PRIVACY· 私隱
Your details, for your order
只處理查詢、圖稿、製作及送貨所需資料。
This working notice describes the private-demo data flow. The verified legal identity, privacy contact, service-provider list and retention schedule are not yet available and are not invented here.以下工作說明交代私人示範版資料流程；已核實法律身份、私隱聯絡人、服務供應商名單及資料保留安排尚未完成，網站不會自行虛構。
What the order flow collects 訂單流程會收集甚麼
We collect the requester's name, mobile, email and contact preference; recipient, address and venue details; occasion and cake configuration; correspondence and consent choices; artwork or reference files; payment-proof records; order status, production and delivery notes; and operational audit or incident records.
我們會收集申請人姓名、手提電話、電郵及聯絡偏好；收件人、地址及場地資料；場合及蛋糕配置；通訊及同意選擇；圖稿或參考檔案；付款證明紀錄；訂單狀態、製作及送貨備註；以及營運審計或事故紀錄。
How the details are used 資料用途
The information is used to review availability and feasibility, prepare a price or quotation, communicate revisions, verify payment, prepare artwork, produce and deliver an accepted order, provide order tracking, reconcile finance, investigate incidents and meet applicable operational or legal obligations.
資料用於審核檔期及可行性、準備價錢或報價、溝通修改、核對付款、準備圖稿、製作及送遞已確認訂單、提供訂單追蹤、財務對帳、調查事故，以及履行適用的營運或法律責任。
Who may need access 誰可能需要存取
Access should be limited to authorised administrators and the production, artwork, delivery or technology providers needed to fulfil and support the order. Information should only be shared for the relevant operational purpose. The identities, locations and contractual safeguards for those providers remain to be verified before public launch.
只有獲授權管理員，以及完成及支援該訂單所需的生產、圖稿、送貨或技術服務方，才應按相關營運目的存取資料。這些服務方的身份、地點及合約保障仍須在公開上線前核實。
Artwork and payment proofs stay private 圖稿及付款證明保持私人
Customer uploads are treated as private order records, not public gallery content. They must not be used for another customer, a portfolio, social media, model training or marketing without separate, specific permission. Uploaded files are validated and accessed through authorised workflows; do not upload unnecessary identity documents or unrelated sensitive information.
客戶上載內容視為私人訂單紀錄，而非公開作品集。未另行取得明確同意，不得用於其他客戶、作品集、社交媒體、模型訓練或推廣。檔案會經驗證並只可透過授權流程存取；請勿上載不必要的身份證明或與訂單無關的敏感資料。
Retention and deletion are not finalised 保留及刪除期限尚未落實
Order, artwork, payment and audit records must not be kept longer than needed for their stated purpose and applicable obligations. However, no precise retention period is published because it has not yet been approved. The admin Launch Readiness checklist must keep this as a blocker until each record type has a verified retention period and deletion process.
訂單、圖稿、付款及審計紀錄不應超過其所述用途及適用責任所需時間保留；但由於正式期限尚未批准，本頁不會虛構確切日數。管理後台須把此項保留為 Launch Readiness 阻擋項，直至每類紀錄都有已核實保留期限及刪除流程。
Cookies, analytics and advertising Cookie、分析及廣告
Necessary storage supports language, consent and essential order functions. Google analytics or advertising tags are not loaded until the visitor actively accepts them in Cookie Settings. Declining optional tags does not prevent an order. Visitors can reopen Cookie Settings and change their choice on the same device.
必要儲存只用於語言、同意選擇及訂單必要功能。訪客主動在「Cookie 設定」同意前，網站不會載入 Google 分析或廣告標籤；拒絕選用標籤不會影響落單。訪客可在同一裝置重新開啟 Cookie 設定更改選擇。
Marketing is a separate choice 推廣同意獨立處理
Email or WhatsApp marketing consent is separate from an order request. Declining marketing must not prevent a request or affect its review. Order details, recipients and uploaded images must not be reused for remarketing without an appropriate independent choice and a verified opt-out process.
電郵或 WhatsApp 推廣同意與訂單申請分開。拒絕推廣不會阻止提交申請或影響審核。未有適當獨立選擇及已核實退出方法前，不得把訂單、收件人或上載圖片重新用作推廣。
Questions, access and correction 查詢、存取及更正
A verified privacy contact and response process must be published before launch. Until then, a customer can keep their order reference and use the official order correspondence to raise an operational correction, but this does not replace the final privacy-rights process.
公開上線前必須刊登已核實的私隱聯絡及回應流程。在此之前，客戶可保留訂單編號並透過正式訂單通訊提出營運資料更正，但這不能取代最終私隱權利處理程序。