Last updated: 18 July 2026

This policy explains how Goetia Pte. Ltd. (UEN 202438761W), trading as RosesAreDark ("we", "our", "us"), collects, uses, discloses and protects your personal data when you visit https://rosesaredark.com ("the site") or purchase from us. We handle personal data in accordance with the Personal Data Protection Act 2012 of Singapore ("PDPA"). By using the site or purchasing from us, you acknowledge this policy.

1. The personal data we collect

We collect only the personal data we reasonably need to provide our services and run our business. Depending on how you interact with us, this may include:

- Contact and identity details — your name, email address, phone number and, where relevant, postal address.

- Order and booking details — the services or products you purchase, appointment times, and correspondence with us.

- Payment information — billing name and address, and card or payment details, which are collected and processed by our third-party payment providers. We do not store full card numbers ourselves.

- Information you choose to give us for a reading or working — for example your date, time or place of birth, or the circumstances you wish us to work on. You provide this voluntarily, and only what you choose to share.

- Session recordings — audio or video of a session, where recording applies and you have been told (see clause 6).

- Technical and usage data — IP address, device and browser information, and cookies or similar technologies when you use the site.

We do not ask for your NRIC number or a copy of your NRIC, and we do not require sensitive data such as your race, religion, political views, sexual orientation, health or criminal record in order to work with you. If you volunteer information of that kind (for example when telling us what you would like a working to address), we treat it with particular care and use it only for that purpose.

2. Why we use your personal data

We use personal data to:

- deliver, schedule and follow up on the services and products you have purchased;

- process payments and keep proper accounting and business records;

- respond to your enquiries and provide customer support;

- manage bookings, rescheduling and our community ("the Tribe") communications you have opted into;

- send you information about our offerings, events and special offers where you have consented to receive them;

- maintain the security, integrity and performance of the site; and

- comply with our legal and regulatory obligations.

3. Consent, and withdrawing it

We collect and use your personal data with your consent, or where the PDPA otherwise permits. You may withdraw your consent to any particular use — including marketing messages — at any time by emailing [email protected] or using the unsubscribe option in our messages. We will action reasonable requests within a reasonable time and tell you if withdrawal affects our ability to provide a service you have purchased. Withdrawing consent does not make unlawful anything we did while consent was in place.

4. Marketing and the Do Not Call provisions

We will only send you marketing messages by email, SMS or messaging apps (such as WhatsApp) where you have consented, and you can opt out at any time. We comply with the Do Not Call provisions of the PDPA.

5. Disclosure and third parties

We do not sell your personal data. We may share it with trusted third parties who help us operate, for example:

- our customer-relationship and funnel platform (GoHighLevel);

- payment providers;

- delivery and logistics partners for physical items; and

- professional advisers, or authorities where required by law.

Some of these providers may store or process data outside Singapore. Where that happens, we take reasonable steps to ensure a standard of protection comparable to the PDPA.

6. Recordings

Where a session is recorded, we will make that clear to you. Recordings are used to deliver the service and for our records. We will only use a recording that identifies you for promotion with your separate consent, which you may decline or withdraw (see our Terms of Use, clause 7).

7. How long we keep your data

We keep personal data only for as long as we need it for the purposes above, or as required for legal, accounting or tax reasons. When it is no longer needed, we take reasonable steps to delete or anonymise it.

8. Keeping your data secure

We take reasonable administrative, technical and physical measures to protect personal data against loss, misuse and unauthorised access, modification or disclosure. No method of storage or transmission is completely secure, but we work to protect your information and to keep our safeguards current.

9. Data breaches

If a data breach occurs that is likely to result in significant harm to affected individuals, or that meets the notification threshold under the PDPA, we will notify the Personal Data Protection Commission and affected individuals as required by law.

10. Your rights: access and correction

You may ask us for access to the personal data we hold about you, and ask us to correct anything inaccurate or out of date. We may need to verify your identity first, and there may be a reasonable fee for an access request as permitted by the PDPA. Please contact us using the details below.

11. Cookies

The site uses cookies and similar technologies to operate, to remember your preferences and to understand how the site is used. You can manage cookies through your browser settings; disabling some cookies may affect how the site works.

12. Changes to this policy

We may review and update this policy from time to time. The current version is always published here with its "last updated" date. Your continued use of the site after an update constitutes acceptance of the change.

13. Contact us and our Data Protection Officer

For any question, request or complaint about your personal data, or to reach our Data Protection Officer, please contact:

RosesAreDark (Goetia Pte. Ltd.) Data Protection Officer 60 Paya Lebar Road, #07-54, Paya Lebar Square, Singapore 409051 Email: [email protected]