私隱政策

生效日期： 2026年10月10日

本私隱政策說明 SOMA Wellness Limited（舒曼有限公司）（「SOMA」、「我們」）作為 SOMA Wellness Club 的營運者，如何透過本會、網站 somaclubhk.com 及 SOMA 手機應用程式（統稱「服務」）收集、使用、持有及保護個人資料。我們遵守香港《個人資料（私隱）條例》（第 486 章）（「《私隱條例》」）。

Privacy Policy

Effective date: 10 October 2026

This Privacy Policy explains how SOMA Wellness Limited ("SOMA", "we", "us"), which operates SOMA Wellness Club, collects, uses, holds and protects personal data through our club, our website at somaclubhk.com, and the SOMA mobile application (together, our "Services"). We comply with the Personal Data (Privacy) Ordinance (Cap. 486) of Hong Kong (the "PDPO").

1. 我們是誰

SOMA Wellness Limited 為負責處理閣下個人資料的資料使用者。
會所地址：香港九龍尖沙咀彌敦道172-174號太平洋大廈3樓
註冊辦事處：Hse 127, Boulevard de Cascade, The Beverly Hills, Tai Po, Hong Kong
私隱事宜聯絡：privacy@somaclubhk.com

1. Who we are

SOMA Wellness Limited is the data user responsible for your personal data.
Club address: 3/F, Pacific Building, 172-174 Nathan Road, Tsim Sha Tsui, Kowloon, Hong Kong
Registered office: Hse 127, Boulevard de Cascade, The Beverly Hills, Tai Po, Hong Kong
Privacy contact: privacy@somaclubhk.com

2. 適用範圍

當閣下瀏覽我們的網站、使用我們的應用程式、查詢或購買會籍、預約或出席課堂，或以其他方式與我們往來時，均適用本政策。

2. When this policy applies

This policy applies when you visit our website, use our app, enquire about or purchase a membership, book or attend sessions, or otherwise deal with us.

3. 我們收集的個人資料

(a) 身分及聯絡資料： 姓名、出生日期、性別、電話號碼、電郵地址及緊急聯絡人資料。

(b) 會籍及交易資料： 會籍計劃、開始及結束日期、預約、出席及入場紀錄，以及付款紀錄。信用卡付款由我們的支付服務供應商處理，我們不會儲存閣下的完整信用卡號碼。

(c) 健康及身體組成資料： 在閣下同意下收集，包括身體組成測量數據（例如 InBody 或同類儀器）、體能評估、健康問卷及運動前健康篩查、閣下告知我們的相關病況或傷患，以及進度紀錄。我們將此類資料視為敏感個人資料，詳見第 5 條。

(d) 應用程式及技術資料： 帳戶登入資料（密碼僅以雜湊形式儲存）、裝置類型、作業系統、應用程式版本，以及為保安及維持服務運作而收集的使用紀錄。

(e) 通訊紀錄： 閣下透過電郵、WhatsApp、應用程式或親身向我們發出的訊息，以及閣下的推廣偏好設定。

3. Personal data we collect

(a) Identity and contact data. Name, date of birth, gender, phone number, email address, and emergency contact details.

(b) Membership and transaction data. Membership plan, start and end dates, bookings, attendance and check-in records, and payment records. Card payments are processed by our payment service provider. We do not store your full card number.

(c) Health and body-composition data. With your consent: body-composition measurements (for example, from InBody or similar devices), fitness assessments, health questionnaires and pre-exercise screening, relevant medical conditions or injuries you tell us about, and progress records. We treat this as sensitive personal data. See Section 5.

(d) App and technical data. Account credentials (passwords are stored in hashed form only), device type, operating system, app version, and records of how the app is used, collected for security and to keep the Services working.

(e) Communications. Messages you send us by email, WhatsApp, the app or in person, and your marketing preferences.

