Zdaro Privacy Notice
Last updated: 18 October 2026
1. About This Notice
1.1 This Privacy Notice explains how Strategic Healthcare Pte. Ltd. (UEN 202643051G), 68 Circular Road, #02-01, Singapore 049422 ("Zdaro", "we", "us"), collects, uses, discloses and protects personal data when you use zdaro.com (the "Website") and our booking services, and the choices you have.
1.2 We handle personal data in accordance with the Singapore Personal Data Protection Act 2012 and other applicable laws.
1.3 Terms such as "Partner", "Customer", "Voucher", "Prepaid Booking" and "Pay-at-Partner Booking" have the meanings given in our Terms and Conditions.
2. Personal Data We Collect
- Account and contact data: your name and date of birth; the WhatsApp number, Telegram account or email address you sign in with, and any others you add; if you sign in without a phone number, a contact phone number for the Partner; how you want to receive messages; and language.
- Customer and booking data: for each Customer — full name as in their passport or ID, date of birth, sex and relationship to you; the service address and any notes; the services booked, date and time; booking and Voucher details.
- Payment data: amounts, payment and refund status and transaction references. Card and account details are collected directly by our payment service providers; we do not store full card numbers.
- Data from Partners: whether a booking or Voucher was used and, for Pay-at-Partner Bookings, the amount paid to the Partner, including any additional payments.
- Communications: messages with our operators, and messages between you and Partners sent through Zdaro (see section 4).
- AI assistant chats: the text of your chats with the AI assistant (see section 5).
- Preferences and consents: marketing and cookie choices and other consents, with date and time.
- Technical and usage data: IP address, device and browser data, pages viewed and actions on the Website, cookie identifiers, sign-in session data and error reports.
Health information. The services booked for a Customer may reveal information about their health. We use it only to arrange, pay for and support the booking, and share it only with the Partner providing the service and our service providers. We never share it with advertising partners. Test results and other medical records are given to you directly by the Partner and do not pass through Zdaro.
Some data is required to make a booking. If you do not provide it, we may not be able to complete your booking.
3. How We Use Personal Data
We use personal data to:
- create and manage your account and sign you in with a one-time code sent via WhatsApp, Telegram or email;
- arrange bookings with Partners, issue Vouchers, take payments, make refunds and settle accounts with Partners;
- send service messages about your bookings via WhatsApp, Telegram or email;
- provide customer support, handle complaints and disputes and help you communicate with Partners;
- provide the AI assistant;
- send you marketing messages, only if you have agreed to receive them;
- understand how the Website is used and improve our services;
- measure and show our advertising on other websites and platforms, only with your cookie consent;
- protect the Website and payments against fraud, bots and abuse, and fix errors; and
- keep accounting and tax records, comply with the law and respond to lawful requests.
We do not sell your personal data.
4. How We Share Personal Data
Partners. For each booking, the Partner receives the Customer's name, date of birth and sex, the services booked, the date, time and address, any notes you add and the Voucher details, so it can provide the service and deliver results to you. Where needed for the service (for example, a visit to your address), we may also give the Partner your contact details, or a Zdaro relay address or number that forwards messages between you and the Partner. We may keep copies of messages sent through Zdaro for support and dispute purposes. Partners, which may include companies related to Zdaro, are independent organisations, and their own privacy policies apply to the data they hold.
Service providers. We use providers that process personal data on our behalf and under our instructions, including providers of: hosting and databases; messaging (WhatsApp, Telegram, email and one-time codes); payment services; AI services; analytics and advertising; security and bot protection; and IT, error monitoring and customer support tools.
Analytics and advertising partners. If we use analytics or advertising cookies, and only with your cookie consent, providers such as Google and Meta receive technical and usage data through cookies and similar technologies (see section 10). We do not give them your name, phone number, email address, booking details or the services you booked.
Others. Payment processors and financial institutions (for payments, refunds and fraud prevention); government authorities and law enforcement, where required by law or necessary to prevent fraud or other unlawful activity; our lawyers, accountants and auditors; and, if our business is reorganised or sold, the prospective buyer and its advisers.
