Privacy Policy | Curative

Curative Group Pte. Ltd.

Effective Date: 19 April 2026

Last Updated: 19 April 2026

Introduction

Curative Group Pte. Ltd. ("Curative Group", "we", "us", or "our"), a company incorporated in Singapore (UEN: 201727747H), is committed to protecting the personal data of our customers, business partners, website visitors, and other individuals in accordance with the Personal Data Protection Act 2012 (No. 26 of 2012) of Singapore ("PDPA") and its subsidiary legislation, including the Personal Data Protection (Enforcement) Regulations and applicable Advisory Guidelines issued by the Personal Data Protection Commission ("PDPC").

This Privacy Policy explains how we collect, use, disclose, and protect your personal data. By interacting with us, submitting enquiries, or using our website at www.curative.asia, you acknowledge that you have read and understood this Privacy Policy.

Scope of This Policy

This Privacy Policy applies to personal data collected by Curative Group in the course of our business operations, including but not limited to:

Visitors to our website (www.curative.asia)
Existing and prospective customers, clients, and business partners
Healthcare professionals, clinics, hospitals, and aesthetic centres we serve
Suppliers, vendors, and third-party service providers
Job applicants and employees

This Policy does not apply to third-party websites, platforms, or services that may be linked from our website. We encourage you to review the privacy policies of those third parties independently.

Personal Data We Collect

We may collect the following categories of personal data, depending on the nature of your interaction with us:

Identification and Contact Information

Full name, job title, and designation
Business or personal email address
Office, mobile, or direct telephone number
Business address, mailing address, and billing address
Company name and business registration details

Transaction and Commercial Information

Purchase history, order details, and invoicing records
Product enquiries, quotation requests, and correspondence
Payment information (processed securely via authorised payment gateways)

Technical and Usage Data

IP address, browser type, and operating system
Pages visited, time spent, and navigation patterns on our website
Cookies and similar tracking technologies (refer to Section 10)

Professional and Clinical Information

Medical licence numbers, professional registration details
Clinical specialisation and practice information (for healthcare professionals)
Product training, certifications, and continuing medical education records

Communication Records

Emails, WhatsApp messages, and other written correspondence
Records of meetings, calls, and webinars
Feedback, survey responses, and enquiry submission
How We Collect Personal Data

We collect personal data through the following means:

Directly from you when you submit enquiries via our website contact form, email, or WhatsApp
When you register for events, webinars, or continuing medical education programmes
Through business cards, referrals, or professional networking
Via our authorised distributors, sales representatives, or agents
Automatically through cookies and analytics tools when you visit our website
From publicly available sources such as professional directories, company websites, and regulatory registers
From third parties such as data analytics providers, marketing partners, or referral partners, where permitted by law

Purposes for Which We Use Personal Data

We collect, use, and disclose your personal data only for purposes that a reasonable person would consider appropriate in the circumstances, and for which we have obtained your consent (where required) or are otherwise permitted under the PDPA. These purposes include:

5.1 Business and Commercial Purposes

Processing and fulfilling product orders, quotations, and service requests
Managing customer accounts, contracts, and ongoing business relationships
Invoicing, payment processing, and financial record-keeping
Responding to product enquiries, complaints, and after-sales support

5.2 Marketing and Communications

Sending product updates, promotional materials, newsletters, and event invitations
Conducting market research, customer satisfaction surveys, and feedback collection
Personalising communications and offers relevant to your clinical or business needs

Note: Where required under the PDPA, we will only send marketing messages to you if you have given your express consent or if we are permitted to do so under the PDPA's Notification Obligation or other applicable exceptions. You may withdraw consent for marketing communications at any time by contacting our Data Protection Officer.

5.3 Regulatory, Legal, and Compliance Purposes

Complying with applicable Singapore laws and regulations, including HSA, GDPMDS, and PDPA requirements
Maintaining records required for regulatory submissions, audits, and inspections
Preventing, detecting, and investigating fraud, misconduct, or illegal activity
Enforcing our contractual rights and legal obligations

5.4 Operational and Administrative Purposes

Managing our internal business operations, IT systems, and security
Conducting employee recruitment, onboarding, and human resources administration
Training, accreditation, and professional development programmes
Improving our website, products, services, and customer experience

Disclosure of Personal Data

We do not sell, rent, or trade your personal data. We may disclose your personal data to the following categories of recipients, strictly on a need-to-know basis and subject to appropriate data protection obligations:

Our related corporations and affiliated entities within the Curative Group
Authorised employees, sales representatives, and clinical application specialists
Third-party service providers engaged to support our business operations (e.g., IT service providers, logistics partners, payment processors, cloud storage providers)
Principal brand partners and medical device manufacturers whose products we distribute, where required for warranty, technical support, or regulatory compliance
Professional advisers including lawyers, accountants, and auditors
Government authorities, regulatory bodies (including HSA and PDPC), and law enforcement agencies, where required by law or court order
Prospective buyers or investors in connection with any merger, acquisition, or restructuring of our business

Where we disclose personal data to third parties, we require them to handle your personal data in accordance with applicable data protection laws and our data protection standards.

