Privacy Policy

Last updated: 5 June 2026

This Privacy Policy explains how ScolioLife Pte Ltd ("ScolioLife", "we", "us" or "our") collects, uses, discloses, protects and retains your personal data in accordance with the Personal Data Protection Act 2012 of Singapore (the "PDPA"). As a healthcare provider, we also follow the Personal Data Protection Commission (PDPC) and Ministry of Health Advisory Guidelines for the Healthcare Sector, and the record-keeping requirements of the Healthcare Services Act / Private Hospitals and Medical Clinics framework.

What is personal data? Under the PDPA, personal data is data about an individual who can be identified from that data, or from that data combined with other information we have or are likely to have access to. This includes both your contact details and your health information.

By using www.scoliolife.com, booking a consultation, purchasing a product, or otherwise providing your personal data to us, you acknowledge that you have read and understood this Privacy Policy. Where the PDPA requires consent, we will obtain it from you separately and you may withdraw it at any time as described below.

1. Personal Data We Collect

We collect personal data that you provide to us directly, that is generated when you use our website, and that is created during your clinical care. Depending on how you interact with us, this may include:

Identity and contact data — your name, date of birth, gender, postal address, email address, telephone and WhatsApp number, and emergency contact details.
Identification data — your NRIC, FIN or passport number. In line with PDPC guidelines, we collect government identifiers only where it is necessary to verify your identity to a high degree of accuracy (for example, to maintain accurate medical records, for insurance, or where required by law).
Health and clinical data — your medical history, symptoms, posture and spinal assessments, Cobb-angle measurements, X-rays and other imaging, photographs, scan results, ScolioAlign™ brace fitting data, exercise and progress records, and clinician notes.
Transaction and payment data — products and services purchased, billing details, and records of payments. Card details are processed by our payment providers and are not stored by ScolioLife.
Usage and device data — your IP address, browser type and version, device identifiers, the pages you visit, dates and times of access, and other diagnostic data collected through cookies and similar technologies.

2. How and Why We Use Your Data (Purpose Limitation)

We use your personal data only for purposes that a reasonable person would consider appropriate in the circumstances, and that we have notified to you. These purposes include:

Providing clinical care — to assess your condition, deliver scoliosis correction programmes, fit and review the ScolioAlign™ 3D brace, and monitor your progress.
Managing appointments and accounts — to schedule consultations, send reminders, process orders and payments, and respond to your enquiries.
Improving our services — to analyse website usage, maintain security, and improve our website, products and patient experience.
Marketing (with your consent) — to send you newsletters, health information and promotions. You can opt out at any time using the unsubscribe link or by contacting us.
Legal and regulatory compliance — to meet our obligations under Singapore healthcare, tax and other applicable laws.

3. Consent and Withdrawal of Consent

We collect, use and disclose your personal data with your consent, or where permitted or required by law. For purposes directly related to your clinical care, we may rely on deemed consent or other lawful bases under the PDPA. Where we rely on your consent, we will make the purpose clear at or before the point of collection.

You may withdraw your consent at any time by contacting our Data Protection Officer using the details in Section 11. On receiving your request, we will inform you of the likely consequences of withdrawal and will stop (and instruct our service providers to stop) collecting, using or disclosing your data for the relevant purpose, unless we are permitted or required by law to continue. Withdrawing consent for purposes essential to your care may mean we are unable to continue providing certain services.

4. Your Rights: Access and Correction

You have the right to request access to the personal data we hold about you and to request correction of any error or omission. To make a request, contact our Data Protection Officer at support@scoliolife.com.

Response time — we will respond to access and correction requests as soon as reasonably possible, and within 30 calendar days. If we are unable to respond within 30 days, we will inform you in writing of the time by which we will respond.
Fees — we may charge a reasonable fee to cover the cost of responding to an access request, and we will notify you of the fee before proceeding.
Exceptions — in limited circumstances permitted under the PDPA, we may be unable to provide access or make a correction, in which case we will explain why.

5. Accuracy of Your Data

We make reasonable efforts to ensure that the personal data we collect is accurate and complete, particularly where it is used to make decisions about your care or is disclosed to another party. Please help us keep your records accurate by notifying us of any changes to your personal details.

6. Protection of Your Data (Security)

We make reasonable security arrangements to protect your personal data against unauthorised access, collection, use, disclosure, copying, modification, disposal or similar risks. These measures include access controls and authentication, restricting access on a need-to-know basis, secure storage of physical and electronic records, encryption of payment transactions through our providers, and staff confidentiality obligations. No method of transmission or storage is completely secure, and while we strive to protect your data, we cannot warrant absolute security.

7. Retention of Your Data

We retain your personal data only for as long as it is necessary for the purposes for which it was collected, or as required by law. As a healthcare provider, we are required to retain medical records for a minimum period set by Singapore law (at least 6 years from the date of the last clinical entry, and longer for the records of minors). When personal data is no longer needed for any legal or business purpose, we will cease to retain it or remove the means by which it can be associated with you.

