如你要求刪除 Next Treat 帳戶，我哋會撤銷不再需要嘅 Google 登入憑證，並刪除或解除系統內嘅 Google 帳戶關聯資料；你亦可以喺 Google Account 權限頁自行移除 Next Treat 存取權。
10. 兒童私隱
Next Treat 並非專為 13 歲以下兒童而設。我哋唔會明知而收集 13 歲以下兒童嘅個人資料；如你認為有相關資料被提交，請聯絡我哋。
11. 政策更新及聯絡
我哋可能因功能、服務供應商或法律要求改變而更新本政策，並會喺本頁標示新嘅生效日期。任何查閱、更正、刪除或私隱查詢，可聯絡 Next Treat 資料保障聯絡人：support@next-treat.com。
English
How Next Treat handles your data
1. About us
Next Treat (available at nexttreat.hk) is a Hong Kong dessert-shop information platform. Users can browse product information, save shops, post reviews and follow a shop owner's official link to place an order. Next Treat does not process payments, fulfil orders or provide delivery.
2. Information we collect
Depending on the features you use, we may collect:
Account information: your name, email address, email-verification status, account identifier, profile image and other basic profile information shared by Google when you sign in, together with your selected buyer or shop-owner role.
Buyer activity: saved shops, alert preferences, ratings, review content, reports, interactions with shop replies and records of clicks from Next Treat to official ordering links.
Optional verification information: a receipt image that you choose to upload for private purchase verification. The receipt is not published; public pages show only whether a review has been verified as a purchase.
Shop-owner information: submitted shop, product, price, image, allergen, availability and delivery information, official links and management activity.
Technical and security information: sign-in state, local drafts, browser or device information, IP address, timestamps, error records and security logs. Our hosting and database providers may process this information on our behalf.
3. How we use information
We use information to create and maintain accounts, synchronise saves and alerts, publish and manage shop information, display and moderate reviews, verify purchases, understand platform usage, prevent misuse, answer support requests and improve the website's reliability and experience.
Account information shared by Google is used only to create, sign in to, secure and maintain your Next Treat account. We do not sell personal information, provide it to data brokers or use Google account information for targeted advertising.
4. Public content and private information
Public: approved shop and product information, reviews you choose to publish, your display name, ratings, public shop-owner replies and the verified-purchase status.
Private: your sign-in email, private receipt files and storage locations, saved-shop list, alert settings, administrative records and security logs.
Do not put telephone numbers, home addresses, payment details or other sensitive information in a public review. If you submit content for a shop, you must have the right to publish the relevant text, images, links and business information.
5. Service providers and international processing
We use Google for sign-in, Supabase for accounts, database and file storage, and Vercel for website hosting and technical logs. They process the information needed to provide those services and operate under their own terms and privacy policies. Because these providers may operate outside Hong Kong, your information may be processed or stored in other jurisdictions.
If you follow an external ordering link such as a shop's website, Instagram or WhatsApp, information you provide afterwards is handled by the shop or external service under its own privacy practices and is outside Next Treat's control.
6. Local storage and sign-in state
We use browser storage and similar technology to keep you signed in, remember language or interface preferences and save unsubmitted shop or product drafts. Clearing browser data may sign you out and may remove drafts that have not yet been submitted.
7. Saved-shop alerts
After saving a shop, you can separately choose to receive new-batch or order-deadline alerts. Google sign-in does not enable these alerts automatically, and you can turn them off for free at any time in your account settings. Account-security, policy-update and essential service notices are handled separately from promotional alerts.
8. Retention and security
We retain information only for as long as reasonably needed to operate the platform, resolve disputes, meet legal requirements and protect the service. Retention depends on the type and purpose of the information; for example, a private receipt may be kept for purchase verification or a related dispute. When information is no longer needed, we take reasonable steps to delete, anonymise or restrict it.
We use reasonable technical and organisational safeguards, but no online service can guarantee absolute security.
9. Your choices and rights
You can update certain account or shop information and turn off saves or alerts. You may also contact us to request access to or correction of personal data, deletion of an account or content, withdrawal of optional consent, or help with a privacy question. We may need to verify your identity first and will handle data-access or correction requests in accordance with applicable law. Certain information may be retained on a limited basis where required for legal, security, fraud-prevention or dispute purposes.
If you ask us to delete your Next Treat account, we will revoke Google sign-in credentials that are no longer needed and delete or disconnect the Google account association in our systems. You can also remove Next Treat's access from your Google Account permissions page.
10. Children's privacy
Next Treat is not directed to children under 13. We do not knowingly collect personal information from children under 13. Please contact us if you believe such information has been submitted.
11. Updates and contact
We may update this policy when our features, providers or legal requirements change. The new effective date will appear on this page. For access, correction, deletion or privacy questions, contact the Next Treat Data Protection Contact at support@next-treat.com.