents, contractors or third party service providers who provide operational services to us, such courier services, telecommunications, information technology, payment, printing, billing, payroll, processing, technical support services, training, market research, security, etc.; any business partner, investor, assignee or transferee (actual or prospective) to facilitate business asset transactions (which may extend to any merger, acquisition or asset sale as applicable); any government body or statutory board or authority, external banks, credit card companies and their respective service providers; our professional advisers such as consultants, auditors and lawyers; and any other party whom you authorise us to disclose your Personal Data on a need to basis, or as required from time to time.

 

Use of website & Data Security

• If you request a password reset for your website account, your IP address will be included in the password reset email for security verification purposes.
• We use third-party analytics and advertising services, including Google Analytics, Meta (Facebook) Pixel and TikTok Pixel, which may receive information about your visit and interactions with our website for the purposes of website analytics, advertising measurement and retargeting. These services are governed by their own respective privacy policies.
• Submissions made through our website’s contact and enquiry forms may be checked using automated tools to detect spam or fraudulent submissions.

 

5.1          When you browse our website(s), there may be cookies placed on your computer to help identify your preferences when you are on our website(s). They cannot access, read or modify any other data on your computer and it does not allow us to identify you individually. At any time, if you wish you may disable or delete cookies by changing the setting of your web browser but you may encounter difficulty accessing some part(s) of our website(s) and the contents.

 

5.2          We will use our best effort to protect your Personal Data in our possession or control by making reasonable security arrangements to prevent unauthorized access, collection, use, disclosure, copying, modification, disposal or similar risks. However, we cannot guarantee the security of any Personal Data we may have collected from or about you, from 3rd party interception/intervention/harm (such as viruses, bugs, trojan horses, spyware or adware). You are aware of the risks associated with using websites and agree to do your part to take every precaution to protect your Personal Data when you are browsing our websites or on the Internet.

Your Rights: Access, Withdrawal of Consent, and Correction of your Personal Data

 

Cookies and Similar Technologies

 

We and our third-party partners use cookies and similar technologies on our website for the following purposes:

 

• Login cookies: if you have a website account, we set cookies to keep you logged in and remember your display preferences. Login cookies last for two days, and screen options cookies last for one year. If you select “Remember Me” when logging in, this will last for two weeks. These cookies are removed when you log out.
• Temporary browser-check cookie: if you visit our login page, a temporary cookie is set purely to check whether your browser accepts cookies. It contains no personal data and is discarded when you close your browser.
• Analytics and advertising cookies: as noted above, we use services such as Google Analytics, Meta (Facebook) Pixel and TikTok Pixel, which place their own cookies to help us understand website usage and measure the effectiveness of our advertising. You can find out more about these in Google’s (policies.google.com/privacy), Meta’s (www.facebook.com/privacy/policy) and TikTok’s (www.tiktok.com/legal/privacy-policy) respective privacy policies.
• You can manage or delete cookies at any time by changing your browser settings, or by using tools such as Google’s Analytics opt-out browser add-on. Please note that disabling cookies may affect the functionality of some parts of our website, such as staying logged into your account.

 

Embedded Content from Other Websites

 

Our website may include embedded content or widgets from third-party services, such as our SimplyBook.me booking system, Google Maps (used for our outlet locator), and social media platforms including TikTok, Instagram and Facebook. These embedded services behave in exactly the same way as if you had visited that third-party website directly – they may collect data about you, set their own cookies, embed additional third-party tracking, and monitor your interaction with the embedded content, including if you are logged into an account with that service.

 

How Long We Retain Your Data

 

• Website account data is retained for as long as your account remains active, and for a reasonable period afterwards to meet our legal, accounting, audit or administrative requirements, or until you request deletion in accordance with the section below.
• Your Hair Treatment Package registration photograph is retained for the duration of your Package and for one (1) year after its expiry or termination, as set out above.
• Cookie retention periods are as set out in the “Cookies and Similar Technologies” section above.
• Where personal data is no longer necessary for the purpose for which it was collected, and we have no other legal, contractual or administrative reason to retain it, we will take reasonable steps to destroy or anonymise it, in accordance with our obligations under the PDPA.

 

 

• Any questions relating to your Personal Data, our Data Protection Policy or our Notice; or your intention to withdraw or limit your consent to any use of your Personal Data as set out in this Data Protection Policy and our Notice; or your request to access and make corrections to your Personal Data record can be directed to our Data Protection Officer by sending an email to sayhello@beechoo.com, or by writing to our Data Protection Officer at Bee Choo Corporation Pte. Ltd., 23 Kaki Bukit Place, Singapore 416201.

 

• You have the right to request access to the personal data we hold about you, and to request that we correct any inaccurate or incomplete personal data.
• You have the right to withdraw your consent to our collection, use or disclosure of your personal data at any time, as set out above.
• Where your personal data is no longer necessary for the purpose for which it was collected, you may request that we cease retaining it and delete or anonymise it, save where we have a legal, contractual or administrative reason to continue retaining it (for example, audit, tax, or dispute-resolution requirements). Please note that Singapore’s Personal Data Protection Act does not provide a blanket right to erasure; requests will be assessed against these exceptions.

 

• In the event that you withdraw your consent to any or all use of your Personal Data, and we are not able to fulfil or complete any contract(s) in place between us, resulting in a premature termination of our services to you, our legal rights and remedies are thereby expressly reserved.

 

Severability

 

• If any term of this Data Protection Policy is to any extent invalid, illegal, or incapable of being enforced, such term shall be excluded to the extent of such invalidity, illegality, or unenforceability and all other terms shall remain in full force and effect.

 

• If any term of this Data Protection Policy is held by a court of competent jurisdiction to be invalid, illegal or unenforceable (whether in whole or in part), such term  shall be deemed modified to the extent, but only to the extent, of such invalidity, illegality or unenforceability and all other remaining terms shall not be affected.

 

Governing Law

 

• This Data Protection Policy and your use of this website shall be governed by the laws of the Republic of Singapore; and

 

• Parties agree to resolve any dispute through friendly/goodwill discussions and thereafter mediation at the Singapore Mediation Centre (SMC) in accordance with SMC’s Mediation Procedure in force for the time being. Either/any party may submit a request to mediate to SMC upon which the other party will be bound to participate in the mediation within forty-five (45) days thereof. Every party to the mediation must be represented by [senior executive personnel, of at least the seniority of a Head of Department] or its equivalent, with authority to negotiate and settle the dispute. Unless otherwise agreed by the parties, the Mediator(s) will be appointed by SMC. The mediation will take place in Singapore in the English language and the parties agree to be bound by any settlement agreement reached. If no settlement can be reached, then Parties shall submit to the non-exclusive jurisdiction of the Singapore courts for final resolution.