Hot Peps
Consumer testing portal
Privacy
This explains what we collect from people taking part in a Hot Peps product test, why we collect it, and how to have it deleted. It is written to be understood rather than to cover us.
What we collect
Only what the test needs, and nothing that would identify you publicly.
- A first name or alias. An alias is fine. We never ask for a surname, an address, or a date of birth.
- An email address or phone number, if you give one. Used only to tell you a check-in is ready.
- Photographs of your face, taken by you, at the angles the test asks for.
- Voice recordings of what you notice, and a written transcript of them.
- Your answers to the check-in questions — ratings, and a short profile at the start covering age range, skin type and what you would like to improve.
- Anything you report as a reaction, including what happened and whether you stopped using the product.
Why
To find out what the product actually does. Your photos, recordings and answers are read internally by the Hot Peps team evaluating the test, and are used for nothing else.
We rely on your consent, which you give in the portal before anything is collected. It is recorded with the date, the time and the version of the wording you agreed to. You can withdraw it at any time.
Marketing is a separate question, asked separately
Your photos, recordings and quotes are never published, used in marketing, or shown outside the team unless you separately say yes in writing. That is a different consent from the one that lets you take part, and declining it changes nothing about the test.
Who else sees it
No advertising networks, no analytics, and no tracking of any kind. This site sets no cookies for visitors and embeds nothing from anyone else. The only third parties involved are the ones needed to run it:
- Our hosting and database providers, who store the data on our behalf.
- A speech-to-text provider, which receives a voice recording in order to transcribe it, when automatic transcription is switched on.
- An email or SMS provider, which receives your contact detail in order to send a check-in reminder, when reminders are switched on.
None of them may use any of it for their own purposes.
How it is kept
Photos and recordings are held in private storage that is not reachable from the open internet — the team opens them through short-lived links that expire. Your personal link is not stored as readable text: the database keeps a one-way fingerprint of it, used to recognise the link when you open it, and may also keep an encrypted copy so that a lost link can be sent to you again. That copy can be unlocked only by the testing service itself, when an administrator asks it to.
We keep your data while the test is running and while its results are being evaluated, and no longer than we need it for that. Ask us to delete it and we will, and we record that we did.
What you can ask for
- A copy of what we hold about you.
- Deletion of it.
- Correction of anything wrong.
- To stop taking part, at any point, for any reason, without explaining yourself. Stopping is not the same as deletion — ask for both if you want both.
Contact
mirrortest@hotpeps.com. Quote the tester code printed on your bottle if you have one.
This is a consumer-use product test, not a clinical trial. Hot Peps products are cosmetics. Nothing here is medical advice, and we do not diagnose or treat anything.