Privacy Policy and Personal Information Collection Statement
Effective date: 26-August 2026
Last updated: 26-August 2026
Seoul Aesthetic respects your privacy. This Privacy Policy and Personal Information Collection Statement (“Policy“) explains how Lucky 27 Limited, trading as Seoul Aesthetic and operating Seoul Aesthetic Central at Unit A, UG/F, Wilson House, 19–27 Wyndham Street, Central, Hong Kong (“Seoul Aesthetic”, “we”, “us” or “our”), collects, holds, uses, discloses, transfers and protects Personal Data.
“Personal Data” means any data relating directly or indirectly to you (the “data subject”), from which it is practicable for your identity to be ascertained, and which exists in a form in which access to or processing of the data is practicable. This may include, but is not limited to, names, contact details (including telephone numbers, WhatsApp numbers and email addresses), identification numbers, location data, online identifiers, and any other information that can be used to identify you.
For the purposes of the Hong Kong Personal Data (Privacy) Ordinance (Cap. 486) (“PDPO“), Seoul Aesthetic is the data user in respect of the Personal Data covered by this Policy.
1.Scope of this Policy
This Policy applies to personal information collected through https://seoulaesthetic.com, our appointment and enquiry channels, WhatsApp and other communications with us, and our social-media pages. It does not apply to third-party websites, platforms or services that we do not control. Their privacy practices are governed by their own notices.
If you provide Personal Data about another person, you must ensure that you have the authority to do so and that the person has received, or been advised of, this Policy.
2.Personal Data We Collect
The Personal Data that we collect depends on how you interact with us. We collect only information that is reasonably necessary for the purposes described below.
| Interaction | Categories of Personal Data that may be collected |
| Booking or enquiry | First name, last name, WhatsApp number, email address, treatment interest, requested visit date, enquiry content, and marketing preference. |
| Communications | Contact details and the contents of your messages, including messages sent through email, WhatsApp, telephone, social-media messaging or other channels. Please do not send unnecessary health, identification or payment information through unsecured channels. |
| Website use | IP address, browser and device information, operating system, language preferences, pages viewed, approximate location derived from IP address, referral source, interaction and cookie identifiers, and technical logs. |
| In-person services | Information that you provide to us in connection with a consultation, booking, service or customer-support request. Any clinical or treatment information will be handled under the applicable client, clinical and professional records practices in addition to this Policy. |
Some fields in our booking or enquiry form are marked as mandatory. You are not required to provide Personal Data to us. However, if you do not provide information that is necessary for an appointment, enquiry or other requested service, we may be unable to process the request or provide that service.
3. Purposes for Using Personal Data
We may use your Personal Data for the following purposes:
| Purpose | Examples |
| To provide requested services | Responding to enquiries; scheduling, confirming, changing or cancelling an appointment; identifying the treatment or service you are interested in; and communicating important information about a booking or visit. |
| To operate and improve our business | Managing customer-service interactions, maintaining records, training staff, resolving concerns, administering our website, preventing misuse and protecting our systems. |
| To understand website performance | Measuring traffic and interactions, diagnosing technical problems, improving website content and user experience, and assessing campaign performance. |
| To meet legal and operational obligations | Maintaining records required or permitted by law, responding to lawful requests, enforcing our rights, and handling complaints or disputes. |
| Direct marketing, only where permitted | Sending information about Seoul Aesthetic’s treatments, products, services, offers and events through the channels described in Section 4. |
We will not use your Personal Data for a new purpose that is unrelated to the purpose for which it was collected unless permitted by law or we have obtained your required consent.
4.Direct Marketing and Your Choices
We may wish to use your name, telephone or WhatsApp number, email address, treatment interests, booking preferences and communication preferences to send direct-marketing communications about Seoul Aesthetic’s aesthetic treatments, products, services, offers and events by WhatsApp, email, SMS and telephone.
We will not use your Personal Data for direct marketing unless we have:
- informed you of our intention to use your Personal Data for direct marketing and that we may not do so without your consent;
- specified the kind of Personal Data to be used (name, WhatsApp or telephone number, email address, treatment interests, booking preferences and communication preferences); and
- provided the required notice and obtained your informed consent or indication of no objection in accordance with applicable law.
We do not make bookings or service conditional on agreeing to receive marketing communications.
You may withdraw your consent, or ask us to stop direct marketing at any time without charge by using the unsubscribe option in a message or contacting us at [privacy email address]. We will process your request as soon as reasonably practicable. Please note that we may still send non-marketing messages that are necessary to administer your booking, service or account.
