Client data, protected with the care you give your clients
Salons and spas hold sensitive information — phone numbers, health notes, photos. BeautyMatters is designed to help you meet your obligations under Singapore’s Personal Data Protection Act (PDPA) without slowing your team down.
What does PDPA mean for salons and spas?
Singapore’s Personal Data Protection Act 2012 (PDPA) requires salons and spas to obtain consent before collecting, using or disclosing clients’ personal data, use it only for reasonable purposes, protect it with reasonable security arrangements, and appoint a Data Protection Officer. Marketing messages to Singapore phone numbers may also be subject to the Do Not Call (DNC) provisions, and organisations should generally not collect full NRIC numbers for routine purposes like bookings or memberships.
Software can make compliance easier, but your business remains responsible for how it handles personal data. See our PDPA checklist for salons and spas.
Privacy built into the everyday
Consent capture
Record consent at booking or intake, with date and source.
Separate marketing consent
Service messages and marketing tracked separately, per channel.
Easy opt-outs
Withdrawals of consent recorded and respected automatically.
Role-based access
Limit health notes and photos to staff who need them.
Activity logs
See who viewed or changed client records.
Minimal identifiers
Designed to work with name and phone number — no NRIC needed.
Everything your beauty business needs, beautifully connected
Booking, client records, packages, payments, reminders and reporting share one database — so nothing is typed twice and nothing falls through the cracks.
- Salon CRM — Client profiles, history and retention
- Spa CRM — Guest preferences and lifetime value
- Online booking — 24/7 booking from Instagram, Google & web
- POS & payments — PayNow, cards, GST-ready receipts
- Packages & memberships — Prepaid credits, loyalty and vouchers
- WhatsApp reminders — Fewer no-shows, warmer follow-ups
- Staff & commissions — Rosters, targets and payouts
- Multi-outlet — One view across every branch
Frequently asked questions
Is BeautyMatters PDPA compliant?
BeautyMatters is designed to support PDPA compliance with consent records, marketing opt-outs, role-based access controls and activity logs. PDPA obligations apply to your organisation, so you remain responsible for your policies and how your team uses personal data.
Can salons collect NRIC numbers from clients?
Under the PDPC’s advisory guidelines, organisations should generally not collect full NRIC numbers unless required by law or necessary to accurately establish identity to a high degree of fidelity. Routine bookings and memberships typically do not require them.
Do we need consent to send WhatsApp promotions?
Marketing messages generally require consent under the PDPA, and messages to Singapore telephone numbers may be subject to the Do Not Call provisions. BeautyMatters records marketing consent per client and channel to help you manage this.
Can I limit which staff see client health notes?
Yes. Role-based permissions let you restrict sensitive notes and photos to authorised staff.
See BeautyMatters in your own salon’s light
Book a private, no-obligation walkthrough. We’ll map your services, packages and team into BeautyMatters and show you exactly how your week would run.