Skip to content
oh my gal, your private skin formula, est. 2021 Book now

Privacy Policy

This explains what personal data OMG Problem Skin Studio ("OMG", "we") collects, why, and how we protect it, in line with Singapore's Personal Data Protection Act (PDPA).

Last updated 3 November 2026

What we collect

  • When you book: your name, mobile number, email, preferred date and time, the skin concerns you pick and anything you write in the notes (for example skincare or medication you use).
  • When you message us: what you send on WhatsApp, email or Instagram, including photos of your skin for an online consultation.
  • When you become a client: your treatment history, skin notes and credit balance.
  • When you visit the website: standard technical data (such as your IP address and browser) handled by our hosting provider to deliver and protect the site. We do not use advertising cookies.

Why we use it

  • To arrange, confirm and remind you about appointments.
  • To understand your skin and plan your treatment.
  • To reply to your questions and follow up after a session.
  • To keep accounting records we are required to keep.

We only use your data for these purposes. We never sell it or use it for advertising. Before-and-after photos appear on this website only with your written consent, with faces masked.

Who we share it with

We use a small number of service providers to run the studio. They process data only on our instructions:

  • Cloudflare: website hosting and security.
  • Supabase: our booking database, hosted in Singapore.
  • Brevo: sends booking and reminder emails.
  • Google Workspace: our studio email.

Some of these providers store data outside Singapore. Where that happens, we rely on their contractual commitments to protect it to a standard comparable to the PDPA.

How long we keep it

Booking requests that do not lead to a visit are deleted within 12 months. Client records are kept while you are a client and for up to 3 years after your last visit, unless the law requires us to keep them longer.

Your choices

  • Ask to see the personal data we hold about you, or to correct it.
  • Withdraw your consent. We will stop using your data, though we may then be unable to provide treatment.
  • Ask us to delete your data, subject to records we must keep by law.

We aim to reply within 30 days.

Contact

For anything about your personal data, contact our Data Protection Officer at [email protected] or on WhatsApp at +65 8959 3351.