Privacy Policy

1. Data we collect

We collect the following personal data when you place an order, sign in, or contact us:

• Identity and contact: name, email address, phone number
• Delivery: shipping address
• Transaction: order details, amounts paid (card details are handled by Stripe — we never see or store them)
• Account: saved profile details, order history, and preferences you choose to save
• Reviews: display name and review content you voluntarily submit
• Skin Age Scan: photos you upload or capture, AI-generated skin age estimates, score outputs, and quality notes when you choose to use the Skin Age Scan
• Usage data: pages visited, browser type, IP address (collected automatically via server logs)
• Personalization: products and pages you view, searches, and items you add to cart — linked to your account if you are signed in, or otherwise to a first-party cookie on your device — used to tailor recommendations

We do not collect NRIC or payment card details. Skin Age Scan photos are optional and are used only if you choose to upload or capture an image for that feature.

2. How we use your data

We use your personal data to:

• Process and fulfil your orders
• Send order confirmations and delivery updates
• Create and maintain a customer profile so you can view order history and saved preferences
• Tailor product rankings, search results, and "you may also like" recommendations to your interests
• Generate Skin Age Scan results, improve personalization, improve the scan experience, and support AI model improvement where you have uploaded an image for that feature
• Respond to enquiries and provide customer support
• Display your name alongside reviews you submit (masked if you choose)
• Prevent fraud and maintain site security
• Comply with legal obligations

We do not sell your personal data to third parties. We do not use your data for unsolicited marketing without your consent.

3. Sharing with third parties

We share data only as necessary to operate the business:

• Stripe — payment processing. Stripe is PCI-DSS compliant. See stripe.com/privacy.
• Delivery partners — your name and address are passed to the courier to fulfil your order.
• Cloudflare — our infrastructure provider. Traffic passes through Cloudflare's network. See cloudflare.com/privacypolicy.
• AI service providers - photos submitted through the Skin Age Scan are sent to an AI service to generate the visual estimate and may be used to improve AI models, personalization, and the scan experience.

4. Data retention

We retain order and personal data for 5 years for accounting, tax, and legal compliance purposes, or longer if required by law. Skin Age Scan photos and generated results may also be retained for personalization, service improvement, and AI model improvement unless deletion is requested and no legal retention obligation applies. You may request deletion of your data subject to these obligations.

5. Cookies and personalization

We use cookies for the following purposes:

• Essential: maintaining your shopping cart and, when you sign in, keeping you authenticated
• Personalization: a first-party cookie that lets us remember your browsing on this device so we can tailor recommendations, even before you sign in
• Analytics: Google Analytics and Microsoft Clarity help us understand aggregate site usage so we can improve the store

We do not use advertising cookies and do not sell your data. Recommendations are generated from your own activity and the product catalog — we never share your browsing with other advertisers.

If you allow analytics, pseudonymous Google Analytics client and session identifiers may be stored with an order so completed purchases and refunds can be measured reliably. We do not send your name, email, phone number, or delivery address to Google Analytics.

Completed purchase and refund totals may also be reported without browser, account, contact, or device identifiers for aggregate transaction reporting. Turning optional analytics off prevents behavioural and session attribution; it does not remove the store's aggregate transaction record.

You can turn personalized recommendations off at any time. When off, you'll see standard, non-personalized recommendations and we stop building a personalization profile for guest browsing on this device. Signed-in customers can also view, edit, or clear their saved profile from the My beauty profile section of their account.

Optional analytics

Analytics and personalization are separate choices. You can change whether optional analytics storage and Microsoft Clarity run on this device at any time. Google Analytics measures visits by default; turning analytics off below disables its storage and removes its cookies. Advertising storage, ad personalization, and ad user data remain disabled.

6. Security

All data is transmitted over HTTPS. Access to personal data is restricted to authorised personnel only. We take reasonable technical and organisational measures to protect your data against unauthorised access, loss, or misuse.

7. Your rights under PDPA

You have the right to:

• Access the personal data we hold about you
• Correct inaccurate personal data
• Withdraw consent for uses not required for contract fulfilment
• Request deletion subject to legal retention obligations

To exercise any of these rights, contact our Data Protection Officer at . We will respond within 10 business days.

8. Changes to this policy

We may update this Privacy Policy from time to time. Material changes will be posted on this page with a revised effective date.

9. Contact

WELL IN STYLE PTE. LTD.
77 High Street #10-12B High Street Plaza
Singapore 179433