隱私權政策Privacy Policy

本隱私權政策說明 SIXOTHREE GROUP LIMITED（下稱「本公司」）在營運本網站及 本公司之流動應用程式（下稱「本服務」）期間，如何收集、使用、儲存及披露個人資料。使用本服務即表示您同意本政策所述之處理方式。

（一）您主動提供的資料：當您透過查詢表格、電郵或應用程式與我們聯繫時，我們可能收集您的稱呼、公司或物業名稱、電郵地址、聯絡電話，以及您在訊息內容中提供的其他資料。

（二）自動收集的技術資料：為維持服務運作及排除故障，我們可能記錄裝置型號、作業系統版本、應用程式版本、語言設定、概略存取時間及匿名化的錯誤報告。

（三）本公司不會收集通訊錄、健康或財務資料，亦不會透過本服務收集信用卡或銀行帳戶資料。就本網站而言，我們不會收集地理位置資料；員工管理應用程式的資料處理另見第五節。

我們僅在以下目的範圍內使用上述資料：回應您的查詢及提供報價；提供、維護及改善本服務；與您就已提出之需求進行跟進溝通；偵測及防範濫用、詐騙或技術故障；以及履行適用法律或監管機構之要求。

我們不會將您的個人資料用於與上述目的無關之自動化決策或行為廣告投放。

本公司不會出售、出租或以商業方式交易您的個人資料。

僅在下列情況下，我們可能向第三方披露資料：（一）為營運本服務而委聘之服務供應商（例如網站寄存及資料庫服務商），且該等供應商僅可依本公司指示處理資料；（二）法律、法院命令或具管轄權之政府機關要求；（三）為保障本公司、使用者或公眾之合法權益而有合理必要時。

本公司為物業管理公司開發及部署員工管理應用程式。該類應用程式由作為僱主的物業管理公司（下稱「企業客戶」）向其員工發放使用；就當中的員工個人資料而言，企業客戶為資料使用者，本公司按其指示提供技術服務。

視乎企業客戶啟用的模組，應用程式可能收集：（一）員工執行打卡或巡邏打點時的地理位置及時間；（二）員工就工單、保養或事故上載的相片、影片及文字紀錄；（三）考勤、更表、加班及假期紀錄；（四）員工姓名、職位、聯絡方式及證照有效期等在職資料。

地理位置僅於員工主動執行打卡、巡邏打點或事故上報等操作時記錄，不會在背景持續追蹤員工行蹤。應用程式亦不會讀取員工裝置上的通訊錄或相片圖庫；相片只限於員工在應用程式內即時拍攝或主動選取上載者。

上述資料供企業客戶作考勤管理、服務紀錄、事故調查及法定合規之用，不會用於與僱傭管理無關之目的，亦不會提供予無關第三方。

員工如欲查閱、更正或刪除其個人資料，應向其僱主（即企業客戶）提出；本公司會按企業客戶的合法指示配合處理。

我們僅在達成收集目的所需之期間內保留您的個人資料；查詢紀錄一般保留不超過二十四個月，法律另有較長保存要求者除外。

您可隨時以電郵 sixothreegroup@gmail.com 要求查閱、更正或刪除您的個人資料。我們會在核實您的身分後，於合理期間內處理有關要求。

我們採取合理的技術及管理措施保護個人資料，包括加密傳輸（HTTPS）、存取權限控制，以及僅限獲授權人員接觸相關資料。惟互聯網傳輸並非絕對安全，我們無法保證絕對之資料安全性。

本服務並非以十三歲以下兒童為對象，我們亦不會在知情情況下收集兒童之個人資料。如發現有關資料在未經家長或監護人同意下被收集，我們會盡快予以刪除。

在適用法律（包括香港法例第 486 章《個人資料（私隱）條例》）容許之範圍內，您有權要求查閱、更正、刪除或限制處理您的個人資料，亦有權撤回先前作出的同意。行使上述權利不影響撤回前已進行之處理的合法性。

