Privacy Policy

Privacy Policy

Last updated: 5 June 2026

This Privacy Policy explains how ScolioLife Pte Ltd ("ScolioLife", "we", "us" or "our") collects, uses, discloses, protects and retains your personal information. ScolioLife is based in Singapore and processes personal data under Singapore's Personal Data Protection Act 2012. For individuals in New Zealand, we handle your personal information in accordance with the Privacy Act 2020 and its 13 Information Privacy Principles (IPPs), and we handle health information consistently with the Health Information Privacy Code 2020.

1. Personal Information We Collect

We collect personal information you provide directly, information generated when you use our website, and health information created during your clinical care. This may include:

  • verifiedIdentity and contact data — name, date of birth, postal address, email, telephone and WhatsApp number, and emergency contact details.
  • verifiedHealth information — medical history, symptoms, posture and spinal assessments, Cobb-angle measurements, X-rays and imaging, photographs, ScolioAlign™ brace fitting data, and clinician notes, collected with your consent for your care.
  • verifiedTransaction and payment data — products and services purchased and billing details. Card details are handled by our payment providers and not stored by ScolioLife.
  • verifiedTechnical data — IP address, browser type, device identifiers, pages visited, and other diagnostic data collected through cookies.

2. How and Why We Use Your Information

We collect personal information for lawful purposes connected with our services and use it only for those purposes or directly related purposes. These include providing clinical care (assessment, scoliosis correction programmes, ScolioAlign™ brace fitting and progress monitoring), managing appointments and accounts, processing orders and payments, improving our services, marketing with your consent (you may opt out at any time), and meeting our legal obligations.

3. Your Rights: Access and Correction

Under IPP 6 and IPP 7 you have the right to access the personal information we hold about you and to request correction. Email our Data Protection Officer at support@scoliolife.com. We will respond as soon as reasonably practicable and within 20 working days. If we decline a request we will explain why.

4. Consent and Withdrawal

We collect and use your information with your authorisation or as otherwise permitted by the Privacy Act. You may withdraw consent (for example, for marketing) at any time by contacting our Data Protection Officer; withdrawing consent essential to your care may affect the services we can provide.

5. Security of Your Information

We take reasonable security safeguards to protect personal information against loss, unauthorised access, use, modification or disclosure. These include access controls, need-to-know restrictions, secure storage, and encryption of payment transactions through our providers. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

6. Retention of Your Information

We retain personal information only for as long as necessary for the purposes for which it may lawfully be used, or as required by law. As a healthcare provider we are required to retain medical records for a minimum period set by Singapore law (at least 6 years from the last clinical entry, and longer for the records of minors). When information is no longer needed we securely dispose of it.

7. Disclosure and Cross-Border Transfer

We do not sell your personal information. We disclose it to service providers acting on our behalf (IT and website hosting, analytics such as Google Analytics, payment processing such as Stripe, and email delivery such as Mailchimp) under contracts limiting their use of the data, and where required by law. As ScolioLife operates from Singapore, your personal information is transferred to and stored in Singapore (IPP 12 disclosure outside New Zealand) and, where your care is coordinated, at our clinics in Kuala Lumpur (Malaysia) and Surabaya (Indonesia), with comparable safeguards in place.

8. Privacy Breach Notification

We maintain procedures to detect, assess and respond to privacy breaches. In line with the Privacy Act 2020, where a privacy breach is likely to cause serious harm, we will notify the Office of the Privacy Commissioner and the affected individuals as soon as practicable.

9. Cookies and Tracking

We use cookies and similar technologies to operate the website, remember your preferences, and analyse traffic. You can refuse some or all cookies through your browser. The main cookies we use are essential cookies (e.g. WordPress, WooCommerce), analytics cookies (e.g. Google Analytics), and preference cookies (e.g. WPML, Mailchimp).

10. Children and Young People

Scoliosis often develops during adolescence, so many of our patients are minors. Where we collect a patient's information under the age of 18, we do so to provide care and with the consent of a parent or legal guardian. We do not knowingly collect information directly from a child through our website without parental or guardian involvement.

11. Data Protection Officer and How to Contact Us

ScolioLife has appointed a Data Protection Officer (DPO) / Privacy Officer responsible for privacy compliance. For any question, to access or correct your information, or to make a complaint, contact:

  • verifiedPrivacy Officer, ScolioLife Pte Ltd
  • verifiedEmail: support@scoliolife.com
  • verifiedAddress: Tong Building, 302 Orchard Road #10-02, Singapore 238862
  • verifiedOnline: scoliolife.com/en_NZ/contact-us

If we cannot resolve your concern, you may complain to the Office of the Privacy Commissioner at www.privacy.org.nz.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will post the updated policy here and revise the "Last updated" date above. We encourage you to review this page periodically.

Frequently Asked Questions

Does ScolioLife comply with New Zealand's Privacy Act?

Yes. We handle personal information in accordance with the Privacy Act 2020 and its 13 Information Privacy Principles, and the Health Information Privacy Code 2020.

How do I access or correct my information?

Email support@scoliolife.com. We respond as soon as reasonably practicable and within 20 working days under IPP 6 and IPP 7.

How long does ScolioLife keep my medical records?

At least the minimum required by Singapore law (a minimum of 6 years from the last clinical entry, and longer for minors), after which records are securely disposed of.

Is my data sent overseas?

Yes. As ScolioLife is based in Singapore, your information is transferred to and stored in Singapore under IPP 12, with comparable safeguards in place.

Who do I contact about privacy?

Our Privacy Officer at support@scoliolife.com. Unresolved concerns can be raised with the Office of the Privacy Commissioner at www.privacy.org.nz.