關於優築

隱私權政策

生效日期：2018 年 1 月 1 日

Northwood Limited（「本公司」、「我們」）註冊地為香港，負責營運網站 www.northwoodlimited.com（「本網站」）。本隱私權政策（「本政策」）說明我們如何收集、使用、儲存、保護及處理你在使用本網站時提供或我們自動收集的個人資料，以及你就該等資料所享有的權利。

本政策適用於本網站所有訪客、用戶及服務使用者。使用本網站，即代表你同意本政策所載條款；如你不同意，請勿使用本網站。

1. 適用法律

本政策依據香港《個人資料（私隱）條例》（第 486 章，「私隱條例」）制定，遵循六項保障資料原則。

2. 我們收集的個人資料

我們可能收集以下類別的個人資料（以必要且不過度為限）：

你主動提供：姓名、電郵地址、電話、公司名稱、職銜、聯絡內容（如透過表單、電郵、諮詢提交）

自動收集（瀏覽期間）：IP 位址、瀏覽器類型、裝置資訊、瀏覽頁面、停留時間、點擊行為、語言設定、referral URL

交易相關（如適用）：付款資訊（我們不直接儲存完整信用卡號，由支付處理商處理）、帳單地址、交易紀錄

3. 收集資料之目的

我們僅將個人資料用於以下合法、與業務直接相關之目的：

提供、維護及優化本網站功能與服務

回覆你的查詢、請求或客戶支援

處理交易、合約執行及後續聯繫

發送服務通知、技術更新或管理資訊（非行銷）

網站安全、防禦攻擊、詐騙偵測與預防

內部分析、統計與效能改善（可採匿名 / 聚合形式）

遵守法律義務、回應政府或監管要求

執行本網站使用條款與本政策

4. 資料分享與披露

我們不會出售、租賃或商業轉讓你的個人資料。我們僅在以下情況披露：

獲得你明示同意

法律要求（如法院命令、传票、政府調查）

保護本公司、用戶或公眾之合法權益、安全或財產

與提供必要服務之受保密約束的第三方供應商共享（如主機托管、IT 維護、支付處理、郵件發送、客戶支援工具），該等第三方僅可依我們指示處理資料，不得另作他用

公司重組、合併、收購或資產出售（資料可能作為業務一部分轉移，並仍受本政策約束）

5. 資料保留

我們僅在實現收集目的所需之最短時間內保留個人資料：

一般查詢資料：自最後聯繫日起 7 年（符合香港商業紀錄保留慣例）

帳戶 / 交易資料：依法律與稅務要求保留

網站瀏覽紀錄（分析用）：匿名化後保留，或定期刪除

你要求刪除 / 更正時，我們將依法處理（法律豁免除外）

6. 資料安全

我們採取符合業界標準的技術與組織措施保護個人資料：

傳輸加密（HTTPS/TLS）

敏感資料加密儲存

存取權限控制、最小權限原則

定期安全更新、漏洞修復

員工保密義務與存取審計

但互聯網傳輸無法保證絕對安全，你需自行承擔傳輸風險。

7. Cookie 與追蹤技術

本網站使用 Cookie 及類似技術（如像素標籤、本地存儲）以改善體驗、分析流量、記住偏好。

必要 Cookie：網站運作必需，無法關閉

分析 / 效能 Cookie（如 Google Analytics）：匿名收集瀏覽資訊，協助我們改善網站

你可透過瀏覽器設定拒絕或刪除 Cookie，但可能影響部分功能使用。

8. 國際資料傳輸

你的資料可能被轉移至香港以外地區（如云服務供應商）。我們將遵守私隱條例關於跨境資料轉移之要求，確保接收地提供相當於香港的保護水平，或獲得你明示同意。

9. 你的權利（私隱條例下）

你有權：

查閱：要求我們提供你個人資料的副本及相關處理資訊

更正：要求更正不準確或不完整的資料

刪除：在資料不再必要、或你撤回同意（且無其他合法理由繼續處理）時，要求刪除

撤回同意：撤回你先前給予的同意（不影響撤回前的合法處理）

限制處理：在特定情況下要求限制處理

資料可攜性：在適用範圍內要求取得結構化、常用格式的資料

反對：反對基於合法利益的處理（我們需證明有壓倒性合法理由）

行使權利：請聯絡下方「聯絡我們」。我們將依法回應，並可能收取合理費用（依私隱條例允許）。

10. 第三方網站

本網站可能包含連結至第三方網站（如社群媒體、合作夥伴）。我們不控制該等網站的隱私實務，建議你查閱其隱私權政策。

11. 兒童隱私

本網站不針對 18 歲以下人士。如你發現我們未經家長同意收集未成年人資料，請聯絡我們，我們將立即刪除。

12. 政策更新

我們可不時修訂本政策。重大變更將於本網站顯著位置公告，或透過電郵通知（如你留有聯絡資訊）。繼續使用本網站即視為接受更新後的政策。

13. 聯絡我們

如你對本政策、資料處理或隱私權有任何查詢、請求或投訴，請聯絡：

Northwood Limited

電郵：privacy@northwoodlimited.com

地址：香港（公司註冊地址可補充）

個人資料私隱主任（PDPO Contact Person）：privacy@northwoodlimited.com

你亦有權向 ** 香港個人資料私隱專員公署（PCPD）** 提出投訴。

English Version（英文正式版）

Privacy Policy

Effective Date: 1 Jan 2018

Northwood Limited (“we”, “us”, “our”) is a company incorporated in Hong Kong, operating the website www.northwoodlimited.com (the “Site”). This Privacy Policy (the “Policy”) explains how we collect, use, store, protect and process personal data you provide or we automatically collect when you use the Site, and your rights in relation to that data.

