Terms & Condition
We are committed to maintaining the accuracy, confidentiality, and security of your personally identifiable information (Personal Information). As part of this commitment, our privacy policy governs our actions as they relate to the collection, use and disclosure of Personal Information. Our privacy policy is based upon the values set by the Canadian Standards Associations Model Code for the Protection of Personal Information and Canadas Personal Information Protection and Electronic Documents Act.
Introduction
We are responsible for maintaining and protecting the Personal Information under our control. We have designated an individual or individuals who is/are responsible for compliance with our privacy policy.
Identifying Purposes
We collect, use and disclose Personal Information to provide you with the product or service you have requested and to offer you additional products and services we believe you might be interested in. The purposes for which we collect Personal Information will be identified before or at the time we collect the information. In certain circumstances, the purposes for which information is collected may be clear, and consent may be implied, such as where your name, address and payment information is provided as part of the order process.
Consent
Knowledge and consent are required for the collection, use or disclosure of Personal Information except where required or permitted by law. Providing us with your Personal Information is always your choice. However, your decision not to provide certain information may limit our ability to provide you with our products or services. We will not require you to consent to the collection, use, or disclosure of information as a condition to the supply of a product or service, except as required to be able to supply the product or service.
Limiting Collection
The Personal Information collected will be limited to those details necessary for the purposes identified by us. With your consent, we may collect Personal Information from you in person, over the telephone or by corresponding with you via mail, facsimile, or the Internet.
Limiting Use, Disclosure and Retention
Personal Information may only be used or disclosed for the purpose for which it was collected unless you have otherwise consented, or when it is required or permitted by law. Personal Information will only be retained for the period of time required to fulfill the purpose for which we collected it or as may be required by law. We share Personal Information only with service providers acting on our behalf — cloud hosting and infrastructure providers, payment processors, and messaging or email delivery providers — and with authorities where required by law. We do not sell your Personal Information.
Accuracy
Personal Information will be maintained in as accurate, complete and up-to-date form as is necessary to fulfill the purposes for which it is to be used.
Safeguarding Customer Information
Personal Information will be protected by security safeguards that are appropriate to the sensitivity level of the information. We take all reasonable precautions to protect your Personal Information from any loss or unauthorized use, access or disclosure.
Openness
We will make information available to you about our policies and practices with respect to the management of your Personal Information.
Customer Access
Upon request, you will be informed of the existence, use and disclosure of your Personal Information, and will be given access to it. You may verify the accuracy and completeness of your Personal Information, and may request that it be amended, if appropriate. However, in certain circumstances permitted by law, we will not disclose certain information to you. For example, we may not disclose information relating to you if other individuals are referenced or if there are legal, security or commercial proprietary restrictions.
Handling Customer Complaints and Suggestions
You may direct any questions or enquiries with respect to our privacy policy or our practices by contacting us at info@hayyu.id. PT. Ruvi Rizqy Berkah (Hayyu Skin Clinic), Malang, Indonesia, is the data controller responsible for the Personal Information described in this policy.
Google User Data
If you sign in with Google to use the Event feature on our website, we access your basic Google profile (name, email address, profile picture) to authenticate you, and write access to your Google Calendar to create, update, and cancel entries for the events you book with us. We do not read or analyse calendar entries that Hayyu did not create, and we do not request access to any other Google service. This data is shared only with our hosting and infrastructure providers acting on our instructions, or where required by law; it is never sold or transferred to data brokers. It is transmitted over HTTPS, stored encrypted, and retained only while your Google Account stays connected. You can disconnect at any time at myaccount.google.com/permissions, or email info@hayyu.id to request deletion; we delete the stored tokens and related Google user data within 30 days. Our use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements: we do not use it for advertising, credit decisions, or to train generalised artificial intelligence or machine learning models. Our mobile applications do not use Google sign-in.
Last updated: 25 September 2026. We may update this privacy policy from time to time; material changes will be published on this page.
