Privacy Policy

Last Updated: May 2026

The Skin Oracle (“we,” “us,” or “our”) respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, store, disclose, and protect your personal information when you visit our website, book appointments, or use our services at The Skin Oracle.

Contact Information

The Skin Oracle
71 Des Voeux Road Central
Central, Hong Kong

Email: info@theskinoracle.com

1. Information We Collect

We may collect and process the following categories of personal data:

Identity Information

• Full name

• Date of birth

• Gender

Contact Information

• Email address

• Telephone number

• Postal or billing address

Consultation and Health Information

To provide suitable skincare and aesthetic services, we may collect information voluntarily provided by you, including:

• Skin concerns and treatment goals

• Skincare history

• Allergies and sensitivities

• Relevant health information disclosed during consultations

Appointment and Transaction Information

• Appointment bookings and attendance history

• Treatment records

• Purchase history

• Payment transaction details

Note: We do not store full payment card details.

Technical Information

When you use our website, we may automatically collect:

• IP address

• Browser type and version

• Device information

• Operating system

• Website usage data

Communication Information

• Email correspondence

• Telephone inquiries

• Social media messages

• Customer service communications

2. How We Use Your Information

We use your personal information for the following purposes:

Service Delivery

• Conduct consultations

• Assess suitability for treatments

• Provide skincare and aesthetic services

• Maintain treatment records

Appointment Management

• Schedule and manage appointments

• Send booking confirmations

• Issue appointment reminders

• Provide post-treatment instructions and aftercare support

Customer Support

• Respond to inquiries and requests

• Address concerns and complaints

• Improve customer service

Business Improvement

• Analyze website performance and customer feedback

• Improve our services, treatments, and website functionality

Legal and Regulatory Compliance

• Comply with applicable laws and regulations

• Maintain business and financial records

Marketing Communications

With your consent, we may send:

• Promotional offers

• Newsletters

• Information about new treatments and services

• Special events and updates

You may withdraw your consent or unsubscribe from marketing communications at any time.

3. Legal Basis for Processing Personal Data

We process personal data in accordance with the Personal Data (Privacy) Ordinance (Cap. 486) of Hong Kong (“PDPO”).

Our processing activities are based on:

Consent

Where you have provided consent, including for marketing communications.

Contractual Necessity

Where processing is necessary to provide services you have requested, including consultations, bookings, and treatments.

Legal Obligations

Where processing is required by applicable laws, regulations, or governmental authorities.

Legitimate Business Interests

Where processing is necessary for:

• Business administration

• Website management

• Service improvement

• Fraud prevention

• Security monitoring

Provided that such interests do not override your rights and freedoms.

4. Data Security and Storage

We take reasonable and appropriate measures to protect your personal information from unauthorized access, misuse, disclosure, alteration, or destruction.

Security measures may include:

• Encrypted digital storage systems

• Password-protected databases

• Restricted staff access on a need-to-know basis

• Regular security reviews and updates

• Staff confidentiality and privacy training

Personal data is stored securely and retained only for as long as necessary for the purposes described in this Privacy Policy.

Where personal data is transferred outside Hong Kong, we take reasonable steps to ensure an equivalent level of protection is maintained.

5. Disclosure of Personal Data

We may share personal information with trusted third-party service providers where necessary to operate our business, including:

Appointment and Booking Providers

To facilitate scheduling and appointment management.

Payment Service Providers

To securely process payments and transactions.

IT and Hosting Providers

To provide website hosting, data storage, email services, and technical support.

Professional Advisors

Including legal, accounting, and compliance advisors where necessary.

All third parties are required to process personal data securely, confidentially, and only for the purposes specified by us.

We do not sell, rent, or trade your personal information to third parties.

6. Data Retention

We retain personal information only for as long as reasonably necessary to fulfil the purposes for which it was collected, including legal, accounting, regulatory, and operational requirements.

Typical retention periods include:

• Consultation and treatment records: Up to 7 years after your last visit

• Financial and transaction records: Up to 7 years

• Marketing records: Until consent is withdrawn or no longer required

• Website analytics data: In accordance with applicable service provider retention schedules

Retention periods may be extended where required by law or to resolve disputes.

7. Your Privacy Rights

Subject to applicable laws and regulations, you may have the right to:

Access

Request a copy of the personal data we hold about you.

Correction

Request correction of inaccurate, incomplete, or outdated information.

Withdrawal of Consent

Withdraw consent for marketing communications at any time.

Deletion

Request deletion of personal data where retention is no longer necessary, subject to legal obligations.

Data Transfer

Request transfer of your information where technically feasible and legally permitted.

To exercise any of these rights, please contact us using the details provided below.

We will respond to requests within the timeframe required under applicable Hong Kong law.

8. Cookies and Website Tracking

Our website uses cookies and similar technologies to enhance functionality, analyze website traffic, and improve user experience.

For more information about our use of cookies and how to manage your preferences, please refer to our Cookie Policy.

9. Third-Party Websites

Our website may contain links to external websites operated by third parties.

We are not responsible for the privacy practices, content, or security of third-party websites. We encourage users to review the privacy policies of any websites they visit.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or business operations.

Any updates will be published on this page together with a revised “Last Updated” date.

We encourage you to review this Privacy Policy periodically.

11. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our handling of personal data, please contact us:

The Skin Oracle
71 Des Voeux Road Central
Central, Hong Kong

Email: info@theskinoracle.com