5. AI Assistant
The AI assistant helps you search for and select Partner services. Using it is optional: you can find and book all services through the catalogue. The text of your chat is sent to our AI service providers to generate suggestions; your name, contact details and booking details are not sent. If you are signed in, your chat is linked to your account. Authorised staff may review chats to improve the assistant and our services. We do not use your chats for marketing, and our AI service providers may not use them to train their models. Please do not include personal data or details about your health in the chat.
6. International Transfers
Our Website and database are hosted mainly in Singapore. Personal data may be transferred to Partners in the country where the service is provided and to service providers in other countries, such as the United States. Where a destination does not provide protection comparable to Singapore law, we put appropriate safeguards in place, such as contractual protections.
7. Booking for Others and Minors
7.1 If you provide personal data about other people, you must ensure that they know you have done so and agree to our using it as described in this Notice.
7.2 You must be 18 or older to use the Website. If you book for a Customer under 18, you must be their parent or legal guardian.
8. Your Choices and Rights
8.1 Marketing. We send marketing messages via WhatsApp, Telegram or email only if you have agreed to receive them. You can opt out at any time by replying "STOP", using the unsubscribe link, changing your settings or contacting us. You will still receive service messages about your bookings.
8.2 Cookies. You can change your cookie choices at any time in Cookie settings at the bottom of the Website.
8.3 Withdrawing consent. You may withdraw any consent you have given, without affecting processing carried out before the withdrawal. If you withdraw consent needed for a booking, we may not be able to complete it.
8.4 Access and correction. You may ask for access to your personal data, information about how it has been used or disclosed in the past year, and correction of any errors.
8.5 Account deletion. You may delete your account in your profile at any time, except while a booking is in progress. We then delete or anonymise your personal data, except records we must keep by law (see section 9).
8.6 How to contact us. Contact our Data Protection Officer at support@zdaro.com, with "Personal data" in the subject line. To confirm your identity, we may ask you to write to us from the WhatsApp number, Telegram account or email address linked to your account, or to confirm details of your booking. We will never ask you for a one-time sign-in code. We will respond within 30 days, or as required by law, and tell you if we need more time.
8.7 Complaints. If you are not satisfied with our response, you may complain to the Personal Data Protection Commission of Singapore or the data protection authority in your country.
9. How Long We Keep Personal Data
We keep personal data only for as long as needed for the purposes in this Notice or for legal or business purposes:
| Data | Retention |
|---|---|
| Bookings, payments, refunds and related Customer data | 5 years after the booking |
| Messages with our operators and messages sent through Zdaro | 2 years, or longer where they relate to a booking, payment or dispute (kept with the booking records) |
| AI assistant chats | 90 days, then deleted; we may keep anonymised statistics about searches that do not identify you |
| Consents | As long as the consent applies, and as needed to show it was given |
| Account and contact data | Until you delete your account |
10. Cookies and Similar Technologies
We always use essential cookies. We may also use analytics and advertising cookies, but only with your consent.
| Type | Examples | When used |
|---|---|---|
| Essential | Sign-in session, language, AI chat session, cookie choices, bot protection (Cloudflare Turnstile) | Always — the Website needs them to work |
| Analytics | Google Analytics | Only with your consent |
| Advertising | Meta Pixel, Google Ads | Only with your consent — to measure our ads and show them to people who have visited the Website |
When you first visit the Website, we ask for your cookie choices. You can also set your browser to refuse cookies, but some parts of the Website may then not work.
11. Security
We take appropriate administrative, technical and physical measures to protect personal data, including encryption in transit, restricted staff access and a log of staff actions on bookings. If a data breach affects your personal data, we will notify you and the relevant authorities as required by law.
12. Updates to This Notice
We may update this Notice from time to time. We will post the updated version with a new "Last updated" date and tell you about significant changes on the Website or by message.
13. Language
If this Notice is translated into other languages, the translation is provided for convenience and the English version prevails in the event of any inconsistency.
14. Contact Us
Data Protection Officer
Strategic Healthcare Pte. Ltd., 68 Circular Road, #02-01, Singapore 049422
Email: support@zdaro.com