Privacy Policy
Effective Date: 3 June 2026 | Last Updated: 3 June 2026
Jasmine Fitbelly Ltd. ("we", "us", "our"), a company incorporated in the Hong Kong Special Administrative Region, is committed to protecting your personal data. This Privacy Policy explains how we collect, use, store, and disclose personal data in compliance with the Personal Data (Privacy) Ordinance (Cap. 486) ("PDPO") of Hong Kong.
By using our website (jasminefitbelly.com), contacting us via WhatsApp, or using any of our services, you acknowledge that you have read and understood this Privacy Policy.
1. Data Controller
The data controller responsible for your personal data is:
- Entity: Jasmine Fitbelly Ltd.
- Jurisdiction: Hong Kong Special Administrative Region
- Email: [email protected]
- WhatsApp: +852 5398 6687
2. Personal Data We Collect
We collect the following categories of personal data:
2.1 Data You Provide Directly
| Data Type | Purpose |
|---|---|
| Full name | Service booking, identification |
| Phone number / WhatsApp contact | Appointment scheduling, service communication |
| Residential address | In-home service delivery |
| Delivery date and method (vaginal / C-section) | Treatment assessment and planning |
| Relevant medical history (diastasis recti measurements, wound healing status) | Clinical assessment, treatment customisation, safety |
| Recovery progress photos (with your explicit consent) | Documenting treatment progress |
| Payment information | Processing payment via FPS, PayMe, bank transfer, or credit card |
2.2 Data Collected Automatically
| Data Type | Collection Method | Purpose |
|---|---|---|
| IP address, browser type, device type | Google Analytics (GA4) | Website analytics, performance improvement |
| Pages visited, time on site, referral source | Google Analytics (GA4) | Understanding visitor behaviour |
| Cookie identifiers | Google Tag Manager, GA4 | Analytics, functionality |
2.3 Data We Do NOT Collect
- We do not collect HKID numbers, passport numbers, or government-issued identity document numbers.
- We do not collect financial account details (bank account numbers, credit card numbers are processed by third-party payment providers and never stored by us).
- We do not knowingly collect data from persons under the age of 18.
3. Purpose and Legal Basis for Processing
Under the PDPO, personal data shall not be collected unless it is necessary for a lawful purpose directly related to our function. We collect and use your data for the following purposes:
- Service Delivery: To schedule, customise, and deliver postpartum massage and belly binding treatments at your home.
- Clinical Assessment: To assess your physical condition (including diastasis recti measurement, wound healing status) and ensure treatment is safe and appropriate for you.
- Communication: To respond to your enquiries, send appointment confirmations, and provide aftercare guidance via WhatsApp or email.
- Payment Processing: To process payments and issue receipts.
- Treatment Records: To maintain clinical records of your treatment progress, as required by professional standards.
- Website Analytics: To analyse how visitors use our website and improve content and user experience.
- Legal Compliance: To comply with applicable laws, regulations, and professional obligations in Hong Kong.
Health Data: Information about your delivery, medical history, and physical condition is classified as sensitive health data. We collect this data only with your knowledge and consent, and solely for the purpose of providing safe and effective treatment. This data is handled with the highest level of confidentiality.
4. How We Share Your Data
We do not sell, rent, or trade your personal data. We may share your data with the following third parties only as necessary:
| Third Party | Purpose | Data Shared |
|---|---|---|
| Google LLC (Analytics, Tag Manager) | Website analytics | Anonymised browsing data, cookie identifiers |
| Meta Platforms (WhatsApp) | Client communication | Messages you send us via WhatsApp (subject to WhatsApp's own privacy policy) |
| Meta Platforms (Instagram) | Social media feed display | No personal data shared; publicly available posts only |
| Payment processors (FPS, PayMe, bank) | Payment processing | Transaction amount; your bank processes the payment |
| Insurance provider | Professional indemnity claims (if applicable) | Only if a claim arises, limited to relevant facts |
All third parties are required to handle your data in accordance with applicable privacy laws. Where data is transferred outside of Hong Kong (e.g., Google servers), we ensure that adequate protections are in place as required by PDPO Data Protection Principle 3.
