Last Updated: August 3, 2025
This Privacy Policy Statement aims to clarify what personal data we process, why we process it, who receives your data and how you can exercise your legal rights.
In this Privacy Policy Statement, "personal data" means any data which directly or indirectly relates to you and identifies you as a person, and in a form in which access to or processing of the data is practicable (like the combination of your full name and address, or a user ID connected to your identity). Similarly, "processing" refers to any operation performed on your personal data, for example the collection, storage, use, disclosure, or destruction of your personal data.
We are Heyooh Limited ("Heyooh," "we," "our," or "us") and we are located at Unit 2A, 17/F, Glenealy Tower, No.1 Glenealy, Central, Hong Kong.
With regard to your privacy, it is us who decide how and for what purposes your personal data is processed. In data protection language that makes us a so-called "_data user_" (the party responsible for how your personal data is processed).
If you have any questions related to how your personal data is processed and/or would like to reach out to our data protection officer, you can contact us at service@heyooh.co.
When you use our platform via our website or our mobile application ("app"), we process personal data actively provided by you, collected from your device(s) when you interact with us or obtained from third parties. Broadly speaking we will process the following categories of personal data:
| **Account data** | including your first name, last name, email address, password, telephone number, gender, age range (not specific age), profile picture (optional), user ID, language preferences, self-introduction information, and other profile settings |
| **Tennis profile data** | including tennis skill level, best hand (right/left/both), years of playing tennis, preferred game locations, and other sports interests |
| **Activity data** | including tennis skill level, match history, court bookings, event participation, tennis partners, and community interactions |
| **Location data** | including address, district, jurisdiction, your device's longitude and latitude (with your consent), and preferred game locations |
| **Device information** | including device ID, IP address, session information, device configuration settings, operating system, platform interactions, and other data obtained through web-trackers (e.g., cookies, SDKs, pixels) |
| **Payment data** | including payment method data, payment amount, payment recipient details, refund details, and bank receipts (note: we do not store full credit card data) |
| **Customer support data** | including content of your customer support requests, response from our customer care teams and images attached to our communications |
| **Single-Sign-On ("SSO") Options data** | user data (e.g., name, email address, telephone number, user ID) shared by third-party SSO providers that you have an account with, and opted to use their SSO options to log into our platform |
When creating a customer account we need to process your **account data** such as your first name, last name, email address, password, telephone number, gender, and age range. Once you have created an account, we will assign you a unique **user ID**. This measure will allow us to recognize you in our system without needing to use all of your account-related information. This ID cannot be used by any outside parties.
The information we request during the account creation process is necessary to take the first step in establishing a customer relationship with you so that we can provide you with our services. Account creation is a fundamental function of our platform. Without this process, we cannot provide our services to you.
**Categories of data processed**: Account data and device information
**Principle of lawfulness**: Execution of a contract
**Period of storage**: 5 years from the last access
To help you connect with suitable tennis partners and matches, we collect your **tennis profile data** such as tennis skill level, best hand (right/left/both), years of playing tennis, preferred game locations, and other sports interests. This information helps us match you with compatible players and suggest appropriate tennis activities.
**Categories of data processed**: Tennis profile data
**Principle of lawfulness**: Execution of a contract
**Period of storage**: 5 years from the last access
We offer you the option to register on our platform by using one of the commonly used social networking systems such as Facebook, Google, or Apple. If you already have an account with any of these systems, you can sign up and log in to our platform using your user data from those identity management providers.
When logging in with the SSO option, we may get access to **SSO Options data** such as your name, email address, telephone number, user ID, and your date of birth, if you have shared this data with the SSO provider.
This information is necessary for initiating our customer relationship and entering into a contract with you. We never receive or store the password you use for these systems.
