Skip to content

Privacy Policy

Last updated: 10 November 2026 

1. Controller

The controller responsible for data processing on this website is:

GoodTime Flow Ltd. 

Room 63, 7/F, Woon Lee Commercial Building

7–9 Austin Ave, Tsim Sha Tsui

Kowloon, Hong Kong

Legal administration & contact:

[email protected]

GoodTime Flow Ltd. is based in Hong Kong. This policy explains our data processing. References to the EU General Data Protection Regulation (GDPR) apply where that law covers the relevant processing, including offering goods or services to individuals in the EU or monitoring their behaviour there.

2. Scope of this Privacy Policy

This Privacy Policy applies to:

  • Informational website pages

  • Contact and other forms

  • Newsletter subscriptions

  • Memberships, courses, and community features

  • Coaching services and video calls

  • Appointment scheduling

  • Payments

  • Embedded media

  • Marketing and advertising tracking (where consent is given)

3. Personal Data We Process

Depending on how you use the website and services, we may process the following categories of personal data:

  • Identification data (e.g. name)

  • Contact data (e.g. email address)

  • Account and membership data

  • Communication data (messages, comments, direct messages)

  • Booking and scheduling data

  • Payment and transaction data (processed via Stripe)

  • Technical data (IP address, browser, device, access times)

  • Usage data related to courses, community, and content

  • Marketing and consent data (where applicable)

4. Legal Bases for Processing

Personal data is processed on one or more of the following legal bases under Art. 6 GDPR:

  • Consent (Art. 6(1)(a))

  • Performance of a contract or pre-contractual measures (Art. 6(1)(b))

  • Legal obligations (Art. 6(1)(c))

  • Legitimate interests (Art. 6(1)(f)), such as secure operation, communication, and service improvement

5. Hosting, Platform & Forms (Wix)

This website is hosted on Wix. Contact messages, newsletter registrations, application forms and Good Time App waiting-list registrations submitted through connected forms are processed and stored using Wix Forms.

Wix processes site visitor data on our behalf under its Data Processing Agreement. Details about Wix’s processing and international infrastructure are available in the Wix Privacy Policy.

6. Forms & Communication

When you submit data via forms (e.g. contact forms, signup forms, applications), the information you provide is processed for the purpose stated in the form (e.g. responding to inquiries, providing services, onboarding).

Community interactions, comments, and direct messages are visible to other users according to the platform’s functionality and are processed to enable community participation.

7. Email & Newsletter

If you subscribe to our newsletter, we process your email address and any voluntarily provided data exclusively for sending the requested information.

  • Legal basis: consent (Art. 6(1)(a) GDPR)

  • You may unsubscribe at any time via the unsubscribe link or by contacting us

  • Data is deleted once you unsubscribe, unless legal retention obligations apply

8. Appointments & Scheduling (Wix)

We use Wix scheduling to arrange appointments. When you request or book an appointment, Wix processes the details you provide, such as your name, email address, appointment time and booking message, to manage the appointment and related communications.

Where the GDPR applies, processing needed to arrange or deliver a requested service is based on Article 6(1)(b). Other administrative handling may rely on our legitimate interest in responding to enquiries.

9. Video Calls, Interviews & Recordings (Riverside)

We use Riverside for online calls, interviews and recording sessions. Depending on the session and enabled features, Riverside may process participant details, audio and video, chat messages, transcripts and technical connection information.

Recording, transcription, AI processing and any intended publication will be explained before the relevant session. Where consent is required, it will be requested separately. Joining a call does not itself give us permission to publish your recording.

Riverside’s own processing is described in its Privacy Policy. Session content may include personal or sensitive information; share only what is needed for the discussion.

10. Payments (Stripe)

Payments are processed via Stripe. We do not store full payment card details. Stripe processes payment and transaction data independently as a payment service provider.

Legal basis: performance of a contract (Art. 6(1)(b) GDPR)

11. Marketing & Advertising

Meta Pixel is not currently installed on this website. If Meta advertising measurement is introduced, this policy and the consent controls will be updated before it is activated. Optional advertising tracking will require your choice before loading.

12. Cookies & Similar Technologies

Wix and this website use cookies or browser storage needed to operate the site, authenticate form submissions and maintain visitor sessions. Embedded media and external booking or call services may process technical information under their own privacy notices.

No Meta advertising pixel is currently configured. If optional advertising or analytics technologies are added, the website will provide controls to accept or decline them and subsequently change your choice. Essential storage remains necessary for the features you request.

13. Embedded Media (YouTube)

This website embeds videos from YouTube using enhanced privacy mode.

When you play a video, a connection to YouTube servers may be established and data may be processed by Google. We have no influence over this processing.

Legal basis:

  • Legitimate interest (Art. 6(1)(f) GDPR)

  • Consent, where required

14. Data Retention

Personal data is stored only for as long as necessary to fulfill its purpose or as required by legal retention obligations.

15. International Data Processing

GoodTime Flow Ltd. is based in Hong Kong. Our website and services use providers with international infrastructure, including Wix and Riverside. Depending on the service, personal data may be stored or accessed in Hong Kong or other countries, including countries outside the European Economic Area (EEA). This section does not mean that the website is hosted in the EU.

Where the GDPR applies and a disclosure to another controller or processor qualifies as a restricted international transfer, the required transfer mechanism must cover that disclosure, for example an applicable adequacy decision or Standard Contractual Clauses with any necessary supplementary measures. The mechanism depends on the provider and processing involved.

You can request details of relevant recipients, processing locations and safeguards at [email protected].

16. Your Rights

You have the right to:

  • Access your data

  • Rectification

  • Erasure

  • Restriction of processing

  • Data portability

  • Object to processing

  • Withdraw consent at any time

You also have the right to lodge a complaint with a competent supervisory authority in the EU.

Requests can be sent to: [email protected] 

17. External Links

We are not responsible for the content or privacy practices of external websites linked from this website.

17a. AI-Assisted Operations and Planned AI Services

We use AI-assisted tools, including ChatGPT, for website development and preparing content, with human review.

We plan to use AI to help analyse website performance and review contact enquiries, and to offer an AI chat or voice assistant for initial business enquiries. These automated website integrations are not currently active on this website. This policy will be updated before activation to identify the actual provider, data used, purposes, retention, relevant legal basis and any international transfers.

The planned public assistant will identify itself as AI, use only approved public information and refer requests outside its authorised scope to a person. Company-confidential information and other people’s enquiries must not be exposed. Recording or transcription of an AI call will be disclosed before it starts, with consent where required. AI answers can be inaccurate and will not constitute binding commitments unless confirmed by an authorised person.

18. Changes to This Privacy Policy

We reserve the right to update this Privacy Policy to reflect legal or operational changes. The current version is always published on this website.