我們收集的資料 / Information we collect
我們可能收集帳戶電郵、顯示名稱、電話號碼、送貨地址、心願清單、購物車及訂單記錄、客戶服務訊息、登入與安全記錄、裝置與瀏覽器資料及同意記錄。
We may collect account email, display name, telephone number, delivery address, wishlist, cart and order records, customer-service messages, login and security logs, device and browser information, and consent records.
本網站目前不收集付款卡資料。日後啟用網上結帳時，付款服務商將按其私隱政策處理卡或錢包資料；HitDeck 可能收到交易識別碼、付款狀態、卡品牌及末四位數字等有限資料。
This website does not currently collect payment-card details. When online checkout is activated, the payment provider will process card or wallet information under its own privacy notice; HitDeck may receive transaction identifiers, payment status, card brand, and limited card details such as the last four digits.
資料用途 / How information is used
我們使用個人資料來營運帳戶、核實及履行訂單、配送商品、提供客戶服務、防止欺詐及帳戶濫用、保存財務與庫存記錄、處理退貨及爭議，以及履行法律義務。
We use personal data to operate accounts, verify and fulfil orders, deliver products, provide customer service, prevent fraud and account abuse, keep financial and inventory records, handle returns and disputes, and comply with legal obligations.
HitDeck 不出售客戶個人資料。只有在具有適當同意或其他合法依據時才會發送推廣訊息；客戶可取消推廣訊息而不影響服務通知。
HitDeck does not sell customer personal data. Marketing messages are sent only where an appropriate consent or other lawful basis applies, and customers can opt out without affecting service messages.
使用 Google 登入 / Google sign-in
如你選擇「使用 Google 繼續」，Google 可能向 HitDeck 提供 Google 帳戶識別碼、電郵地址、姓名及個人頭像。HitDeck 只要求完成身份驗證、建立或配對 HitDeck 帳戶及顯示帳戶資料所需的基本身份資料。
If you choose Continue with Google, Google may provide HitDeck with your Google account identifier, email address, name, and profile image. HitDeck requests only the basic identity information needed to authenticate you, create or match your HitDeck account, and display its profile details.
Google 按其私隱條款處理登入要求，Supabase 代表 HitDeck 處理身份驗證回應。HitDeck 不出售這些 Google 帳戶資料、不將其用於廣告，並只會按本政策所述在營運及保障帳戶所需的範圍內分享。
Google processes the sign-in request under Google's privacy terms, and Supabase processes the authentication response for HitDeck. HitDeck does not sell this Google account data or use it for advertising, and shares it only as described in this notice to operate and secure your account.
服務商及跨境處理 / Service providers and transfers
個人資料只會在必要範圍內向託管、資料庫、電郵、分析、付款、防欺詐、專業顧問及配送服務商分享，或在法律要求時向主管機關披露。部分服務商可能在香港以外處理資料；HitDeck 採用與服務相稱的合約及營運保障，並限制只有履行職務所需的人員及服務商方可存取。
Personal data may be shared only as needed with hosting, database, email, analytics, payment, fraud-prevention, professional-adviser, and delivery providers, or with authorities where legally required. Some providers may process data outside Hong Kong; HitDeck uses appropriate contractual and operational safeguards and limits access to those who need the information for their role.
安全及保存 / Security and retention
HitDeck 使用 HTTPS、存取控制、資料列層級資料庫安全、角色權限管理及審計記錄。任何網上服務均不能保證絕對安全，客戶應使用獨立密碼並迅速報告懷疑帳戶被濫用的情況。
HitDeck uses HTTPS, access controls, row-level database security, role-based administration, and audit records. No internet service can guarantee absolute security, so customers should use a unique password and promptly report suspected account misuse.
資料只會保存至達成收集目的、客戶服務、防止欺詐、處理爭議及履行適用會計或法律義務所需的時間；不再需要時會刪除或匿名化。
Records are retained only as long as reasonably required for the purpose collected, customer service, fraud prevention, dispute handling, and applicable accounting or legal obligations. Data is deleted or anonymized when no longer required.
查閱、更正、刪除及聯絡 / Access, correction, deletion, and contact
如要查閱、更正或刪除個人資料、撤回推廣同意，或提出私隱查詢，請以「Privacy request」為主旨電郵至 [email protected]。我們可能需要先核實身份。
To request access to, correction of, or deletion of personal data, withdraw marketing consent, or ask a privacy question, email [email protected] with the subject “Privacy request”. We may need to verify your identity before acting on a request.
營運者：HitDeck Hong Kong Limited。註冊辦事處：Flat/Rm A, 12/F, ZJ 300, 300 Lockhart Road, Wan Chai, Hong Kong。生效及最後更新日期：2026 年 7 月 21 日。
Operator: HitDeck Hong Kong Limited. Registered office: Flat/Rm A, 12/F, ZJ 300, 300 Lockhart Road, Wan Chai, Hong Kong. Effective and last updated: 21 July 2026.