**Categories of data processed**: Account data and SSO Options data
**Principle of lawfulness**: Execution of a contract
**Period of storage**: 5 years from the last access
You can access your profile at any time to make changes, provide additional information about yourself, add or edit your payment data, or view your previous activities. Your data is also processed to administer your profile, which includes tasks such as ensuring the accuracy of your personal details, processing any modifications you make, and managing technical issues you might have.
**Categories of data processed**: Account data, tennis profile data, activity data, payment data, and device information
**Principle of lawfulness**: Execution of a contract
**Period of storage**: 5 years from the last access
To help you find suitable tennis partners and matches, we process your tennis skill level, location (with your consent), playing preferences, best hand, years of playing tennis, and availability. This allows us to suggest compatible tennis players and matches in your area.
**Categories of data processed**: Account data, tennis profile data, activity data, location data
**Principle of lawfulness**: Execution of a contract
**Period of storage**: 5 years from the last access
When you book tennis courts through our platform, we process your booking details, including date, time, location, and payment information.
**Categories of data processed**: Account data, activity data, payment data
**Principle of lawfulness**: Execution of a contract
**Period of storage**: 5 years from the last access
When you create or join public matches, we process your name, tennis skill level, and match details. Your first name, last name, and tennis skill level will be visible to other users participating in the match.
**Categories of data processed**: Account data, tennis profile data, activity data
**Principle of lawfulness**: Execution of a contract
**Period of storage**: 5 years from the last access
We provide chat functionality to facilitate communication between users for organizing matches and building community. We process the content of your messages to deliver them to the intended recipients.
**Categories of data processed**: Account data, message content
**Principle of lawfulness**: Execution of a contract
**Period of storage**: 5 years from the last access
With your consent, we calculate and publish your tennis ranking based on your match results and performance. This information may be visible to other users on the platform.
**Categories of data processed**: Account data, tennis profile data, activity data
**Principle of lawfulness**: Consent
**Period of storage**: Until withdrawal of consent
We use web tracking technologies (e.g., cookies, SDKs, measuring pixels) when you browse our platform, whether you are a customer or a visitor. These technologies enable us to facilitate the functioning of our platform, improve its performance and security, or understand how our users interact with our platform. In addition, these technologies allow us to deliver customized content or targeted advertising to our users.
Cookies and web tracking technologies may be used to collect data that we classify as **device information**, including your device ID, IP address, session information, preferences such as language settings, platform interactions, platform performance analytics, and crash reporting. As a matter of principle, our web-tracking technologies will process your device information and access data in pseudonymous form only.
For more details on our use of cookies and similar technologies, please refer to our Cookie Policy.
**Categories of data processed**: Device information
**Principle of lawfulness**: Legitimate interests / Consent for non-essential cookies
**Period of storage**: Varies by cookie type (see Cookie Policy)
With your explicit consent, we may collect precise location data from your device to help you find nearby tennis courts and players. You can withdraw this consent at any time through your device settings.
**Categories of data processed**: Location data
**Principle of lawfulness**: Consent
**Period of storage**: Until withdrawal of consent
When you contact our customer support team, we process your **account data** and any additional information you provide to us in order to assist you with your inquiry or resolve your issue.
**Categories of data processed**: Account data, customer support data
**Principle of lawfulness**: Execution of a contract
**Period of storage**: 5 years from the last contact
If you have given us your consent, we may send you marketing communications about our products, services, and promotions. You can withdraw your consent at any time by clicking the unsubscribe link in our emails or by contacting us.
**Categories of data processed**: Account data
**Principle of lawfulness**: Consent
**Period of storage**: Until withdrawal of consent
With your consent, we may send you push notifications about matches, court availability, and other relevant information. You can manage these notifications through your device settings.
