Skin&Beam("Company" or "we") respects personal data and is committed to fully implementing and complying with the data protection principles and all relevant provisions of the Personal Data (Privacy) Ordinance, Cap. 486 ("Ordinance"). This policy applies to all personal data of individuals collected, used and held by the Company.
1.1 For the purpose of providing services, the Company collects, uses and retains your (i) English name, (ii) Chinese name, (iii) date of birth (YY/MM/DD) and (iv) gender.
1.2 The Company collects, uses and retains (i) mobile phone number, (ii) email address and/or (iii) address for the purpose of sending contact and promotional information (after obtaining consent).
1.3 If you request a refund via credit card or wish to transfer the refund amount to a bank account, the Company collects credit card number or bank account number for refund purposes. Except for the above purposes, the Company does not collect credit card numbers and/or bank account numbers.
1.4 The Company's registered medical staff may collect, use and retain your skin condition and related medical records for the purpose of providing appropriate treatment in compliance with the regulations, laws and rules applicable to their profession.
1.5 You may voluntarily provide personal information to us.
(i) English name, Chinese name, mobile phone number and gender are required to use the services. If you do not provide the personal information specified in this clause 1.5(i), you cannot receive any services from us.
(ii) Credit card number or bank account number is required if you request a refund via credit card or wish to transfer the refund amount to a bank account. If you do not provide the personal information specified in this clause 1.5(ii), we cannot process your refund request.
(iii) Providing email address and address is optional. If you do not provide an email address, you cannot receive emails from us, and if you do not provide an address, you cannot receive mail.
1.6 We do not collect any other personal information besides the above information.
2.1 We collect, use and retain your personal data for the following purposes:
(a) Identification and verification: To process requests for access, correction and deletion of personal data and to identify yourself to ensure appropriate medical procedures are available to the right person;
(b) Age verification: To confirm that you are over 16 years old to enter into contracts with us and over 18 years old to receive certain high-risk treatments and medical aesthetic procedures from us;
(c) Medical purposes: To provide certain high-risk treatments and medical aesthetic procedures;
(d) Service provision: To provide you with appropriate services;
(e) Booking: To make procedure appointments;
(f) Contact: To contact you regarding the Company's services;
(g) Refund: To refund via credit card or bank account (if applicable);
(h) Promotion: For birthday offers and/or gifts;
(i) Direct marketing: To use personal data for direct marketing purposes and share marketing information after obtaining consent.
(j) Statistics: When performing calculations and data analysis, such analysis will include anonymous data for our reference as well as improve our service quality and quality service;
2.2 If you are under 18 years old, please obtain prior consent from your parents or legal guardian before providing personal information.
3.1 Apart from statutory requirements and/or the purposes specified above, personal information we collect about you will not be transferred or disclosed to other parties without your prior approval.
3.2 If you request a refund via credit card, we will collect your credit card number (and refund-related information (i.e., transaction date, transaction amount, authorization code and refund amount) from you and transfer it to the credit card payment solution service provider to process the refund. We will obtain your written consent before doing so.
4.1 We will retain all your personal information as long as necessary to fulfill the purposes for which it was collected and to comply with legal requirements.
4.2 If you wish to erase personal data from our electronic database, please contact us.
4.3 Our information and data are stored and maintained in our electronic database, facilities, servers and backup servers located outside your country. You expressly consent to the transfer, storage, and maintenance of all our information and data in our electronic database, facilities, servers and backup servers located outside your country for the purposes mentioned in clause 2, which may not be the same as or as legally required by the applicable laws and regulations of your country.
To ensure the accuracy of your personal information held by the Company, especially contact details, you may receive our confirmation or verification request. You can contact us at any time for correction or changes to personal information.
6.1 We have established security measures and monitoring procedures to prevent unauthorized or accidental access, processing, deletion, loss or use of data. All employees who have access to data are ensured to comply with data protection requirements.
6.2 Our security measures are as follows:
(a) Advanced encryption technology is used to protect the security of personal data (name, email address, phone number, etc.) during transmission. Our SSL (SecureSocketLayer) system prevents your data from being intercepted or accessed by unauthorized third parties during transmission;
(b) Only employees trained in strict privacy guidelines and procedures can access or process personal information. Such employees are responsible for non-compliance with relevant obligations. and
(c) Security systems will be regularly reviewed.
7.1 We have implemented all reasonably practicable procedures, measures, and steps to maintain the security of your personal information. However, transmission over the internet or electronic storage methods are not perfectly secure. We cannot guarantee absolute security.
8.1 After clicking on advertisements or hyperlink buttons on the Company's website (https://skinbeam.hk/) and/or mobile application (SKIN&BEAM) ("Platform"), you may have left the Platform and entered the websites of our advertisers, content providers, suppliers, affiliated companies or business partners. Your visits to these third-party websites are not protected by this policy.
8.2 These third-party websites are not owned or controlled by the Company. We have not authorized them to collect any personal information from you. Therefore, we are not responsible for any data leakage or loss caused by the practices or policies of these websites. If you have any inquiries or questions about the privacy practices or policies of these websites, please contact the administrator or owner of the respective website directly.
9.1 We may use "cookies" to improve internet services and enhance the online environment. Cookies are small files automatically stored in the computer's web browser that can be retrieved from the Platform. No personal information is collected from users while cookies are in use. You can disable cookies by changing your web browser settings. Cookies cannot be used to run programs or deliver viruses to your computer and/or device.
10.1 We may update or modify this policy in the future if necessary. The modified policy will be available on the website and at the center.
11.1 In case of any difference or inconsistency between the Chinese version and the English version of this policy, the English version shall prevail.
12.1 Under the Ordinance, you have the right to request access to and correction of your personal information related to the Platform. If you wish to exercise these rights, please contact us.
13.1 If you have any requests (including opting out of future direct promotional and marketing information), inquiries or comments regarding our privacy policy, please send an email to personaldata@skinbeam.hk. Under normal circumstances, requests or inquiries will be processed within 14 business days after receiving the same content and confirming your identity.
Last updated: August 9, 2023
