Brow Your Way

Legal

Privacy Policy

Last updated: July 2026

Brow Your Way ("we", "us", "our") is committed to protecting your personal data in accordance with Singapore's Personal Data Protection Act 2012 (PDPA). This policy explains what we collect, why we collect it, who we share it with, and what rights you have. Business registration (UEN): 53469224M.

Our Data Protection Officer

We have designated a Data Protection Officer who is responsible for how we handle your personal data. You can contact them at hello@browyourway.com. Please use this address for any question, access request, correction request, or withdrawal of consent.

What we collect

We collect only what we need in order to advise you and carry out your treatment.

  • Contact details you share with us over WhatsApp or email: your name or initials, phone number, and email address.
  • Consultation information: photographs of your brows, and information about your skin, medical conditions, medications, allergies, and pregnancy or breastfeeding status where these affect whether the treatment is safe or suitable for you. Some of this is health information, and we treat it with particular care.
  • Treatment records: the technique used, pigments chosen, and notes about how your skin healed, so we can treat you safely and consistently at a touch-up.
  • Before-and-after photographs, used publicly only with your separate written consent (see below).
  • Payment information: we take deposits by PayNow. We do not see or store your bank or card details.
  • Website and advertising data: which advert, search, or link brought you to our site. See "Advertising and measurement" below, which sets this out in full.

How we use your data

  • To answer your enquiry, and to arrange and carry out your appointment.
  • To decide, honestly, whether a treatment is safe and suitable for you.
  • To provide aftercare guidance and to arrange touch-ups.
  • To take your deposit and process payment.
  • To understand which of our adverts and pages lead to enquiries.
  • With your explicit, separate written consent, to show before-and-after results on our website or social media.

WhatsApp and messaging

Our consultations and bookings run over WhatsApp. This means the messages you send us, including any photographs and health information you choose to share, are transmitted and processed through WhatsApp, which is operated by Meta, under Meta's own privacy terms and not ours. If you would rather not share health information over WhatsApp, you are welcome to raise it with us in person at your consultation instead.

We use a customer messaging system to manage these conversations and keep a record of your enquiry, so that nothing is lost and your history is available when you return.

Advertising and measurement

We advertise on Google and Meta (Facebook and Instagram). We want to be specific about what that means for you, because it is easy to be vague about it.

Campaign attribution. When you arrive at our site from an advert, a search result, or a link, your browser records how you got here: the campaign details (commonly called UTM parameters), the referring website, the page you landed on, and the advertising platform's click identifier where one is present (for example Google's gclid or Meta's fbclid). We store this in your browser's local storage for 7 days, and send it to our own lead-management system, which is hosted on secure third-party infrastructure. That system returns a short reference code, which is added to the pre-filled WhatsApp message you send us. This is how we know which advert produced an enquiry. Until you choose to message us, this information is not linked to your name or your identity.

Advertising cookies. To measure which adverts result in enquiries, our site loads conversion-tracking tags supplied by Google and Meta. These tags set cookies in your browser and can allow Google and Meta to recognise your browser on other websites that work with them. This is advertising tracking, and we would rather say so plainly than hide it in a sentence about "improving your experience".

How to opt out. You can block or delete cookies in your browser settings, and you can use your browser's private or incognito mode to prevent the 7-day local-storage record being kept. You can also limit ad personalisation directly with the platforms, via Google's Ad Settings and Meta's Ad Preferences. Blocking these will not stop you from booking with us or affect the service you receive.

Consent for photographs

We never publish identifiable images of you without your separate, written consent, which is asked for on its own and is never bundled into your booking. Consent to be treated is not consent to be published. Where we do publish, we identify clients by initials only, never by full name. You may withdraw consent for future use of your images at any time by emailing our Data Protection Officer, and we will remove them from our website and social media where we control them.

Who we share your data with

We do not sell your personal data, and we do not share it for anyone else's marketing. We do rely on service providers to operate, and they process data on our behalf:

  • Website hosting and our content management system.
  • Our lead-management and customer messaging systems.
  • WhatsApp (Meta), for the conversations described above.
  • Google and Meta, for the advertising measurement described above (website and advertising data only, never your health information or your consultation photographs).
  • Where we are required to do so by law.

Your health information and your consultation photographs are never used for advertising, and are never passed to an advertising platform.

Transfers outside Singapore

Some of the service providers above store data on servers outside Singapore. Where your personal data is transferred out of Singapore, we take reasonable steps to satisfy ourselves that it will be protected to a standard comparable to the PDPA, as the Transfer Limitation Obligation requires.

Retention

We keep your consultation and treatment records for as long as you remain a client, and for a reasonable period afterwards, so that we can advise you on touch-ups and treat you safely if you return. When your data is no longer needed for the purposes set out here, and we are not required by law to keep it, we securely delete it. Website and advertising data expires from your browser after 7 days.

Security

We take reasonable steps to protect your personal data from unauthorised access, use, or disclosure. No system is perfectly secure, but access to your records is limited to those who need it to serve you.

Your rights

Under the PDPA you may ask us for access to the personal data we hold about you, ask how it has been used or disclosed in the past year, ask us to correct anything inaccurate, or withdraw a consent you previously gave (including consent for photographs). To do any of these, email hello@browyourway.com. We will respond as soon as we reasonably can. If you withdraw consent that is necessary for treatment, we may no longer be able to treat you, and we will tell you if that is the case.

Changes to this policy

If we change how we handle your data, we will update this page and the "last updated" date above. If the change is significant, we will say so.

Contact

For any question about this policy or your data, email hello@browyourway.com. If you are not satisfied with our response, you may raise the matter with Singapore's Personal Data Protection Commission (PDPC).