5. How We Share Personal Data
We may disclose Personal Data only where reasonably necessary for the purposes in this Policy to the following categories of recipients:
| Recipient category | Why data may be shared |
| Authorised Seoul Aesthetic personnel | To manage enquiries, bookings, customer service, consultations, services, complaints and administration. |
| Service providers | Website hosting, form and booking support, cloud storage, IT support, analytics, communications, customer-relationship management, email, payment and professional advisers. These providers may process Personal Data on our instructions. |
| Advertising, analytics and social-media providers | To measure website use and advertising performance, where applicable and subject to your settings or consent where required. Our website may use Google technologies and Meta technologies, including the Meta Pixel. |
| Third-party services you choose to use | For example, WhatsApp, Facebook, Instagram or Google Maps. Those services may collect or process your Personal Data under their own privacy policies. |
| Authorities and other lawful recipients | Where required or permitted by law, court order, regulator request, or to establish, exercise or defend legal claims; protect safety; prevent fraud; or protect our rights and property. |
We do not sell or license Personal Data. We will not provide Personal Data to an independent third party for that third party’s direct-marketing purposes unless we have given the required notice and obtained the consent required by law.
6.International Transfers
Our service providers or systems may store or process Personal Data in Hong Kong or in other locations where they or their infrastructure operate. When we transfer Personal Data outside Hong Kong, we will take all reasonably practicable steps to ensure that the recipient handles the data in a manner consistent with this Policy and applicable law, including by imposing contractual or other safeguards on the recipient where appropriate.
7.Cookies, Analytics and Similar Technologies
We use cookies and similar technologies to operate and secure our website, remember settings, understand traffic and interactions, and measure the effectiveness of advertising. Cookies are small text files stored on your browser or device. We may use the following categories:
| Category | Purpose |
| Strictly necessary cookies | Support website operation, security and basic functionality. |
| Preference cookies | Remember choices such as language or display settings. |
| Analytics cookies | Help us understand how visitors use our website and improve its performance. |
| Advertising cookies | Help measure advertising activity, create audiences and show or limit relevant advertising. |
Our website may use third-party technologies, including Google tags and Meta Pixel, for analytics and advertising measurement. These providers may use cookie identifiers and related online information in accordance with their own privacy notices. Where applicable law requires consent before non-essential cookies or similar technologies are placed or accessed, we will seek that consent before enabling them.
You can control cookies through your browser settings and, where available, our cookie-preference tool. Disabling some cookies may affect website functionality. You may also manage advertising preferences directly through the relevant third-party provider.
8.Retention
We keep Personal Data only for as long as reasonably necessary for the purposes for which it was collected, including to provide services, meet legal, accounting, professional or reporting obligations, resolve disputes and enforce agreements. The retention period depends on the nature of the record and our legal or operational obligations. We will take reasonably practicable steps to erase or anonymise Personal Data that is no longer required, unless retention is required or permitted by law.
We maintain separate retention schedules for booking, enquiry, marketing, financial and any client or clinical records. Booking and enquiry records are retained for [number] years after the last appointment or enquiry. Clinical or treatment records are retained for [7] years in accordance with applicable professional and legal requirements. Marketing records are retained until you withdraw consent or opt out, subject to a reasonable period required to give effect to that request and maintain suppression records.
9. Security
We take all reasonably practicable steps to protect Personal Data from unauthorised or accidental access, processing, erasure, loss or use. Our measures may include role-based access controls, staff confidentiality obligations, access management, secure service-provider arrangements, backup and security-monitoring practices. No internet transmission or storage system is completely secure; please use care when sending information to us through electronic channels.
10. Your Rights and How to Make a Request
Subject to applicable law, you may request access to and correction of Personal Data that we hold about you. You may also contact us with questions about our data practices or to withdraw direct-marketing consent.
Please send your request in writing to:
Privacy Contact / Data Protection Officer
Lucky 27 Limited
Unit A, UG/F, Wilson House, 19–27 Wyndham Street, Central, Hong Kong
Email: [privacy email address]
Telephone: +852 9696 8585
To protect your privacy, we may ask for information to verify your identity and authority before acting on a request. We will respond within the period required by applicable law after receiving your request and all required information, unless an extension applies under the applicable law. We may charge a reasonable fee for a data-access request where permitted by law, but we will tell you about any applicable fee before processing the request.
11.Children and Minors
Our website is not intended to collect Personal Data from minors (i.e. persons under the age of 18) without appropriate authority. If you are under the age at which you can lawfully provide consent in your location, please ask a parent or legal guardian to contact us before providing Personal Data. If you believe that a minor has provided Personal Data to us without appropriate authority, please contact us and we will take appropriate steps.
12.Changes to This Policy
We may update this Policy from time to time to reflect changes to our services, technology, legal requirements or data practices. We will post the updated version on our website and change the “Last updated” date. Where required by law, we will provide additional notice or obtain consent for material changes.
13.Contact Us
If you have a privacy question, concern or complaint, please contact us using the details in Section 10. We will review and respond as soon as reasonably practicable.
