私隱政策

草擬本 Draft — 本文件為草擬版本，正式使用前須由法律顧問審閱。 This document is a draft and must be reviewed by a legal adviser before it is relied on.

滔愉教育（香港）有限公司（「本公司」、「我們」）重視你的私隱。本政策說明我們在 toyoueducation.com 網站（「本網站」）及讀力大冒險遊戲與教師平台（統稱「服務」）中，如何收集、使用、披露及保護個人資料。我們依循香港《個人資料（私隱）條例》（第486章）（「《私隱條例》」）及其保障資料原則處理個人資料。

To You Education (Hong Kong) Limited ("we", "us") respects your privacy. This policy explains how we collect, use, disclose and protect personal data on toyoueducation.com (the "Site") and in the 讀力大冒險 game and teacher portal (together, the "Services"). We handle personal data in line with the Hong Kong Personal Data (Privacy) Ordinance (Cap. 486) ("PDPO") and its Data Protection Principles.

InsightMeter (insightmeter.site) and 補位通 FillSlot (fillslot.insightmeter.site) have their own privacy policies on their own websites; this policy does not cover them.

K1／PN 報名時間表代整理：此服務經 WhatsApp（或你選擇的電郵）進行，只收集整理時間表所需的資料（小朋友出生年月、居住地區、K1／PN、目標學校、日曆類型、提醒日數及聯絡方式），用途只限製作及更新你的報名包，完成服務後即刪除個人資料。本網站不設表格收集這些資料。

K1/PN application timeline service: handled over WhatsApp (or e-mail if you prefer). We only collect what is needed to prepare your pack (child's birth year and month, district, K1/PN, target schools, calendar type, reminder days and contact details), use it only to prepare and update your pack, and delete the personal data once the service is complete. This website has no form collecting this data.

1. 我們收集的資料Information we collect

• 教師／學校帳戶：學校ID、學校名稱及登入密碼。密碼以雜湊（hash）方式儲存，我們不會儲存密碼原文。Teacher / school accounts: School ID, school name and password. Passwords are stored as hashes, not in plain text.
• 學生帳戶：由學校或教師提供的學生ID，以及學生所屬學校。登入學生帳戶不需要姓名、電郵或電話。我們建議學校不要以學生真實姓名作為學生ID。Student accounts: a Student ID issued by the school or teacher, and the student's school. No name, e-mail or phone number is needed to sign in. We recommend schools do not use students' real names as Student IDs.
• 遊戲作答數據：學生回答的題目、所選答案、是否正確及作答所用時間，並與該學生ID及學校連結，用作學習分析。Game answer data: the question answered, the answer given, whether it was correct and the time taken to answer, linked to the Student ID and school, for learning analytics.
• 技術資料：伺服器在你瀏覽本網站時會自動記錄 IP 位址、瀏覽器類型、存取時間及所瀏覽的頁面，用於保安及排除故障。Technical data: our servers automatically log IP address, browser type, time of access and pages requested, for security and troubleshooting.

2. Cookie 及登入階段Cookies and sessions

本網站只在你登入教師或學生帳戶時使用必要的登入階段 Cookie（session cookie），用以記住你已登入。本網站不使用廣告 Cookie，亦沒有安裝第三方網站分析工具。你可在瀏覽器中刪除或封鎖 Cookie，但這樣可能無法登入。

The Site uses a strictly necessary session cookie only to keep you signed in to a teacher or student account. The Site does not use advertising cookies and does not run third-party web-analytics tools. You can delete or block cookies in your browser, but you may then be unable to sign in.

本網站從 Google Fonts（fonts.googleapis.com）載入字型，教師平台從 jsDelivr（cdn.jsdelivr.net）載入圖表程式庫；這些服務供應商會因此接收到你的 IP 位址及瀏覽器資料。電子書的「Kobo」連結會帶你到 Kobo 網站，該網站受其本身的私隱政策約束。

The Site loads fonts from Google Fonts and the teacher portal loads a charting library from jsDelivr; these providers therefore receive your IP address and browser information. eBook links take you to Kobo, which has its own privacy policy.

3. 使用目的How we use information

• 提供登入及帳戶功能。To provide sign-in and accounts.
• 向學生所屬學校的教師顯示作答數、正確數及正確率分析。To show teachers at the student's school the number of answers, correct answers and accuracy.
• 改善遊戲內容及題目。To improve the game's content and questions.
• 維護服務的保安、防止濫用及排除故障。To keep the Services secure, prevent misuse and fix problems.

我們不會出售個人資料，亦不會將個人資料用於直接促銷。 We do not sell personal data or use it for direct marketing.

4. 披露對象Who we share it with

• 學生的作答數據只會向該學生所屬學校的教師帳戶顯示。A student's answer data is shown only to the teacher account of that student's school.
• 代我們提供伺服器託管等服務的供應商，只會按我們的指示處理資料。Service providers such as our cloud hosting provider, who process data only on our instructions.
• 法律要求或執法機構依法要求時。Where required by law or by a lawful request from authorities.

5. 兒童及學生資料Children and student data

讀力大冒險的使用者是小學生。學生帳戶由學校建立及管理；學校負責按其政策向家長或監護人作出所需通知及取得同意。家長如對子女的資料有疑問，可聯絡學校或本公司。

讀力大冒險 is used by primary school students. Student accounts are created and managed by schools, which are responsible for giving any notice to, and obtaining any consent from, parents or guardians under their own policies. Parents with questions may contact the school or us.

6. 保留期限Retention

我們只會在達到收集目的所需的期間內保留個人資料。[待確認：資料保留期限（例如：學校帳戶終止後 X 個月內刪除）]

We keep personal data only as long as needed for the purposes above.

7. 資料保安Security

我們採取合理措施保護個人資料，包括以 HTTPS 加密傳輸、以雜湊方式儲存密碼，以及限制伺服器存取權限。然而，任何互聯網傳輸都不能保證絕對安全。

We take reasonable steps to protect personal data, including HTTPS encryption in transit, hashed passwords and restricted server access. No internet transmission is completely secure.

8. 查閱及改正資料Access and correction

根據《私隱條例》，你有權要求查閱及改正我們所持有關於你的個人資料。如要提出要求，請電郵至 to.you.education@gmail.com。我們可能就處理查閱資料要求收取不超乎適度的費用。學生資料的要求一般應經由學校提出。

Under the PDPO you may request access to, and correction of, personal data we hold about you by e-mailing the address above. We may charge a fee that is not excessive for a data access request. Requests about student data should normally be made through the school.

9. 政策修訂Changes

我們可能不時更新本政策，並會在本頁更新「最後更新」日期。 We may update this policy from time to time and will change the "Last updated" date on this page.

10. 聯絡我們Contact

滔愉教育（香港）有限公司 / To You Education (Hong Kong) Limited
電郵 E-mail：to.you.education@gmail.com
WhatsApp：+852 5938 8702

如中英文版本有任何不一致，以中文版本為準。 If there is any inconsistency between the Chinese and English versions, the Chinese version prevails.