Privacy Policy

1 Introduction

Gro Wellness Asia Pte Ltd ("we", "us", "our") operates the Eaulier Wellness brand, website (eaulierwellness.com), and associated services. We are committed to protecting the personal data of our customers, website visitors, and enquirers.

This Privacy Policy explains how we collect, use, disclose, and protect your personal data when you interact with Eaulier Wellness through our website, outlets, WhatsApp, booking forms, or any other channel.

This policy is drafted in compliance with the Personal Data Protection Act 2012 (PDPA) of Singapore. By using our services or providing us with your personal data, you consent to the collection, use, and disclosure of your data as described in this Privacy Policy.

2 Data Controller Information

The data controller responsible for your personal data is:

For any data protection queries or requests to exercise your rights under the PDPA, please contact us at the details above.

3 Information We Collect

We may collect the following categories of personal data from you:

Information You Provide Directly

• Full name
• Mobile number / WhatsApp number
• Email address
• Preferred outlet location
• Session type preference (BioMeridian Reflexo, BioMeridian AccuPad, etc.)
• Preferred appointment date and time
• Wellness goals and general wellness enquiries
• Health information disclosed voluntarily before or during sessions (such as existing medical conditions or contraindications)
• Messages, enquiries, and feedback submitted via our website, JotForm, or WhatsApp

Information Collected Automatically

• Website usage data (pages visited, time spent, referral source)
• Browser type and device information
• IP address
• Cookie data (see Section 10)

Information We Do Not Collect

We do not collect sensitive medical records, financial account details, national identification numbers, or passwords through our standard enquiry or booking processes.

4 How We Use Your Information

We use your personal data for the following purposes:

We will not use your personal data for any purpose other than those stated above without your prior consent, except where required by law.

5 Legal Basis for Processing

Under Singapore's PDPA, we process your personal data on the following legal bases:

• Consent: Where you have given us explicit consent to collect, use, or share your personal data (e.g. submitting a booking form or subscribing to updates)
• Contractual Necessity: Where processing is necessary to fulfill a service booking, membership agreement, or product purchase
• Legitimate Interests: Where we have a legitimate interest in processing your data (e.g. improving our services, responding to enquiries) that is not overridden by your rights
• Legal Obligation: Where we are required to process your data to comply with Singapore law

You have the right to withdraw your consent at any time. Withdrawal of consent does not affect the lawfulness of processing conducted before the withdrawal.

6 Data Sharing & Third Parties

We do not sell, rent, or trade your personal data to third parties. We may share your data with trusted third parties only where necessary to deliver our services:

• JotForm Inc. — Our booking and enquiry forms are hosted by JotForm. Data submitted through JotForm forms is subject to JotForm's Privacy Policy
• WhatsApp (Meta Platforms) — Customer communication via WhatsApp is subject to Meta's Privacy Policy
• Google Services — We may use Google Analytics, Google Maps, or Google Workspace tools for service delivery and analytics
• YouTube (Google LLC) — Video content embedded on our website is hosted by YouTube
• Supabase — Our media assets and storage infrastructure are hosted on Supabase
• Reboot.sg / Authorised Distributors — For Reboot product orders and fulfillment
• Legal Authorities — Where required by Singapore law, court order, or government request

When sharing data with third parties, we take reasonable steps to ensure they maintain appropriate data protection standards consistent with the PDPA.

7 Data Retention

We retain your personal data only for as long as is necessary to fulfill the purposes for which it was collected, or as required by applicable Singapore laws and regulations.

In general:

• Booking and session records are retained for a minimum of 1 year for service continuity purposes
• Customer communication records (WhatsApp, email) are retained as operationally necessary
• Marketing consent records are retained until you withdraw consent or request deletion
• Financial transaction records are retained for the period required under Singapore accounting and tax regulations

When personal data is no longer needed, we will securely delete, destroy, or anonymise it in accordance with our data management practices.

8 Data Security

Gro Wellness Asia Pte Ltd implements reasonable technical and organisational measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction.

These measures include:

• Secure HTTPS connections on our website
• Access controls limiting personal data access to authorised staff only
• Use of reputable third party service providers with appropriate security standards
• Regular review of our data handling practices

However, no method of transmission over the internet or electronic storage is 100% secure. While we strive to protect your personal data, we cannot guarantee absolute security. If you become aware of any security breach affecting your data, please contact us immediately at [email protected].

9 Your Rights Under PDPA

Under Singapore's Personal Data Protection Act 2012, you have the following rights regarding your personal data held by Gro Wellness Asia Pte Ltd:

• Right of Access: You may request access to the personal data we hold about you
• Right to Correction: You may request correction of any inaccurate or incomplete personal data we hold about you
• Right to Withdraw Consent: You may withdraw your consent to our collection, use, or disclosure of your personal data at any time
• Right to Data Portability: You may request that we provide your personal data in a commonly used machine-readable format where technically feasible
• Right to Erasure: You may request deletion of your personal data, subject to legal retention requirements

To exercise any of these rights, please contact us at [email protected] with your full name, contact number, and specific request. We will respond within 30 days.

Please note that withdrawing consent may affect our ability to provide certain services to you. We will inform you of any such impact at the time of your request.

10 Cookies & Tracking

Our website (eaulierwellness.com) may use cookies and similar tracking technologies to enhance your browsing experience and collect usage data.

Types of Cookies We Use

• Essential Cookies: Required for the website to function correctly (e.g. session management)
• Analytics Cookies: Used to understand how visitors interact with our website (e.g. Google Analytics)
• Functional Cookies: Used to remember your preferences for future visits

Most web browsers allow you to control cookies through their settings. Disabling certain cookies may affect the functionality of our website. For more information on managing cookies, please refer to your browser's help documentation.

Our website is hosted and built on Groove.cm. Groove.cm may use their own cookies as part of platform operation. Please refer to Groove.cm's privacy policy for details.

11 Third Party Services

Our website and services integrate with several third party platforms. Each third party operates under its own privacy policy:

We are not responsible for the privacy practices of these third party services. We encourage you to review their privacy policies before submitting personal data through those platforms.

12 Children's Privacy

Eaulier Wellness services are intended for adults. We do not knowingly collect personal data from children under the age of 18 without the consent of a parent or legal guardian.

If you are a parent or guardian and believe your child has provided us with personal data without your consent, please contact us immediately at [email protected] and we will take appropriate steps to remove the information.

Minors wishing to use Eaulier Wellness services must be accompanied by a parent or legal guardian who must consent to session participation on the minor's behalf.

13 Changes to This Privacy Policy

We reserve the right to update this Privacy Policy at any time to reflect changes in our data practices, services, or applicable laws. The date of the most recent revision will always be indicated at the top of this page.

We encourage you to review this Privacy Policy periodically. Continued use of Eaulier Wellness services after any changes constitutes your acceptance of the updated policy.

For material changes that significantly affect your rights, we will make reasonable efforts to notify you through our website or via direct communication where possible.

14 Contact & Data Protection Enquiries

For any questions, concerns, or requests relating to this Privacy Policy or the handling of your personal data, please contact:

We will acknowledge your request within 3 business days and aim to resolve all data protection queries within 30 days of receipt.

If you are not satisfied with our response, you have the right to lodge a complaint with the Personal Data Protection Commission (PDPC) of Singapore at www.pdpc.gov.sg.