1誰負責你的資料

dinreferral（網站 dinreferral.web.app 及 Android／iOS app）由 Kevin Yeung 以個人名義營運，即香港《個人資料（私隱）條例》（第 486 章）下嘅「資料使用者」。分會領導團隊用 dinreferral 管理分會事務。

私隱查詢及要求：ec5mhk@gmail.com

2我們收集咩資料

• 登入資料：你用 Google 或 Apple 登入時，該服務提供嘅姓名、email 同帳戶識別碼。
• 會員資料：姓名、電話及 WhatsApp 號碼、email、公司名稱、行業及專業類別、頭像相片、所屬分會、分會職位、入會及到期日、介紹人及導師、替代人內容、DANCE 介紹卡及目標市場。如你選擇喺地圖公開，亦包括公司地址及位置。
• 分會活動紀錄：出席及簽到、座位安排、引薦及推薦人報告、紅綠燈分數、懸紅、活動報名。
• 付款及財務：付款紀錄、收據（包括簽發人的手寫簽名）、報銷申請（金額及描述），以及續會申請表（包括你的簽名）。
• 來賓資料：來賓報名或由會員代為登記時提供嘅姓名、電話、公司及行業。
• 相片及文件：你上載嘅頭像、場地相片、活動相片、付款證明及文件。
• 裝置資料：推播通知用嘅裝置識別碼，以及維持登入用嘅 cookie。

手機權限（只喺你使用相關功能時先會詢問）：

• 相機：掃描簽到 QR code，或者影你選擇上載嘅相片。掃描 QR code 時，影像只喺手機上辨認，唔會儲存或上載。
• 位置：喺地圖顯示你附近嘅地點。你的位置唔會被儲存。
• 附近裝置（藍牙）：連接名牌打印機，唔會用嚟定位。
• 通知：發送會議、引薦及款項提醒。

我們冇使用任何廣告或分析追蹤工具。

3資料用途

• 運作分會：會員名錄、會議、出席、座位、引薦、報告及收款。
• 簽發收據及處理報銷、續會申請。
• 發送與你有關嘅通知。
• 保障服務安全，例如防止公開報名表被濫用（使用 Google reCAPTCHA）。

我們唔會將你的資料出售，亦唔會用作直接促銷。

4邊個睇到你的資料

• 你分會嘅會員：可以睇到會員名錄入面嘅資料，包括姓名、公司、行業、聯絡方法及相片。
• 你分會嘅領導團隊：可以睇到運作分會所需嘅額外資料，例如出席、付款及來賓聯絡資料。
• 區域管理員：為支援分會，可以睇到所負責分會嘅資料。
• 服務供應商：Google（Firebase 雲端資料庫、儲存、登入、推播通知、Google 地圖、reCAPTCHA）及 Apple（Apple 登入）。佢哋只會為提供服務而處理資料。
• 法律要求：如法律要求，我們可能需要向有關當局披露資料。

5資料儲存喺邊

資料庫及伺服器喺 Google Cloud 嘅美國數據中心；相片及文件喺 Google Cloud 嘅香港數據中心。即係你的資料會被轉移到香港以外地方處理。

6資料保留

• 會員資料喺你使用 dinreferral 期間保留；你要求刪除帳戶後，會按第 8 節處理。
• 超過兩年冇再出席嘅來賓，會從分會嘅來賓跟進名單中移除；佢哋嘅報名紀錄會保留作分會出席紀錄。
• 分會需要保留嘅財務紀錄（例如收據及付款紀錄）會保留至分會不再需要為止。

7資料保安

所有傳輸均經加密（HTTPS），儲存嘅資料由 Google Cloud 加密。存取權限由伺服器端嘅保安規則按你的分會同職位控制。不過，任何網上服務都冇辦法保證絕對安全。

8你的權利

根據《個人資料（私隱）條例》，你有權要求查閱及更正你的個人資料。大部分會員資料可以喺 app 內「設定」直接修改。其他要求請電郵至上述地址，我們會喺 40 日內回覆。

10兒童

dinreferral 為商務會員而設，唔適合 18 歲以下人士使用。

11政策更新

如政策有重大改動，我們會喺 app 內通知。最新版本一律以本頁為準。

1Who is responsible for your data

dinreferral (the website dinreferral.web.app and the Android/iOS app) is operated by Kevin Yeung as an individual, the "data user" under Hong Kong's Personal Data (Privacy) Ordinance (Cap. 486). Chapter leadership teams use dinreferral to run their chapters.

Privacy enquiries and requests: ec5mhk@gmail.com

2What we collect

• Sign-in details: the name, email and account identifier provided by Google or Apple when you sign in.
• Member profile: name, phone and WhatsApp number, email, business name, industry and classification, profile photo, chapter, chapter role, join and renewal dates, introducer and mentor, substitute script, DANCE card and target market — and, if you choose to show it on the map, your business address and location.
• Chapter records: attendance and check-in, seating, referrals and referral reports, traffic-light scores, wanted posts, event registrations.
• Payments and finance: payment records, receipts (including the issuer's handwritten signature), expense claims (amounts and descriptions), and renewal forms (including your signature).
• Visitors: the name, phone, business and industry a visitor gives when registering, or a member enters for them.
• Photos and documents you upload: profile photos, venue and event photos, proof of payment, documents.
• Device data: an identifier for push notifications, and a cookie that keeps you signed in.

Phone permissions (asked only when you use the feature):

• Camera: to scan check-in QR codes, or to take a photo you choose to upload. When scanning a QR code the image is read on the phone and never stored or uploaded.
• Location: to show places near you on the map. Your location is not stored.
• Nearby devices (Bluetooth): to connect to the badge printer; not used for location.
• Notifications: meeting, referral and payment reminders.

We use no advertising or analytics trackers.

3How we use it

• To run the chapter: member directory, meetings, attendance, seating, referrals, reports and payments.
• To issue receipts and handle expense claims and renewals.
• To send notifications that concern you.
• To keep the service secure, e.g. protecting public registration forms from abuse (Google reCAPTCHA).

We do not sell your data or use it for direct marketing.

4Who can see it

• Members of your chapter: the member directory, including name, business, industry, contact details and photo.
• Your chapter's leadership team: the further details needed to run the chapter, such as attendance, payments and visitor contact details.
• Regional administrators: the chapters they support.
• Service providers: Google (Firebase database, storage, sign-in, push notifications, Google Maps, reCAPTCHA) and Apple (Sign in with Apple), processing data only to provide their services.
• Legal requirements: authorities, where the law requires it.

5Where it is stored

The database and servers are in Google Cloud data centres in the United States; photos and documents are in Google Cloud's Hong Kong data centre. Your data is therefore transferred outside Hong Kong for processing.

6How long we keep it

• Member data is kept while you use dinreferral; after you ask for your account to be deleted, see section 9.
• Visitors who have not attended for two years are removed from the chapter's follow-up list; their registration records are kept as the chapter's attendance record.
• Financial records the chapter needs (such as receipts and payment records) are kept for as long as the chapter needs them.

7Security

All traffic is encrypted (HTTPS) and stored data is encrypted by Google Cloud. Access is enforced by server-side security rules according to your chapter and role. No online service can guarantee absolute security.

8Your rights

Under the Personal Data (Privacy) Ordinance you may ask to see and correct your personal data. Most of your profile can be edited directly in the app under Settings. For anything else, email the address above; we reply within 40 days.

10Children

dinreferral is for business members and is not intended for anyone under 18.

11Changes

We will tell you in the app about any significant change. This page always holds the current version.