個人資料（私隱）政策聲明
最後更新：2026年6月25日
Good Looks Limited（簡稱「本公司」）營運一個精選髮型師目錄及 AI 髮型預覽工具，可透過 goodlooks.hk（簡稱「平台」）存取。本公司尊重私隱，並承諾完全遵守香港法例第486章《個人資料（私隱）條例》（簡稱「私隱條例」）的規定以保護個人資料。
本公司確保其員工對用戶透過該平台、其子域以及由本公司營運或開發的任何其他網站、媒體平台或應用程式（以下統稱「渠道」）提交的所有個人資訊和數據，遵守最嚴格的安全和保密標準。此外，未經渠道的相關用戶（無論註冊與否）（以下簡稱「用戶」）事先同意，本公司不會向任何第三方披露此等資訊，惟下述第4條中列出的獲授權實體除外。除非另有定義，否則本私隱政策中使用的術語應與「條款及細則」中使用的術語具有相同的含義。
本私隱政策解釋了本公司收集哪些數據、本公司如何使用這些數據、數據儲存在哪裡，以及用戶對其個人資訊擁有的權利。
1. 本公司收集的數據
為提供服務，本公司收集以下個人資料（以下統稱「個人資料」）：
- 帳戶資訊：當用戶註冊時，本公司會收集用戶的電郵地址。如果用戶選擇使用Google帳戶登入，本公司會收集用戶的 Google 個人檔案名稱和頭像。
- 用戶生成內容與 AI 數據：本公司收集並儲存用戶上傳至 /ai-hairstyle AI 預覽工具的自拍照和目標髮型圖片。本公司亦會儲存用戶在登入期間生成的髮型和 AI 生成歷史記錄。這些媒體檔案安全地儲存在本公司的私人儲存空間（storage bucket）中，並直接與用戶的帳戶綁定。
- 意向請求：如果用戶提交意向請求以聯絡髮型師，本公司會收集用戶的聯絡方式及用戶寫下的任何訊息，以便本公司的團隊將其轉發給相關的專業人士。
2. 來自 Meta Platform的第三方內容
本公司的精選目錄包含連結至公開 Meta Platform帖文的髮型。
- (a) 嵌入與快取：本公司使用 Meta Platform 的官方嵌入機制顯示這些帖文。為確保頁面載入順暢可靠，本公司會在自己的儲存空間中快取帖文的縮圖。
- (b) 數據最小化：除了 Meta Platform 用戶選擇公開的資料外，本公司不會收集他們的任何其他個人資料。
- (c) Meta Platform Cookies：當用戶在渠道上與嵌入的 Meta Platform 帖文互動（例如點擊「讚好」或打開帖文）時，Meta Platform 可能會設定其專屬的 cookies 並適用其自身的私隱政策。本公司無法控制這些第三方 cookies。
3. 本公司如何使用用戶數據
本公司嚴格將用戶個人資料用於以下目的：
- 驗證用戶帳戶並允許用戶登入。
- 讓用戶存取其儲存的髮型和 AI 生成歷史記錄。
- 手動將用戶的意向請求和訊息轉發給相關髮型師。
- 向用戶發送與服務相關的通訊，例如預約確認、進度跟進及重要的帳戶更新。
- 分析匯總的、非識別性的數據，以改善產品和用戶體驗。
本公司不會向任何第三方出售用戶的個人資料，亦不會將用戶數據用於廣告或營銷目的。
如果用戶未滿18歲，請在提供個人數據前先徵得父母或監護人的同意。
4. 用戶數據的儲存位置與第三方處理者
本公司使用值得信賴的第三方服務供應商來安全地營運渠道。除以下實體外，本公司不會將用戶數據發送給任何第三方：
- (a) Supabase：用戶帳戶數據、儲存的髮型和意向請求均使用 Supabase（Postgres 資料庫和 Storage）安全儲存。
- (b) OpenAI：用戶的 AI 生成請求（自拍照和目標髮型）會透過 OpenAI 的 API 進行圖像編輯步驟。OpenAI 嚴格按照其 API 服務條款處理輸入的圖像。
5. Cookies
本公司僅使用渠道運作所需的最少 cookies：
- 驗證 Cookies：當用戶登入時，本公司會設定一個工作階段 cookie（由 Supabase Auth 管理），以保持用戶登入其帳戶的狀態。
- 匿名工作階段 Cookies：本公司使用匿名工作階段 cookie，以關聯用戶在正式註冊帳戶前所進行的 AI 生成記錄。
本公司不使用第三方分析 cookies 或廣告 cookies。
6. 數據保留與刪除
- 保留：只要用戶的帳戶在渠道上存在，本公司就會保留用戶帳戶數據、儲存的髮型和 AI 生成數據。
- 刪除：用戶有權隨時刪除其帳戶及相關數據。用戶可以透過瀏覽「用戶資料刪除」頁面來啟動此程序。一旦提出請求，本公司將在 30 天內從其活躍資料庫中完成用戶數據的刪除。
7. 用戶在私隱條例下的權利
根據 私隱條例，用戶有權：
- 查核本公司是否持有關於該用戶的個人資料，並查閱該等資料。
- 要求本公司更正任何與該用戶有關的不準確的個人資料。
- 確定本公司關於個人資料的政策和常規。
- 要求刪除該用戶的個人資料。
致髮型師：如果用戶是其公開 Meta Platform 帖文出現在目錄中的髮型師，並希望從 平台中移除其條目，該用戶有權隨時要求將其移除。
如欲行使上述任何權利，用戶應透過下方提供的電郵地址聯絡本公司。
8. 本私隱政策的變更
隨著產品的發展或為了遵守法律要求，本公司可能會不時更新本私隱政策。任何重大變更將透過更新本頁面頂部的「最後更新」日期來反映。本公司鼓勵用戶定期查閱本政策。
9. 聯絡本公司
如果用戶對本私隱政策有任何疑問、顧慮，或有查閱／更正數據的請求，請透過以下方式聯絡本公司：
Personal Data (Privacy) Policy Statement
Last updated: 25 June 2026
Good Looks Limited (the “Company”), runs a curated directory of hairstylists and an AI hairstyle previewer accessible at goodlooks.hk (the “Platform”). The Company respects privacy and is committed to protecting personal data in full compliance with the requirements of the Personal Data (Privacy) Ordinance (Chapter 486) of the Laws of Hong Kong (“PDPO”).
