Nomadivity Limited 遊思創見科技有限公司（「Memberrr」、「我們」）重視你的私隱。本私隱政策說明我們如何就 memberrr.com 網站及 Memberrr 服務（「服務」）收集、使用及保護個人資料。本政策符合香港《個人資料（私隱）條例》（第486章，「私隱條例」）的規定。
Nomadivity Limited 遊思創見科技有限公司 ("Memberrr", "we", "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and protect personal data in connection with memberrr.com and the Memberrr service ("Service"). This Policy complies with the Personal Data (Privacy) Ordinance (Cap. 486) of Hong Kong ("PDPO").
當你以商戶身份使用本服務時，我們可能收集以下資料：
When you use the Service as a merchant, we may collect the following data:
以上資料用於建立及管理你的服務帳戶、提供技術支援及發出服務通知。
This data is used to set up and manage your service account, provide technical support, and send service-related notifications.
當你瀏覽 memberrr.com 時，我們通過 Google Analytics 4（「GA4」）自動收集以下資料：
When you browse memberrr.com, we automatically collect the following data via Google Analytics 4 ("GA4"):
以上資料以匿名或彙總方式處理，用於分析網站使用情況及改善服務。
This data is processed in anonymised or aggregated form to analyse website usage and improve the Service.
我們使用所收集的個人資料用於以下目的：
We use the personal data collected for the following purposes:
你完全掌控你的會員資料——隨時一鍵匯出，隨時可要求刪除，冇 lock-in。
You retain full control of your member data — export it anytime, request deletion anytime, with no lock-in.
4.1 商戶透過 Memberrr（雲端版）管理的會員資料（包括其客戶姓名、電話、套票及儲值記錄、預約記錄等），儲存於 Nomadivity 使用的 Cloudflare D1 雲端資料庫。各商戶資料以租戶識別碼（tenant ID）邏輯隔離，商戶之間無法互相存取。
Member data managed through Memberrr (Cloud edition) — including customers' names, phone numbers, session-package and stored-value records, and booking records — is stored in the Cloudflare D1 cloud database operated by Nomadivity. Each merchant's data is logically isolated by a tenant identifier so that merchants cannot access one another's data.
4.2 Nomadivity 在此架構下作為商戶的資料處理者（Data Processor），僅按商戶指示為提供服務而處理該等資料；商戶則為其客戶個人資料的資料使用者（Data User），須就資料的收集及使用承擔相應的法律責任。
Nomadivity acts as a Data Processor, processing such data only on the merchant's instructions for the purpose of delivering the Service. The merchant is the Data User of their customers' personal data and bears responsibility for its lawful collection and use.
4.3 處理及儲存位置：會員資料由 Cloudflare 的全球網絡處理及儲存，資料庫設定偏好亞太區（APAC），惟 Cloudflare 不保證資料只存放於任何特定城市或司法管轄區。因此，本服務不保證會員資料只儲存於香港境內。
Location of processing & storage: Member data is processed and stored on Cloudflare's global network, with a database location preference for the Asia-Pacific (APAC) region. Cloudflare does not guarantee that data is stored in any specific city or jurisdiction. Accordingly, the Service does not guarantee that member data is stored solely within Hong Kong.
4.4 資料匯出與可攜性：商戶可隨時透過後台，將全部會員資料（會員、帳戶、套票、歷史、預約）匯出為 CSV 檔案，自行備份或轉移。
Data export & portability: Merchants may at any time export all member data (members, accounts, packages, history, bookings) as CSV files from the dashboard, for their own backup or migration.
4.5 資料刪除：服務終止後，商戶可要求匯出並刪除其租戶資料。除法律另有規定外，Nomadivity 將按第 7 節所述的保留期刪除該等資料。
Data deletion: Following termination, the merchant may request export and deletion of their tenant data. Unless otherwise required by law, Nomadivity will delete such data in accordance with the retention period stated in Section 7.
4.6 自托管專屬版（選用）：如商戶選用 Memberrr 的自托管專屬版，會員資料將改為儲存於商戶自有的 Google Drive（Google Sheets），並由商戶全權管理；該版本的資料處理安排按個別協議另行訂明。
Self-hosted edition (optional): If a merchant opts for Memberrr's self-hosted edition, member data is instead stored in the merchant's own Google Drive (Google Sheets) under the merchant's full control; the data-processing arrangements for that edition are set out separately by individual agreement.