5. Cookies and Tracking Technologies
Our website uses cookies and similar technologies:
| Cookie / Technology | Type | Purpose | Duration |
|---|---|---|---|
| Google Analytics (_ga, _ga_*) | Analytics | Distinguish unique visitors, track page views | Up to 2 years |
| Google Tag Manager | Functional | Manage analytics and marketing tags | Session |
Managing Cookies
You can control or delete cookies through your browser settings:
- Chrome: Settings > Privacy and Security > Cookies
- Safari: Preferences > Privacy
- Firefox: Settings > Privacy & Security
- Edge: Settings > Cookies and Site Permissions
Disabling cookies may affect certain features of our website but will not affect our ability to provide in-home services.
6. Data Retention
We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected:
| Data Type | Retention Period |
|---|---|
| Client records (name, contact, treatment history) | 7 years from the last treatment date, as required by professional standards |
| Recovery progress photos | Deleted within 30 days of treatment completion, unless you consent to longer retention |
| Payment records | 7 years, as required by Hong Kong tax regulations (Inland Revenue Ordinance, Cap. 112) |
| WhatsApp messages | Duration of the client relationship plus 12 months |
| Website analytics data | 26 months (Google Analytics default) |
After the retention period, personal data is securely deleted or anonymised.
7. Data Security
We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or misuse, in accordance with PDPO Data Protection Principle 4:
- Client records are stored in encrypted, password-protected systems.
- Recovery progress photos are stored on encrypted devices and are never uploaded to cloud storage without your explicit consent.
- Our website uses HTTPS (TLS 1.3) encryption for all data transmission.
- Access to personal data is limited to authorised personnel only.
- WhatsApp communications are protected by end-to-end encryption.
8. Your Rights Under the PDPO
Under the Personal Data (Privacy) Ordinance, you have the following rights:
8.1 Right of Access (Section 18)
You have the right to request access to the personal data we hold about you. We will respond to your request within 40 days of receiving it. We may charge a reasonable fee to cover administrative costs.
8.2 Right of Correction (Section 22)
You have the right to request correction of any personal data that is inaccurate. We will make the correction within 40 days of receiving your request.
8.3 Right to Withdraw Consent
Where we process your data based on consent (e.g., recovery progress photos, marketing communications), you may withdraw your consent at any time by contacting us. Withdrawal does not affect the lawfulness of processing before withdrawal.
8.4 How to Exercise Your Rights
To exercise any of these rights, please contact us at:
- Email: [email protected]
- WhatsApp: +852 5398 6687
We may require you to verify your identity before processing your request.
9. Children's Privacy
Our services are intended for adults (persons aged 18 and above). We do not knowingly collect personal data from children. If we become aware that we have inadvertently collected data from a person under 18, we will promptly delete it.
10. Cross-Border Data Transfer
Some of our service providers (e.g., Google LLC) may process data outside of Hong Kong. In such cases, we take reasonable steps to ensure that the recipient provides a standard of protection comparable to the PDPO, in accordance with Data Protection Principle 3.
11. Complaints
If you believe your data privacy rights have been violated, you may:
- Contact us directly at [email protected] and we will investigate promptly.
- Lodge a complaint with the Office of the Privacy Commissioner for Personal Data (PCPD):
- Website: www.pcpd.org.hk
- Hotline: (852) 2827 2827
- Address: Unit 1303, 13/F, Dah Sing Financial Centre, 248 Queen's Road East, Wanchai, Hong Kong
12. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. The updated version will be posted on this page with a revised "Last Updated" date. We encourage you to review this page periodically. Material changes will be communicated via our website or WhatsApp.
13. Contact Us
For any questions or requests regarding this Privacy Policy or your personal data, please contact:
- Jasmine Fitbelly Ltd.
- Email: [email protected]
- WhatsApp: +852 5398 6687