The Company requires its staff to adhere to the strictest standards of security and confidentiality regarding all personal information and data submitted by users through the Platform, its sub-domains, and any other websites, media platforms, or applications operated or developed by the Company (hereinafter collectively referred to as the “Channels”). Furthermore, the Company will not disclose such information to any third party without prior consent of the relevant user(s) of the Channels, whether registered or not (hereinafter referred to as “User(s)”), except to the authorized entities specified in Section 4 below. Unless otherwise defined, terms used in this Privacy Policy shall have the same meaning as those set forth in the Terms and Conditions.
This Privacy Policy explains what data the Company collects, how the Company uses it, where it is stored, and the rights the Users have regarding their personal information.
1. What data the Company collects
To provide its service, the Company collects the following personal data (collectively, the “Personal Data”):
- Account information: when the Users sign up, the Company collects the User’s email address. If a User chooses to sign in using a Google account, the Company collects the User’s Google profile name and profile picture.
- User-Generated Content & AI Data: The Company collects and stores the selfies and target hairstyle images Users upload to the AI previewer at /ai-hairstyle. The Company also saves the User’s generated hairstyles and AI-generation history created while the User is signed in. This media is stored securely in the Company’s private storage bucket and is tied directly to the User’s account.
- Interest Requests: If a User submits an interest request to connect with a hairstylist, the Company collects the User’s contact handle and any message the User writes so that the Company’s team can forward it to the relevant professional.
2. Third-party content from Meta Platforms
The Company’s curated directory features hairstyles that are linked to public Meta Platform posts.
- Embeds & Caching: The Company displays these posts using Meta Platform’s official embed mechanism. To ensure pages load smoothly and reliably, the Company caches the post’s thumbnail image in its own storage.
- Data Minimization: The Company does not collect any personal data from Meta Platform users beyond what they have chosen to make public.
- Meta Platform Cookies: When Users interact with an embedded Meta Platform post on the Channels (e.g., clicking “Like” or opening the post), Meta Platform may set its own cookies and apply its own privacy policy. The Company does not control these third-party cookies.
3. How the Company uses User data
The Company strictly uses User’s Personal Data for the following purposes:
- To authenticate User accounts and allow Users to sign in.
- To provide Users access to their saved hairstyles and AI generation history.
- To manually forward User interest requests and messages to the relevant hairstylists.
- To send service-related communications, such as booking confirmations, progress follow-ups, and important account updates.
- To analyze aggregate, non-identifying data to improve the product and User experience.
The Company does not sell User’s Personal Data to any third parties, and it does not use User data for advertising or marketing purposes.
If the User is under the age of eighteen (18), the User must obtain the consent of a parent or legal guardian prior to providing any Personal Data to the Company.
4. Where User data lives & third-party processors
The Company uses trusted third-party service providers to operate the Channels securely. The Company does not send User data to any third parties other than the following:
- Supabase: User account data, saved hairstyles, and interest requests are stored securely using Supabase (Postgres database and Storage).
- OpenAI: User AI generation requests (the selfies and target hairstyles) pass through OpenAI’s API for the image-editing step. OpenAI processes the image input strictly in accordance with their API terms of service.
5. Cookies
The Company uses minimal cookies necessary for the functioning of the Channels:
- Authentication Cookies: The Company sets a session cookie when a User signs in (managed by Supabase Auth) to keep the User logged into their account.
- Anonymous Session Cookies: The Company uses an anonymous session cookie to associate AI generations a User makes before the User officially signs up for an account.
The Company does not use third-party analytics cookies or advertising cookies.
6. Data Retention and Deletion
- Retention: The Company keeps User account data, saved hairstyles, and AI generation data for as long as the User's account exists on the Channels.
- Deletion: Users have the right to delete their account and associated data at any time. Users can initiate this process by visiting the User Data Deletion page. Once requested, the Company will complete the deletion of the User's data from its active databases within 30 days.
7. User Rights under the PDPO
Under the PDPO, Users have the right to:
- Check whether the Company holds Personal Data about the User and access such data.
- Require the Company to correct any personal data relating to the User that is inaccurate.
- Ascertain the Company's policies and practices in relation to personal data.
- Request the deletion of the User's Personal Data.
For Hairstylists: If a User is a hairstylist whose public Meta Platform post appears in the directory and would like their entry removed from the Platform, the User has the right to request its removal at any time.
To exercise any of these rights, Users should contact the Company at the email address provided below.
8. Changes to this Privacy Policy
The Company may update this Privacy Policy from time to time as the product evolves or to comply with legal requirements. Any material changes will be reflected by updating the "Last updated" date at the top of this page. The Company encourages Users to review this policy periodically.
9. Contact the Company
If Users have any questions, concerns, or data access/correction requests regarding this Privacy Policy, please contact the Company at:
Email: goodlooks.hongkong@gmail.com