4. 使用個人資料的目的

我們使用個人資料以：

  1. 提供、管理及處理閣下的會籍、預約及入場；
  2. 進行健康篩查，並安全地提供切合閣下需要的訓練計劃；
  3. 處理付款及保存會計紀錄；
  4. 營運、保障及改善我們的網站及應用程式；
  5. 就閣下的會籍、預約、服務變更及安全事宜與閣下聯絡；
  6. 回應查詢及投訴；
  7. 遵守法律及監管責任，並保障我們的合法權利；
  8. 以不記名統計方式了解我們的會員（例如年齡組別、性別、職業、從何得知 SOMA），以規劃服務——提供這些背景資料屬自願；及
  9. 僅在取得閣下另行同意的情況下，向閣下進行直接促銷（見第 7 條）。

提供資料是否必須？ 第 3(a) 及 3(b) 條的資料，以及第 3(c) 條所述的運動前健康篩查，均為提供會籍所必需。如閣下不提供，我們可能無法接納或維持閣下的會籍。其他健康及進度資料則屬自願提供。

4. Why we use your personal data

We use personal data to:

  1. provide, manage and administer your membership, bookings and club access;
  2. conduct health screening and deliver training programmes safely and suited to you;
  3. process payments and keep accounting records;
  4. operate, secure and improve our website and app;
  5. communicate with you about your membership, bookings, changes to our Services and safety matters;
  6. respond to enquiries and complaints;
  7. comply with legal and regulatory obligations and protect our legal rights;
  8. understand our members as anonymous statistics (for example age band, gender, occupation, how you heard about SOMA) to plan our Services; giving these background details is voluntary; and
  9. with your separate consent only, send you direct marketing (Section 7).

Is providing data obligatory? The data in Section 3(a) and 3(b), and the pre-exercise screening in 3(c), are necessary to provide a membership. If you do not provide them, we may be unable to accept or maintain your membership. Other health and progress data are voluntary.

5. 健康及身體組成資料

我們只會在取得閣下明確同意後收集健康及身體組成資料，並只會將其用於向閣下提供及度身訂造健身及保健服務。我們不會將此類資料用於廣告，不會出售，亦不會向第三方提供作其本身用途。在 SOMA 內部，只有為閣下提供服務而需要使用此類資料的職員及教練方可查閱。閣下可隨時撤回同意；撤回同意或會令我們可安全提供的服務受到限制。

5. Health and body-composition data

We collect health and body-composition data only with your express consent, and use it only to provide and personalise our fitness and wellness Services to you. We do not use it for advertising, we do not sell it, and we do not share it with third parties for their own purposes. Access within SOMA is limited to staff and trainers who need it to serve you. You may withdraw consent at any time. Withdrawing consent may limit the Services we can safely provide.

6. 個人資料的轉移對象

我們可能將個人資料轉移予：

  • 代表我們提供服務的服務供應商，包括資訊科技、雲端寄存及軟件供應商、支付處理商及通訊服務供應商；他們只可為向我們提供服務而使用有關資料，並須負保密責任；
  • 專業顧問，例如律師、核數師及保險公司；
  • 法律、法庭命令或監管機構要求我們向其披露資料的任何人士；及
  • 在我們的業務被出售或重組時的買方或繼承人，惟須受本政策規限。

轉移至香港以外地區： 我們的網站及應用程式寄存於雲端基礎設施，資料可能在香港以外地區儲存或處理，目前為 新加坡（東南亞）。我們要求服務供應商以與《私隱條例》相若的標準保護個人資料。

6. Who we share personal data with

We may transfer personal data to:

  • service providers acting on our behalf, including IT, cloud hosting and software providers, payment processors, and messaging providers, who may use it only to provide services to us under confidentiality obligations;
  • professional advisers such as lawyers, auditors and insurers;
  • any person to whom we are required to disclose it by law, court order or a regulatory authority; and
  • a purchaser or successor if our business is sold or restructured, subject to this policy.

Transfers outside Hong Kong. Our website and app are hosted on cloud infrastructure that may store or process data outside Hong Kong, currently in Singapore (Southeast Asia). We require our service providers to protect personal data to a standard comparable to the PDPO.

7. 直接促銷

只有在取得閣下同意後，我們才會使用閣下的姓名及聯絡資料，向閣下發送有關會籍、課堂、服務、活動及優惠的直接促銷訊息。我們不會將閣下的個人資料提供予任何其他人士作直接促銷用途。閣下可隨時免費撤回同意，方法包括點擊任何訊息內的取消訂閱連結、在應用程式內更改設定，或電郵至 privacy@somaclubhk.com。

7. Direct marketing

We will only use your name and contact details to send you direct marketing about our memberships, classes, services, events and offers if you have given your consent. We will not provide your personal data to any other person for their use in direct marketing. You may withdraw consent at any time, free of charge, by using the unsubscribe link in any message, changing your settings in the app, or emailing privacy@somaclubhk.com.

8. 個人資料的保存期限

我們只會在達致上述目的所需的期間內保存個人資料：

  • 會員資料（姓名、聯絡資料及選填的背景資料）：會籍有效期內，以及會籍終止後 2 年，方便閣下再次加入；其後我們會刪除可識別閣下身份的資料，只保留不記名的統計數字；
  • 交易紀錄（金額、日期、參考編號）：交易後 7 年，以符合《稅務條例》的要求；
  • 健康及身體組成資料：會籍有效期內，以及會籍終止後 12 個月，除非閣下要求我們提早刪除；
  • 推廣偏好：直至閣下撤回同意為止。

8. How long we keep personal data

We keep personal data only as long as necessary for the purposes above:

  • member details (name, contact details and optional background details): for the duration of your membership and 2 years after it ends, so you can rejoin easily; after that we remove the details that identify you and keep only anonymous statistics;
  • transaction records (amount, date, reference): 7 years after the transaction, as the Inland Revenue Ordinance requires;
  • health and body-composition data: for the duration of your membership and 12 months after it ends, unless you ask us to delete it sooner;
  • marketing preferences: until you withdraw consent.

9. 資料保安

我們採取合理的技術及組織措施保護個人資料，包括傳輸及儲存時加密、存取權限控制及定期備份。惟任何系統均無法保證絕對安全。如發生可能對閣下造成損害的資料外洩事故，我們會通知閣下，並在適當情況下通知個人資料私隱專員。

9. Security

We use reasonable technical and organisational measures to protect personal data, including encryption in transit and at rest, access controls, and regular backups. No system is completely secure. If a data breach is likely to harm you, we will notify you and, where appropriate, the Privacy Commissioner for Personal Data.

10. 閣下的權利

根據《私隱條例》，閣下有權查詢我們是否持有閣下的個人資料、要求取得有關資料的副本，以及在資料不準確時要求我們更正。我們會在 40 日內回覆。我們可就查閱資料要求收取不超乎適度的費用。

10. Your rights

Under the PDPO you have the right to ask whether we hold your personal data, to request a copy of it, and to ask us to correct it if it is inaccurate. We will respond within 40 days. We may charge a fee for a data access request that is not excessive.

11. 刪除帳戶

閣下可隨時在應用程式內的 設定 → 帳戶 → 刪除帳戶 刪除 SOMA 應用程式帳戶，或以帳戶登記的電郵地址電郵至 privacy@somaclubhk.com 提出要求。刪除帳戶後，我們會刪除閣下的個人資料或將其匿名化，惟根據第 8 條須為法律或會計目的保存的紀錄除外。刪除應用程式帳戶本身並不會取消已付費的會籍；取消會籍須按閣下的會籍條款處理。

11. Deleting your account

You can delete your SOMA app account at any time from Settings → Account → Delete Account in the app, or by emailing privacy@somaclubhk.com from the email address registered to your account. When you delete your account, we delete or anonymise your personal data, except records we must keep for legal or accounting purposes under Section 8. Deleting your app account does not by itself cancel a paid membership. Membership cancellation is governed by your membership terms.

12. 未成年人士

我們的服務以成年人為對象。未經家長或監護人同意，我們不會在知情的情況下收集 18 歲以下人士的個人資料。

12. Children

Our Services are intended for adults. We do not knowingly collect personal data from anyone under 18 without the consent of a parent or guardian.

13. 政策更新

我們可能不時更新本政策。更新後的版本會連同新的生效日期刊登於本頁；如有重大變更，我們會透過應用程式或電郵通知閣下。

13. Changes to this policy

We may update this policy from time to time. We will post the updated version on this page with a new effective date, and tell you about material changes through the app or by email.

14. 聯絡我們

SOMA Wellness Limited 資料保障主任
香港九龍尖沙咀彌敦道172-174號太平洋大廈3樓
電郵：privacy@somaclubhk.com
WhatsApp：+852 5320 8220

14. Contact us

Data Protection Officer, SOMA Wellness Limited
3/F, Pacific Building, 172-174 Nathan Road, Tsim Sha Tsui, Kowloon, Hong Kong
Email: privacy@somaclubhk.com
WhatsApp: +852 5320 8220

15. 語言

本政策備有中英文版本。如兩者有任何歧異，概以英文版本為準。

15. Language

This policy is available in English and Chinese. If there is any inconsistency, the English version prevails.