glowkaki

Privacy Policy

Effective 7 November 2026

1. Introduction

This Privacy Policy explains how glowkaki ("we", "us", "our") collects, uses, discloses and protects personal data when you use our website (the "Site"). We handle personal data in line with Singapore's Personal Data Protection Act 2012 ("PDPA"). By using the Site, you consent to the collection, use and disclosure of your personal data as described here.

This policy covers only the Site. Each Listed Business is responsible for the personal data it collects when you contact or book with it directly (for example, over WhatsApp), and its own practices apply to that.

2. What we collect

Information you give us

  • Account details: your email address, password (stored securely by our hosting provider, never visible to us) and, if provided, your name or profile photo.
  • Reviews and ratings: your star rating, written review and the display name shown with it.
  • Saved studios: the listings you choose to save.
  • Appointment requests: if you are signed in when you ask a studio about an appointment, we keep a copy of the studio, service, preferred days and times, your name and any note, so you can see it on your account page. You can remove it there at any time. The message itself is sent by you through WhatsApp or email, and we do not see the conversation.
  • Business listings: business name, description, services and prices, address and postal code, nearest MRT, usual availability and reply time, phone number, email, Instagram handle, photos, badges and any other notes you submit.
  • Messages to us: anything you send us by email.

Information collected automatically

  • Technical data such as IP address, browser and device type, pages viewed and the date and time of visits, collected by our hosting provider for security, performance and analytics.
  • Data processed by Google reCAPTCHA to protect sign-up and sign-in from bots.

3. How we use it

  • to create and manage your account and let you sign in, reset your password, save studios and post reviews;
  • to review, publish and manage business listings, and to contact listing owners about their listing;
  • to display reviews and calculate average ratings;
  • to run, secure, troubleshoot and improve the Site, and to prevent spam, fraud and abuse;
  • to respond to your enquiries and requests; and
  • to comply with the law and enforce our Terms of Use.

We do not sell your personal data.

Marketing emails

We send marketing emails (for example, new studios, member offers and beauty tips) only if you opt in, either by ticking the box when you sign up or from your account page. You can withdraw this consent at any time by unticking the option on your account page or using the unsubscribe link in any marketing email. We record your choice with our email provider, Wix.com, so that it is respected. Opting out does not affect your account or emails about your account (such as password resets).

4. What is public

Some information is published on the Site for anyone to see:

  • for approved business listings: everything submitted in the listing, including the business name, address, phone number, email, Instagram handle, photos and notes; and
  • for reviews: your display name, rating, review text and date.

Please do not include in a listing or review any personal information you do not want to be public. Your saved studios and account email are not shown publicly.

5. Who we share it with

  • Service providers who host and run the Site for us, including Wix.com (hosting, member accounts, database and media storage) and Google (reCAPTCHA). They process data on our behalf under their own security and privacy commitments.
  • Authorities and others where required or permitted by law, for example to respond to a lawful request, to protect someone's safety, or to establish or defend legal claims.
  • A successor if the Site is transferred, merged or sold, subject to this policy.

When you tap to WhatsApp, call, email or open Google Maps from a listing, you leave the Site, and that service's own privacy policy applies.

6. Overseas transfers

Our service providers may store and process data on servers outside Singapore. Where this happens, we rely on those providers' contractual and security commitments to ensure your data receives a standard of protection comparable to that under the PDPA.

7. Cookies

The Site uses cookies and similar technologies that are needed to keep you signed in, remember your session, protect forms against bots and keep the Site secure. Our hosting provider may also use cookies for performance and basic analytics. You can block or delete cookies in your browser settings, but signing in and some features may then stop working.

8. How long we keep it

We keep personal data only for as long as it is needed for the purposes above or as required by law. Account data is kept while your account is active. Listings and reviews stay published until they are removed by you (on request) or by us. When data is no longer needed, we delete or anonymise it.

9. Security

We use reasonable security arrangements to protect personal data, including encrypted connections (HTTPS), access controls, and hosting with an established provider. No method of transmission or storage is completely secure, however, and we cannot guarantee absolute security.

10. Your choices and rights

Under the PDPA you may:

  • ask for access to the personal data we hold about you and how it has been used or disclosed in the past year;
  • ask us to correct personal data that is inaccurate or incomplete; and
  • withdraw your consent to our use of your personal data, or ask us to delete your account, listing or reviews.

To do any of these, email us at [contact email to be added]. We may need to verify your identity first, and will respond within a reasonable time. If you withdraw consent, we may no longer be able to provide some features, such as your account.

11. Listed businesses

If you submit a listing, you agree that its details will be published. If your listing includes personal data of other people (for example, a photo showing a client), you confirm you have their consent. You may ask us at any time to update or remove your listing.

12. Children

The Site is not intended for anyone under 18, and we do not knowingly collect personal data from children. If you believe a child has given us personal data, please contact us and we will delete it.

13. Changes

We may update this Privacy Policy from time to time. The latest version will always be on this page with its effective date. If you keep using the Site after an update, the updated policy applies.

14. Contact us

For any question, request or complaint about personal data, please contact our Data Protection Officer at [contact email to be added]. If you are not satisfied with our response, you may contact the Personal Data Protection Commission of Singapore.