8. Disclosure and Transfer of Your Data

We do not sell your personal data. We may disclose it to the following categories of recipients, subject to PDPA safeguards:

Service providers — trusted third parties who process data on our behalf and only on our instructions, such as IT and website hosting, analytics (Google Analytics), payment processing (e.g. Stripe), and email/newsletter delivery (e.g. Mailchimp).
Within the ScolioLife group — where your care is coordinated across our clinics in Singapore, Kuala Lumpur (Malaysia) and Surabaya (Indonesia).
Legal and regulatory bodies — where disclosure is necessary to comply with the law, respond to lawful requests, protect our rights or property, or protect the safety of our patients, staff or the public.

Cross-border transfers: if we transfer your personal data outside Singapore (for example, to a clinic or service provider in another country), we will take reasonable steps to ensure the recipient provides a standard of protection comparable to the PDPA, through contractual or other appropriate safeguards.

9. Data Breach Notification

We maintain procedures to detect, assess and respond to data breaches. Where a data breach is likely to result in significant harm to affected individuals, or is of significant scale (affecting 500 or more individuals), we will notify the PDPC as soon as practicable and in any case within 3 calendar days, and we will notify affected individuals where the breach is likely to result in significant harm to them.

10. Cookies and Tracking Technologies

We use cookies and similar technologies to operate our website, remember your preferences, and analyse traffic. You can set your browser to refuse some or all cookies, but parts of the website may not function properly as a result. The main cookies we use include:

Essential cookies — required for site functions such as logging in, the shopping cart and checkout (e.g. WordPress, WooCommerce).
Analytics cookies — used to understand how visitors use the site so we can improve it (e.g. Google Analytics).
Preference and marketing cookies — used to remember your language and to support our newsletter sign-up (e.g. WPML, Mailchimp).

11. Do Not Call Provisions

If you have a Singapore telephone number registered with the Do Not Call (DNC) Registry, we will not send you marketing messages by call, text or fax to that number unless you have given us clear and unambiguous consent to do so, or another lawful exception applies. You may withdraw your consent to marketing messages at any time.

12. Children and Young People

Scoliosis often develops during adolescence, so many of our patients are minors. Where we collect and use the personal data of a patient under 18, we do so for the purpose of providing care and with the consent of a parent or legal guardian, who provides the relevant information and instructions on the child's behalf. We do not knowingly collect personal data directly from a child through our website without parental or guardian involvement. If you believe a child has provided us with personal data without appropriate consent, please contact our Data Protection Officer and we will take appropriate steps.

13. Data Protection Officer and How to Contact Us

ScolioLife has appointed a Data Protection Officer (DPO) who is responsible for ensuring our compliance with the PDPA. If you have any questions about this Privacy Policy, wish to access or correct your data, withdraw consent, or make a complaint, please contact:

Data Protection Officer, ScolioLife Pte Ltd
Email: support@scoliolife.com
Address: Tong Building, 302 Orchard Road #10-02, Singapore 238862
Phone: (+65) 6635 2550 | WhatsApp: (+65) 8907 8900
Online: scoliolife.com/en_SG/contact-us

If we are unable to resolve your concern, you have the right to lodge a complaint with the Personal Data Protection Commission (PDPC) of Singapore at www.pdpc.gov.sg.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or the law. We will post the updated policy on this page and revise the "Last updated" date above. Where changes are significant, we will provide a more prominent notice. We encourage you to review this page periodically.

Frequently Asked Questions

Does ScolioLife comply with Singapore's PDPA?

Yes. ScolioLife Pte Ltd collects, uses, discloses and protects personal data in accordance with the Personal Data Protection Act 2012, and as a healthcare provider we also follow the PDPC-MOH Advisory Guidelines for the Healthcare Sector and Singapore's medical record-keeping requirements.

How do I access or correct my personal data?

Email our Data Protection Officer at support@scoliolife.com with your request. We will respond within 30 calendar days. A reasonable fee may apply to access requests, and we will tell you the fee before proceeding.

How long does ScolioLife keep my medical records?

We retain medical records for at least the minimum period required by Singapore law (a minimum of 6 years from the last clinical entry, and longer for the records of minors), after which they are securely disposed of when no longer needed for any legal or business purpose.

Can I withdraw my consent after giving it?

Yes. You may withdraw consent at any time by contacting our Data Protection Officer. We will explain the likely consequences and stop using your data for the relevant purpose, unless we are permitted or required by law to continue. Withdrawing consent essential to your care may affect our ability to provide certain services.

Who is ScolioLife's Data Protection Officer?

ScolioLife has appointed a Data Protection Officer responsible for PDPA compliance. You can reach the DPO at support@scoliolife.com, or by post at Tong Building, 302 Orchard Road #10-02, Singapore 238862.