Who we are
Beautyandhealthco operates this website at https://beautyandhealthco.pro/ and the reporting practice described on it. The office is at 6 Shenton Way, #26-08, OUE Downtown 1, Singapore 068809. E-mail hello@beautyandhealthco.pro. Telephone +65 6327 4815. This notice is for people who use the website, send an enquiry, or supply files during an engagement. It is written in general terms under Singapore’s Personal Data Protection Act (PDPA).
We do not publish registration or tax numbers on this site. We do not sell personal data and we do not use advertising networks. Questions about this notice go to the e-mail above.
What the forms collect
The contact form and the footer briefing form collect name, work e-mail, optional phone, optional company, optional enquiry type, and a message. A consent checkbox is required. A honeypot field named website catches automated posts; leave it empty. A hidden timestamp rejects submissions that arrive too quickly or with an invalid clock. The forms post to /send.php, which validates fields and does not store the message in a database or send mail from the web server. Valid submissions show a thank-you panel. Follow-up happens from the firm mailbox when the team has read the enquiry.
Do not send payroll files, national identity numbers, customer lists or health information through the website form. If an engagement requires those classes of data, they are handled inside client-owned systems under a statement of work and, where requested, an NDA.
Lawful basis and use
We use enquiry data to reply to you, to book a 30-minute briefing call, and to send the written summary of reporting gaps discussed on that call. The basis is your consent, given by the checkbox, and our legitimate need to respond to a business enquiry you initiated. We also keep a minimal record of the enquiry so that two people in the firm do not contradict each other when they reply. We do not use enquiry data to build a marketing list. We do not pass it to advertisers. If you later sign a statement of work, engagement files are handled under that contract and under the engagement section below, not as website marketing data.
Server logs on shared hosting may record IP address, user agent and requested URL for security and uptime. Those logs are used to keep the site available and to investigate abuse. They are not combined with form fields to profile you.
Retention
Enquiry data is kept for 12 months from the date of the form submission, then deleted from mailboxes and any working copy, unless a longer period is required to evidence a contract discussion that led to a signed statement of work. If you ask us to delete an enquiry earlier, we will do so unless we must keep a short record of the request itself. Cookie and local-storage choices are described on the cookies page. The local storage key bhc_cookie is intended to last 12 months on your device.
Processors
This website is hosted on shared infrastructure in Singapore. The hosting provider processes HTTP requests, serves files, and may retain server logs. Google Fonts loads the typefaces Sora and Inter when you open a page; Google receives the request for those font files. The contact page embeds a Google Maps iframe for 6 Shenton Way, OUE Downtown 1. Loading that iframe allows Google to set cookies and to receive request data according to Google’s own terms. You can decline non-essential storage via the cookie banner. The map may still load if you open the contact page, because the embed is how the map is delivered. We do not use the Google Maps JavaScript API or an API key.
We do not use advertising pixels. We do not use review widgets. We do not pass form contents to a third-party CRM from this website.
Client data during engagements
Reporting work uses ledger exports, bank files and operational extracts. We prefer to work inside systems the client already owns, with read access listed in the statement of work. Where a working copy is necessary, it is held on a need-to-know basis for the project. An NDA is signed on request before files move. On project close, working copies we hold are deleted, and we will confirm deletion in writing if you ask. We do not publish client names, testimonials or operating metrics on this site.
Access during an engagement is limited to analysts and reviewers assigned to that statement of work. The review step on the about page is an internal control. If a sub-processor were required for project files, it would be named in the statement of work before files are placed there. This website’s shared host is not used as a document room for client ledgers.
Access, correction and deletion
You may request access to the personal data we hold about you, correction of inaccurate data, and deletion of enquiry data. Send the request to hello@beautyandhealthco.pro from the same e-mail you used in the form where possible. We will respond on working days. Under the PDPA you may withdraw consent for us to continue using your enquiry data to contact you. Withdrawal does not affect a signed statement of work. It also does not affect information we must keep to handle a dispute or to meet a legal obligation.
This notice was published in 2026 and last reviewed on 10 April 2026. Material changes will be posted on this page with an updated review date. The footer of every page repeats that Beautyandhealthco delivers analytics, modelling and reporting services and is not a licensed financial adviser. That line is a service boundary. It is not a privacy control.