**Categories of data processed**: Account data, device information
**Principle of lawfulness**: Consent
**Period of storage**: Until withdrawal of consent
When you use our platform, certain information may be visible to other users:
- Your first name, last name, and profile picture (if provided)
- Your tennis skill level, best hand, and years of playing tennis
- Your tennis ranking (if you've consented)
- Your match history and performance statistics
- Your public content and interactions
We may share your personal data with third-party service providers who perform services on our behalf, such as:
- Cloud storage providers
- Payment processors
- Analytics providers
- Customer support services
- Marketing and communication platforms
These service providers are bound by data protection obligations and are only permitted to use your personal data for the specific purposes we've contracted them for.
When you book a court or join an event at a tennis club or facility, we may share necessary information with that venue to facilitate your booking or participation.
We may disclose your personal data if required to do so by law or in response to valid requests by public authorities (e.g., a court or government agency).
If we are involved in a merger, acquisition, or sale of all or a portion of our assets, your personal data may be transferred as part of that transaction.
We implement appropriate technical and organizational measures to protect your personal data against unauthorized or unlawful processing, accidental loss, destruction, or damage. However, no method of transmission over the Internet or electronic storage is 100% secure, and we cannot guarantee absolute security.
Our security measures include:
- Encryption of personal data in transit and at rest
- Regular security assessments and penetration testing
- Access controls and authentication procedures
- Regular security training for our staff
- Incident response procedures
We will retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, including for the purposes of satisfying any legal, regulatory, tax, accounting, or reporting requirements.
In determining the appropriate retention period, we consider:
- The amount, nature, and sensitivity of the personal data
- The potential risk of harm from unauthorized use or disclosure
- The purposes for which we process the data
- Whether we can achieve those purposes through other means
- Applicable legal requirements
When your personal data is no longer needed, we will securely delete or anonymize it.
Under the Hong Kong Personal Data (Privacy) Ordinance (Cap. 486) ("PDPO") and other applicable data protection laws, you have certain rights regarding your personal data:
You have the right to request access to your personal data that we hold about you.
You have the right to request correction of any inaccurate personal data that we hold about you.
In certain circumstances, you have the right to request the erasure of your personal data.
You have the right to object to the processing of your personal data for direct marketing purposes.
You have the right to receive your personal data in a structured, commonly used, and machine-readable format.
To exercise any of these rights, please contact us using the details provided in the "Contact Us" section below.
Our Service is not directed to individuals under the age of 18. We do not knowingly collect personal data from children under 18. If you become aware that a child has provided us with personal data without parental consent, please contact us. If we become aware that we have collected personal data from children without verification of parental consent, we will take steps to remove that information from our servers.
Your personal data may be transferred to, and processed in, countries other than Hong Kong. These countries may have data protection laws that are different from the laws of Hong Kong.
We have implemented appropriate safeguards to ensure that your personal data remains protected in accordance with this Privacy Policy when transferred internationally, including:
- Using standard contractual clauses approved by relevant data protection authorities
- Ensuring that recipients of your personal data are bound by data protection obligations
- Implementing additional security measures as appropriate
Our Service may contain links to third-party websites, services, or applications that are not operated by us. We have no control over and assume no responsibility for the content, privacy policies, or practices of any third-party websites or services. We strongly advise you to review the privacy policy of every site you visit.
We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last Updated" date at the top of this Privacy Policy.
You are advised to review this Privacy Policy periodically for any changes. Changes to this Privacy Policy are effective when they are posted on this page.
If you have any questions about this Privacy Policy or our data practices, please contact us at:
**Heyooh Limited**
Email: service@heyooh.co
Address: Unit 2A, 17/F, Glenealy Tower, No.1 Glenealy, Central, Hong Kong
If you have a complaint about how we handle your personal data, please contact us first. If you are not satisfied with our response, you have the right to lodge a complaint with the Privacy Commissioner for Personal Data in Hong Kong:
**Office of the Privacy Commissioner for Personal Data, Hong Kong**
Website: https://www.pcpd.org.hk/
Address: Room 1303, 13/F, Dah Sing Financial Centre, 248 Queen's Road East, Wanchai, Hong Kong
Phone: +852 2827 2827
Fax: +852 2877 7026