Privacy Policy | Aesthetic Growth AI

Template notice (remove before launch): This Privacy Policy is a starting template covering the markets you plan to serve (Australia, Singapore, Hong Kong). Have it reviewed by qualified counsel, replace the bracketed placeholders, and keep it aligned with the tracking tools you actually deploy (e.g. Meta Pixel, analytics, Vidalytics).

1. Introduction

This Privacy Policy explains how [COMPANY LEGAL NAME] (“Aesthetic Growth AI”, “we”, “us”) collects, uses, discloses and protects personal information when you visit aestheticgrowth.ai (the “Site”) or interact with us as a prospective or current business client. It is written to comply with the Australian Privacy Act 1988 (including the Australian Privacy Principles), Singapore’s Personal Data Protection Act 2012 (PDPA), and Hong Kong’s Personal Data (Privacy) Ordinance (PDPO). Where we serve clients in other jurisdictions, applicable local law also applies.

Note for patients: This policy covers this website. Where our systems process patient enquiries on behalf of a clinic, we act as a service provider / data intermediary to that clinic, under the clinic’s own privacy policy and a data processing agreement with us. Patients should direct privacy requests to their clinic in the first instance.

2. Information We Collect

Information you provide

Contact and booking details — name, email address, phone number, clinic name, role, and information you share when booking a Growth Audit or contacting us.
Business information — details about your clinic, marketing and lead flow that you share during calls or onboarding.

Information collected automatically

Usage data — pages viewed, time on page, referring URLs, and interactions with embedded video (including watch-time analytics via our video hosting provider).
Device data — IP address, browser type, operating system, and device identifiers.
Cookies and similar technologies — see Section 6.

3. How We Use Personal Information

To respond to enquiries and schedule and conduct consultations;
To provide, personalise and improve the Site and our Services;
To send you information about our Services where permitted (you can opt out at any time);
To measure and improve the performance of our marketing, including advertising on platforms such as Meta;
To comply with legal obligations and enforce our agreements.

4. Legal Bases

Where a legal basis is required, we rely on: your consent (e.g. marketing communications, certain cookies); performance of a contract or steps prior to a contract (e.g. responding to your booking); our legitimate interests in operating and promoting our business; and compliance with legal obligations.

5. How We Share Personal Information

We do not sell personal information. We share it only with:

Service providers who support the Site and our operations — such as website hosting, video hosting (e.g. Vidalytics), appointment scheduling, CRM, email, and analytics providers — under obligations of confidentiality;
Advertising platforms (e.g. Meta) in aggregated or pseudonymised form (such as hashed identifiers) for ad measurement and audience building, where permitted;
Professional advisers and authorities where required by law or to protect our rights.

6. Cookies and Tracking

We use cookies and similar technologies for essential site functions, analytics, video playback measurement, and advertising attribution (including the Meta Pixel or equivalent). You can control cookies through your browser settings; disabling some cookies may affect Site functionality. Where required by law, we will request your consent before setting non-essential cookies.

7. Cross-Border Transfers

We operate from [COUNTRY] and use service providers located in various countries, so personal information may be transferred outside your home jurisdiction. Where we do this, we take steps required by applicable law (including the APPs, PDPA and PDPO) to ensure the information receives a comparable standard of protection.

8. Security

We use reasonable technical and organisational measures — including encryption in transit, access controls and vendor due diligence — to protect personal information against unauthorised access, loss or misuse. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

9. Retention

We retain personal information only as long as needed for the purposes described above, to comply with legal obligations, or to resolve disputes — after which it is deleted or de-identified.

10. Your Rights

Depending on your jurisdiction, you may have rights to access, correct, delete, or receive a copy of your personal information, to withdraw consent, and to object to or restrict certain processing. To exercise any right, contact us using the details below. We will respond within the timeframe required by applicable law. If you are unsatisfied with our response, you may complain to your local regulator: the OAIC (Australia), the PDPC (Singapore), or the PCPD (Hong Kong).

11. Marketing Communications

We only send marketing where permitted by law, and every marketing message includes an unsubscribe option. We comply with applicable spam laws, including Australia’s Spam Act 2003 and Singapore’s Do Not Call provisions under the PDPA.

12. Children

The Site is intended for business users and is not directed at children under 18. We do not knowingly collect personal information from children.

13. Changes to This Policy

We may update this Privacy Policy from time to time. The revised version takes effect when posted with an updated “Last updated” date. Material changes will be highlighted on the Site.

14. Contact Us

Privacy Officer / Data Protection Officer
[COMPANY LEGAL NAME]
[REGISTERED ADDRESS]
Email: info@kokofai.com