This Policy applies to all visitors, users and service users of the Site. By using the Site, you consent to the terms of this Policy; if you do not agree, please do not use the Site.

1. Governing Law

This Policy is governed by the Personal Data (Privacy) Ordinance (PDPO) (Cap. 486) of Hong Kong, adhering to the six data protection principles.

2. Personal Data We Collect

We may collect the following categories of personal data (necessary and not excessive):

Data you voluntarily provide: name, email address, phone number, company name, job title, communication content (e.g., via forms, emails, inquiries)

Automatically collected data (during browsing): IP address, browser type, device information, pages visited, time spent, click behavior, language settings, referral URL

Transaction-related data (if applicable): payment information (we do not store full credit card details directly; processed by payment providers), billing address, transaction records

3. Purposes of Collection

We use personal data only for lawful, business-related purposes:

To provide, maintain and optimize the Site’s functions and services

To respond to your inquiries, requests or customer support

To process transactions, perform contracts and follow up

To send service notifications, technical updates or administrative messages (non-marketing)

For website security, attack defense, fraud detection and prevention

For internal analysis, statistics and performance improvement (anonymized/aggregated where possible)

To comply with legal obligations and respond to government or regulatory requests

To enforce the Site’s Terms of Use and this Policy

4. Data Sharing and Disclosure

We do not sell, lease or commercially transfer your personal data. We disclose only in the following cases:

With your explicit consent

As required by law (e.g., court order, subpoena, government investigation)

To protect the legitimate rights, safety or property of us, users or the public

With confidential third-party service providers (e.g., hosting, IT maintenance, payment processing, email delivery, support tools) who process data only per our instructions and not for other purposes

In the event of restructuring, merger, acquisition or asset sale (data may be transferred as part of the business and remains subject to this Policy)

5. Data Retention

We retain personal data only for the shortest time necessary to fulfill the purposes collected:

General inquiry data: 7 years from last contact (Hong Kong business record practice)

Account/transaction data: retained as required by law and tax obligations

Site browsing data (analytics): retained anonymized or deleted periodically

Upon your request for deletion/correction, we will process as required by law (except legal exemptions)

6. Data Security

We implement industry-standard technical and organizational measures to protect personal data:

Encryption in transit (HTTPS/TLS)

Encrypted storage for sensitive data

Access control and least privilege principle

Regular security updates and vulnerability patching

Employee confidentiality obligations and access auditing

No internet transmission can be absolutely secure; you use the Site at your own risk.

7. Cookies and Tracking Technologies

The Site uses Cookies and similar technologies (e.g., pixels, local storage) to enhance experience, analyze traffic and remember preferences.

Necessary Cookies: essential for Site operation, cannot be disabled

Analytics/Performance Cookies (e.g., Google Analytics): anonymously collect browsing information to help us improve the Site

You may refuse or delete Cookies via browser settings, but some features may be affected.

8. International Data Transfers

Your data may be transferred outside Hong Kong (e.g., cloud providers). We comply with PDPO requirements for cross-border data transfers, ensuring the recipient country provides adequate protection equivalent to Hong Kong, or with your explicit consent.

9. Your Rights (under PDPO)

You have the right to:

Access: request a copy of your personal data and related processing information

Correction: request correction of inaccurate or incomplete data

Erasure: request deletion when data is no longer necessary, or you withdraw consent (and no other legal basis for processing)

Withdraw Consent: withdraw previously given consent (without affecting lawfulness before withdrawal)

Restriction: request restriction of processing under certain circumstances

Data Portability: request data in a structured, commonly used format where applicable

Object: object to processing based on legitimate interests (we must demonstrate compelling legitimate grounds)

To exercise your rights: contact us via the “Contact Us” section below. We will respond as required by law and may charge a reasonable fee (as permitted by PDPO).

10. Third-Party Websites

The Site may contain links to third-party websites (e.g., social media, partners). We do not control their privacy practices; please review their privacy policies.

11. Children’s Privacy

The Site is not intended for individuals under 18. If you become aware we have collected minor data without parental consent, contact us and we will delete it immediately.

12. Policy Updates

We may revise this Policy from time to time. Material changes will be posted prominently on the Site or notified via email (if you provided contact information). Continued use of the Site constitutes acceptance of the updated Policy.

13. Contact Us

For inquiries, requests or complaints regarding this Policy, data processing or privacy rights:

Northwood Limited

Email: privacy@northwoodlimited.com

Address: Hong Kong (registered office address may be added)

PDPO Contact Person: privacy@northwoodlimited.com

You may also contact the Office of the Privacy Commissioner for Personal Data (PCPD), Hong Kong to file a complaint.