Transfer of Personal Data Overseas

As a regional company with operations in Singapore, Malaysia, Thailand, and Hong Kong, we may transfer your personal data to our offices, staff, or third-party service providers located in these countries and, in some cases, other jurisdictions outside Singapore.

Where personal data is transferred outside Singapore, we will comply with the requirements of the PDPA, including ensuring that the recipient provides a standard of protection at least comparable to that under the PDPA, whether through contractual arrangements, binding corporate rules, or other lawful mechanisms as recognised by the PDPC.

Retention of Personal Data

We retain personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required or permitted by applicable law, whichever is longer. The criteria used to determine our retention periods include:

The duration of our business relationship with you
Statutory limitation periods applicable to legal claims
Regulatory requirements under HSA, GDPMDS, IRAS, and other applicable frameworks
Our legitimate business interests in maintaining accurate historical records

Upon expiry of the applicable retention period, we will securely dispose of or anonymise your personal data in accordance with our internal data retention and disposal procedures.

Protection of Personal Data

We implement reasonable and appropriate technical, administrative, and physical security measures to protect your personal data against unauthorised access, collection, use, disclosure, copying, modification, disposal, or similar risks. These measures include:

Access controls and authentication mechanisms for internal systems
Encryption of sensitive data in transit and at rest
Regular security assessments and vulnerability testing
Staff training on data protection obligations and cybersecurity awareness
Incident response procedures for data breaches

In the event of a data breach that is notifiable under the PDPA, we will notify the PDPC and affected individuals in accordance with the mandatory data breach notification requirements under the PDPA.

Cookies and Website Analytics

Our website (www.curative.asia) uses cookies and similar tracking technologies to enhance your browsing experience, analyse website traffic, and support our marketing activities. Cookies are small data files stored on your device when you visit our website.

We use the following types of cookies:

Essential Cookies: Necessary for the operation of our website and cannot be disabled
Analytics Cookies: Used to understand how visitors interact with our website (e.g., Google Analytics)
Marketing Cookies: Used to deliver relevant advertisements and track campaign performance

You may configure your browser settings to refuse or delete cookies. However, disabling certain cookies may affect the functionality of our website. By continuing to use our website, you consent to our use of cookies in accordance with this Privacy Policy.

Your Rights Under the PDPA

Subject to the exceptions and limitations provided under the PDPA, you have the following rights in respect of your personal data held by us:

11.1 Right of Access

You have the right to request access to the personal data we hold about you, as well as information about how we have used or disclosed your personal data in the past one year.

11.2 Right of Correction

You have the right to request correction of any inaccurate or incomplete personal data we hold about you. We will correct such data as soon as practicable, and where we are satisfied that there are grounds to do so.

11.3 Right of Withdrawal of Consent

You have the right to withdraw your consent for the collection, use, or disclosure of your personal data at any time, subject to legal and contractual restrictions. Please note that withdrawal of consent may affect our ability to provide certain services or maintain our business relationship with you. We will inform you of the likely consequences of withdrawal before processing your request.

11.4 Right to Data Portability (where applicable)

Where technically feasible and where required under applicable regulations, you may request that we transmit your personal data in a commonly used machine-readable format to another organisation.

To exercise any of the above rights, please contact our Data Protection Officer using the details set out in Section 13 below. We will respond to your request within 30 calendar days, or notify you if additional time is required.

Do Not Call Registry

We respect Singapore's Do Not Call (DNC) Registry. We will not send unsolicited marketing messages to Singapore telephone numbers registered on the DNC Registry, unless we have your clear and unambiguous consent, or are otherwise permitted to do so under the PDPA.

Data Protection Officer

Curative Group has appointed a Data Protection Officer ("DPO") who is responsible for ensuring our compliance with the PDPA and overseeing our data protection practices.

You may contact our DPO for any queries, access or correction requests, complaints, or to withdraw your consent:

Data Protection Officer

Curative Group Pte. Ltd.

10 Ang Mo Kio Street 65, #02-20 Techpoint, Singapore 569059

Email: dpo@curative.asia

Tel: +65 6037 9216

We will endeavour to respond to your request within 30 days. If we are unable to do so within this period, we will notify you of the expected timeframe for our response.

Updates to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our business practices, legal obligations, or regulatory requirements. The updated Privacy Policy will be published on our website at www.curative.asia with the revised effective date.

We encourage you to review this Privacy Policy periodically. Your continued interaction with us following any updates constitutes your acknowledgment of the revised Privacy Policy. Where required by law, we will seek your consent before making material changes.

Governing Law

This Privacy Policy is governed by and construed in accordance with the laws of the Republic of Singapore. Any disputes arising from or in connection with this Privacy Policy shall be subject to the exclusive jurisdiction of the courts of Singapore.

If you have any concerns about our data protection practices that have not been resolved to your satisfaction, you may lodge a complaint with the Personal Data Protection Commission of Singapore at www.pdpc.gov.sg.