5.1 memberrr.com 使用 Google Analytics 4（GA4）收集匿名網站使用統計資料。GA4 使用 Cookies 追蹤訪客行為。
memberrr.com uses Google Analytics 4 (GA4) to collect anonymised website usage statistics. GA4 uses cookies to track visitor behaviour.
5.2 你可透過瀏覽器設定拒絕或刪除 Cookies，惟此舉可能影響部分網站功能。
You may refuse or delete cookies via your browser settings, though this may affect certain website functions.
5.3 如欲了解 Google 如何處理 GA4 資料，請參閱 Google 私隱政策。
For details on how Google processes GA4 data, please refer to Google's Privacy Policy.
本服務的技術運作涉及以下第三方平台，彼等均有其獨立的私隱政策：
The technical operation of the Service involves the following third-party platforms, each with their own privacy policies:
| 服務商 · Provider | 用途 · Purpose |
|---|---|
| Cloudflare | 邊緣運算、網絡安全、DNS 及會員資料儲存（Cloudflare D1）Edge computing, network security, DNS, and member data storage (Cloudflare D1) |
| Google Workspace | Google Sheets API 及資料儲存（僅適用於自托管專屬版）Google Sheets API and data storage (self-hosted edition only) |
| Google Analytics 4 | 網站流量分析Website traffic analysis |
Nomadivity 不對上述第三方的資料處理行為負責。
Nomadivity is not responsible for the data practices of these third-party providers.
7.1 商戶資料：我們保留商戶資料至服務終止後 12 個月，之後予以刪除，法律另有規定者除外。
Merchant data: We retain merchant data for 12 months following service termination, after which it will be deleted unless otherwise required by law.
7.2 會員資料（雲端版）：於訂閱期間儲存於 Cloudflare D1；服務終止後，商戶可匯出資料，Nomadivity 將於服務終止後 12 個月內刪除，法律另有規定者除外。自托管專屬版的會員資料則儲存於商戶自有的 Google Drive，由商戶自行管理。
Member data (Cloud edition): Stored in Cloudflare D1 during the subscription. Following termination, the merchant may export the data, and Nomadivity will delete it within 12 months of termination unless otherwise required by law. For the self-hosted edition, member data is stored in the merchant's own Google Drive and managed by the merchant.
7.3 網站分析資料：GA4 依據 Google 的資料保留政策處理，通常為 14 個月。
Website analytics data: Processed by GA4 in accordance with Google's data retention policy, typically 14 months.
8.1 我們採取合理的技術及組織措施保護個人資料，包括：以 PBKDF2 雜湊保護登入密碼、僅限 HttpOnly 的工作階段憑證、租戶層級的資料隔離、操作審計記錄，以及通過 Cloudflare 提供的 HTTPS 加密傳輸。
We implement reasonable technical and organisational measures to protect personal data, including PBKDF2 hashing of login passwords, HttpOnly session credentials, tenant-level data isolation, operation audit logs, and HTTPS encryption in transit via Cloudflare.
8.2 然而，沒有任何互聯網傳輸或電子儲存方法能保證絕對安全。如發生任何涉及個人資料的保安事故，我們將依法通知受影響的當事人。
However, no method of internet transmission or electronic storage is completely secure. In the event of a data security incident involving personal data, we will notify affected parties as required by applicable law.
根據香港《個人資料（私隱）條例》，你有權：
Under the Personal Data (Privacy) Ordinance of Hong Kong, you have the right to:
如欲行使上述權利，請電郵至 hello@memberrr.com，我們將於 40 個曆日內回覆。
To exercise these rights, please email hello@memberrr.com. We will respond within 40 calendar days.
我們可能不時更新本私隱政策。重大修改將通過電郵或網站通知提示。繼續使用本服務即表示你接受更新後的政策。
We may update this Privacy Policy from time to time. Material changes will be communicated via email or website notice. Continued use of the Service constitutes acceptance of the updated Policy.
如對本私隱政策有任何疑問或投訴，請聯絡：
For any enquiries or complaints regarding this Privacy Policy, please contact: