This policy is issued by SRP Ltd. (“we”). It describes how we handle personal data for BeautySRP, SRP and SRP Lite cloud systems, and the SRP Staff mobile app.
If you use the service through your shop’s system URL, that shop is typically the data user of its customer and staff records. We process data as the system provider. A shop’s own PICS or privacy notice is separate from this page. BeautySRP Lite also has a short notice at https://beautysrp.com/srplite/privacy.html.
Data we process
Website enquiries: name, phone, email, shop details and message content. The marketing site uses Google Tag Manager (GTM-5TWTBL7) for usage statistics, not for selling lists or cross-app advertising tracking.
Cloud system: data entered or generated after login, such as staff identity, attendance, bookings, member/customer files, sales, photos or signatures, recordings where enabled, permissions and logs.
SRP Staff app: stores the system URL you enter or scan on the device; loads that https origin in an in-app browser; with your permission may use camera, photo library, microphone, location while in use (clock-in / shop Wi‑Fi) and Bluetooth (Beacon clock-in). If staff messenger push is enabled for that tenant, the app may register a device push token (for example an FCM token on Android). We do not sell SRP Staff app data to advertising networks and do not use IDFA for cross-app tracking.
Use
We use data to host and operate the systems and app, provide clock-in, booking, membership and POS features, support, security, billing and legal compliance (including Hong Kong’s Personal Data (Privacy) Ordinance). We do not sell personal data to third parties for their independent marketing.
Sharing
Processors may include cloud hosting (including AWS and Alibaba Cloud as shown on our site), payment providers (such as Stripe, AsiaPay, Airwallex, SRPPay) where a shop enables them, Apple and Google (app distribution and push infrastructure, including Firebase Cloud Messaging), and messaging tools such as WhatsApp when you contact us. We may also disclose data where required by law or to protect rights and safety.
Retention, security and rights
Saved system URLs can be removed in the app or by uninstalling. Tenant cloud data is retained according to the shop’s operations, contract and law. We apply reasonable safeguards; internet transmission is not guaranteed to be fully secure. Use https URLs and keep login credentials safe.
You may request access to or correction of personal data we hold by emailing info@srphk.com with the subject “Personal data access/correction”. If the data sits in your shop’s tenant system, please also contact that shop.
Children
The service and the SRP Staff app are for business teams. They are not directed at children under 13, and we do not knowingly collect children’s personal data.
This page is a general statement, not legal advice. If it conflicts with a customer contract or applicable law, the contract and the law prevail.
仍未確定哪個方案合適？
歡迎以 WhatsApp 簡述店舖規模，我們協助對應專業版與企業版——以清楚建議為主，不施壓推銷。單人小店亦可由 BeautySRP Lite 輕量版免費開始。
