ALTA · JoyLife Aura Limited
Privacy & CCTV policy
Effective 1 October 2026 · Hong Kong
Who handles your information
JoyLife Aura Limited operates ALTA in Hong Kong and is the data user responsible for personal data collected through accounts, bookings, waivers and studio access, under the Personal Data (Privacy) Ordinance (Cap. 486). Privacy enquiries, data access requests and correction requests should be sent to our Data Protection Officer at admin@alta-cc.com. We will verify your identity before disclosing information and respond within 40 days.
Information we collect and why
We collect: your name, email, phone number and country code; birth month and year (to confirm you are an adult and for age-related safety); pole experience and level (to understand our members and plan facilities); gender (optional); booking, credit, purchase and payment records; waiver acceptance; referral codes and who referred you; credit-transfer recipient emails; guest names and emails; and your promotional email/SMS choice. We use this to manage membership, bookings, studio access, safety, purchases, credits, referrals and legal obligations. Fields marked required are needed to provide the service; without them we may be unable to open an account or complete a booking. Do not send medical records or full identity-document numbers through the website.
Direct marketing
We will only send promotional messages if you opt in; the choice is unticked by default. If you opt in, we intend to use your name, email and phone number to send you ALTA news, promotional offers, specials and events relating to studio rental, credits and packages, by email or SMS. We will not provide your data to other companies for their marketing. You may withdraw consent at any time, free of charge, by changing your Email & SMS preferences in My ALTA or emailing admin@alta-cc.com. Essential account and booking messages are not marketing and are sent regardless.
CCTV: continuous recording
The studio operates 24 hours a day. CCTV records continuously in every part of the studio except the changing room, for security, access verification, safety and incident investigation. Toilets and changing areas are never recorded. Notices should be displayed at entrances. CCTV is not used for routine marketing or audio recording. Recordings are normally retained for up to 30 days, then deleted unless required longer for an incident, dispute, legal obligation or lawful request.
Who may receive data
Access is limited to authorised ALTA personnel and service providers who need it to operate bookings, website hosting and database services, payments (such as Stripe), and email or SMS delivery. If you join with a referral code, the member or Teacher Ambassador who referred you can see your name and whether a reward was issued; Teacher Ambassadors can see purchases made with their code. Messages typed into the FAQ chatbot are processed by an external AI service provider to generate answers, so please do not enter personal details there. Information may be disclosed to insurers, professional advisers, emergency responders or authorities where necessary or legally required. We do not sell personal data. Some service providers process data outside Hong Kong; we require them to protect it appropriately.
Retention and your rights
Account, booking and waiver records are kept only as long as needed for service, safety, dispute handling and legal requirements, then securely deleted or anonymised. Purchase and payment records are kept for 7 years as required by Hong Kong accounting and tax law. You may request access to or correction of your personal data, ask about retention, or request that your account be closed and your data deleted (use the request buttons in My ALTA or email admin@alta-cc.com). Unused credits are forfeited when an account is deleted. We may charge a reasonable fee for a data access request as permitted by Hong Kong law. You may also contact the Office of the Privacy Commissioner for Personal Data, Hong Kong.
Children and guardian information
A guest under 18 may train only when a parent or legal guardian signs a consent for that visit. We record the child's birth month and year, the guardian's name, relationship, phone and email, whether the guardian stays on site, and the guardian's signature time. This information is used to verify consent, keep the studio safe and contact the guardian in an emergency; it is stored with the booking record and is not used for marketing. Guardians may ask to see or correct this information through the booking contact channel.