本公司可能不時修訂本政策。修訂後之版本一經在本頁面公佈即告生效，並會同步更新頁首之最後更新日期。如屬重大變更，我們會透過本服務作出顯著提示。

如對本政策或個人資料處理有任何疑問，請電郵至 sixothreegroup@gmail.com 與我們聯絡。

This Privacy Policy explains how SIXOTHREE GROUP LIMITED ("we", "us") collects, uses, stores and discloses personal data in the course of operating this website and our mobile application (together, the "Service"). By using the Service you agree to the practices described here.

(a) Information you provide: when you contact us through an enquiry form, by email or within the application, we may collect your name, company or property name, email address, telephone number and any other information contained in your message.

(b) Technical information collected automatically: to operate the Service and diagnose faults we may record device model, operating system version, application version, language setting, approximate access time and anonymised crash reports.

(c) We do not collect contacts, health or financial data, and we do not collect credit card or bank account details through the Service. No location data is collected through this website; data handling in the workforce management application is set out in section 5.

We use the above information only to respond to your enquiries and provide quotations; to provide, maintain and improve the Service; to follow up on requests you have made; to detect and prevent abuse, fraud or technical failures; and to comply with applicable laws or regulatory requirements.

We do not use your personal data for automated decision-making or behavioural advertising unrelated to these purposes.

We do not sell, rent or otherwise trade your personal data.

We may disclose data to third parties only where: (a) service providers engaged to operate the Service (such as website hosting and database providers) process it strictly on our instructions; (b) disclosure is required by law, court order or a competent authority; or (c) it is reasonably necessary to protect the legitimate interests of the company, our users or the public.

We develop and deploy workforce management applications for property management companies. Such applications are issued to staff by the property management company acting as employer (the "enterprise client"). In respect of the employee data held within them, the enterprise client is the data user and we provide technical services on its instructions.

Depending on the modules enabled by the enterprise client, the application may collect: (a) the location and time at which an employee clocks in or logs a patrol checkpoint; (b) photos, videos and written records uploaded by employees for work orders, maintenance or incidents; (c) attendance, roster, overtime and leave records; and (d) employment details such as name, position, contact information and credential expiry dates.

Location is recorded only when an employee actively clocks in, logs a patrol checkpoint or reports an incident; the application does not track employees continuously in the background. It does not read the contacts or photo library on an employee's device — photos are limited to those taken within the application or deliberately selected for upload.

This data is used by the enterprise client for attendance management, service records, incident investigation and statutory compliance. It is not used for purposes unrelated to employment management, nor disclosed to unrelated third parties.

Employees wishing to access, correct or delete their personal data should address the request to their employer (the enterprise client); we will assist in accordance with the enterprise client's lawful instructions.

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected. Enquiry records are generally kept for no longer than twenty-four months, unless a longer retention period is required by law.

You may request access to, correction of, or deletion of your personal data at any time by emailing sixothreegroup@gmail.com. We will act on verified requests within a reasonable period.

We apply reasonable technical and organisational measures to protect personal data, including encrypted transmission (HTTPS), access controls and restriction of access to authorised personnel. No transmission over the internet is completely secure, and we cannot guarantee absolute security.

The Service is not directed at children under the age of 13, and we do not knowingly collect personal data from children. If we become aware that such data has been collected without parental or guardian consent, we will delete it promptly.

To the extent permitted by applicable law, including the Personal Data (Privacy) Ordinance (Cap. 486) of Hong Kong, you have the right to request access to, correction of, deletion of, or restriction of the processing of your personal data, and to withdraw any consent previously given. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

We may revise this policy from time to time. A revised version takes effect once published on this page, and the last-updated date above will be amended accordingly. Where changes are material, we will provide a prominent notice within the Service.

If you have any question about this policy or about how your personal data is handled, please contact us at sixothreegroup@gmail.com.