Privacy Policy

Privacy Policy

Last updated: 5 June 2026

This Privacy Policy explains how ScolioLife Pte Ltd ("ScolioLife", "we", "us" or "our") collects, uses, discloses, protects and retains your personal information. ScolioLife is based in Singapore and processes personal data under Singapore's Personal Data Protection Act 2012. For individuals in Canada, we handle your personal information in accordance with the Personal Information Protection and Electronic Documents Act (PIPEDA) and its ten fair information principles, together with applicable provincial privacy and health-information laws.

1. Personal Information We Collect

We collect personal information you provide directly, information generated when you use our website, and health information created during your clinical care. This may include:

  • verifiedIdentity and contact data — name, date of birth, postal address, email, telephone and WhatsApp number, and emergency contact details.
  • verifiedHealth information — medical history, symptoms, posture and spinal assessments, Cobb-angle measurements, X-rays and imaging, photographs, ScolioAlign™ brace fitting data, and clinician notes. We treat health data as sensitive and collect it with your consent for your care.
  • verifiedTransaction and payment data — products and services purchased and billing details. Card details are handled by our payment providers and not stored by ScolioLife.
  • verifiedTechnical data — IP address, browser type, device identifiers, pages visited, and other diagnostic data collected through cookies.

2. How and Why We Use Your Information

We identify the purposes for which we collect personal information and use it only for those purposes. These include providing clinical care (assessment, scoliosis correction programmes, ScolioAlign™ brace fitting and progress monitoring), managing appointments and accounts, processing orders and payments, improving our services, marketing with your consent (you may opt out at any time), and meeting our legal obligations.

3. Consent

We obtain your knowledge and consent for the collection, use and disclosure of your personal information, except where the law permits otherwise. The form of consent reflects the sensitivity of the information; we seek express consent for health data. You may withdraw consent at any time, subject to legal or contractual restrictions, by contacting our Data Protection Officer; withdrawing consent essential to your care may affect the services we can provide.

4. Your Rights: Access and Correction

You have the right to access the personal information we hold about you and to challenge its accuracy and request correction. Email our Data Protection Officer at support@scoliolife.com. We will respond within 30 days, and will tell you in advance if any minimal cost applies. In limited cases permitted by PIPEDA we may be unable to provide access, and will explain why.

5. Accuracy and Security

We keep personal information as accurate, complete and up to date as necessary, and protect it with safeguards appropriate to its sensitivity. These include access controls, need-to-know restrictions, secure storage, and encryption of payment transactions through our providers. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

6. Retention of Your Information

We retain personal information only for as long as necessary to fulfil the identified purposes, or as required by law. As a healthcare provider we are required to retain medical records for a minimum period set by Singapore law (at least 6 years from the last clinical entry, and longer for the records of minors). When information is no longer needed we securely destroy or anonymise it.

7. Disclosure and Cross-Border Transfer

We do not sell your personal information. We disclose it to service providers acting on our behalf (IT and website hosting, analytics such as Google Analytics, payment processing such as Stripe, and email delivery such as Mailchimp) under contracts limiting their use of the data, and where required by law. As ScolioLife operates from Singapore, your personal information is transferred to and stored in Singapore and, where your care is coordinated, at our clinics in Kuala Lumpur (Malaysia) and Surabaya (Indonesia). While information is in another country it may be accessible to that country's courts and authorities under applicable law.

8. Breach of Security Safeguards

We maintain procedures to detect, assess and respond to security incidents. In line with PIPEDA, where a breach of security safeguards creates a real risk of significant harm, we will report it to the Office of the Privacy Commissioner of Canada (OPC) and notify affected individuals as soon as feasible.

9. Cookies and Tracking

We use cookies and similar technologies to operate the website, remember your preferences, and analyse traffic. You can refuse some or all cookies through your browser. The main cookies we use are essential cookies (e.g. WordPress, WooCommerce), analytics cookies (e.g. Google Analytics), and preference cookies (e.g. WPML, Mailchimp).

10. Children and Young People

Scoliosis often develops during adolescence, so many of our patients are minors. Where we collect a patient's information under the age of 18, we do so to provide care and with the consent of a parent or legal guardian. We do not knowingly collect information directly from a child through our website without parental or guardian involvement.

11. Data Protection Officer and How to Contact Us

ScolioLife has appointed a Data Protection Officer (DPO) accountable for our compliance with privacy law. For any question, to access or correct your information, or to make a complaint, contact:

  • verifiedData Protection Officer, ScolioLife Pte Ltd
  • verifiedEmail: support@scoliolife.com
  • verifiedAddress: Tong Building, 302 Orchard Road #10-02, Singapore 238862
  • verifiedOnline: scoliolife.com/en_CA/contact-us

If we cannot resolve your concern, you may contact the Office of the Privacy Commissioner of Canada (OPC) at www.priv.gc.ca.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will post the updated policy here and revise the "Last updated" date above. We encourage you to review this page periodically.

Frequently Asked Questions

Does ScolioLife comply with PIPEDA?

Yes. We handle personal information in accordance with PIPEDA and its ten fair information principles, along with applicable provincial laws.

How do I access or correct my personal information?

Email support@scoliolife.com. We respond within 30 days and will tell you in advance if any minimal cost applies.

How long does ScolioLife keep my medical records?

At least the minimum required by Singapore law (a minimum of 6 years from the last clinical entry, and longer for minors), after which records are securely destroyed or anonymised.

Is my data sent outside Canada?

Yes. As ScolioLife is based in Singapore, your information is transferred to and stored in Singapore, with safeguards in place.

Who do I contact about privacy?

Our Data Protection Officer at support@scoliolife.com. Unresolved concerns can be raised with the OPC at www.priv.gc.ca.