Privacy Policy

Last updated:2026-06-21

1. Overview and Scope

Playspot Company Limited (hereinafter referred to as "the Company", "we") is committed to complying with all provisions of the Hong Kong Personal Data (Privacy) Ordinance (Chapter 486, hereinafter referred to as "PDPO") and protecting your personal data privacy.

This Privacy Policy applies to personal data that the Company collects, holds, processes, and uses when you use the Platform (https://playspot.com.hk and its subdomains).

2. Personal Data We Collect

Depending on how you use the Service, we may collect the following data:

A. Account Data (Logged-in Users)

  • •Email address (provided by Google login)
  • •Display name and avatar (provided by Google account, if permitted by user)
  • •Login time and session records

B. Usage Behavior Data

  • •Shortlist records: Venues you have saved
  • •Referral click records: Venues and times when you click "Book Now" or external links (used for internal analysis and improving referral effectiveness)
  • •Search queries and filter criteria (anonymized)

C. Booking and Payment Data (After Instant Booking Launch)

  • •Booking details (date, time slot, number of people, venue)
  • •Payment is processed by Stripe; the Company does not directly store complete bank card information

D. Contact Data

  • •Name and contact information provided when you actively contact us (e.g., email inquiries)

E. Technical Data (Automatically Collected)

  • •IP address, browser type, device data
  • •Visited pages and time (server logs)
  • •Cookies and similar technologies (see Section 6)

3. Purposes of Collection

We collect personal data for the following purposes:

  • •Provide and maintain the Platform's functions (account login, shortlisting, referral, etc.)
  • •Process bookings and payments (applicable after instant booking launch)
  • •Send account-related service notifications (e.g., booking confirmations, claim approvals)
  • •Analyze and improve Platform features and user experience
  • •Respond to relevant inquiries
  • •Comply with applicable legal requirements
  • •(If you explicitly consent) Send promotional information or venue recommendation newsletters

4. Third-Party Service Providers

To provide the Service, we may transfer your personal data to the following third-party processors. We only share data to the extent necessary and require relevant parties to protect your personal data in accordance with applicable law.

Google (Login Service)

The Platform uses Google OAuth for login authentication. When you choose to log in with your Google account, Google will process your data in accordance with Google's Privacy Policy. For details, visit https://policies.google.com/privacy.

Google Maps (Map Service)

Venue detail pages use the Google Maps Embed API to display maps. When you browse pages containing maps, Google may collect relevant data (e.g., IP address).

Stripe (Payment Processing, After Instant Booking Launch)

After the instant booking feature is launched, payments are processed by Stripe. Stripe processes payment data in accordance with PCI-DSS standards. For details, visit https://stripe.com/privacy.

Email Service Providers (such as Resend)

Used to send transactional confirmations and service notification emails. Only the necessary recipient email address is shared.

Website Analytics Tools (such as Google Analytics)

Used to analyze visitor behavior and improve services; collected data is processed in anonymized or aggregated form.

Cloud Hosting and Infrastructure

The Platform is hosted on cloud servers (including Alibaba Cloud Hong Kong region). Server providers must comply with their applicable data protection agreements.

The Company will not sell your personal data to third parties, nor will it use your data for targeted advertising without authorization.

5. Data Retention

  • •Account data is deleted within 30 days of your deletion or when the Platform terminates service.
  • •Referral click records and usage behavior data are anonymized and retained for analytical purposes, with a maximum retention period of 24 months.
  • •Booking records are retained for the period required by law (e.g., for tax compliance), typically 7 years.
  • •Email inquiry records are retained for 2 years, then deleted or anonymized.

6. Cookies and Similar Technologies

The Platform uses cookies and local storage (localStorage) to implement the following features:

  • •Essential Cookies: Maintain login status (session cookies), save user preferences.
  • •Functional Cookies: Such as remembering venue comparison lists (stored in localStorage, not sent to server).
  • •Analytical Cookies (if applicable): Anonymous tracking cookies from tools like Google Analytics.

You can manage or reject cookies through your browser settings, but disabling certain cookies may affect some features (such as login functionality).

7. Cross-Border Data Transfer

Some third-party service providers used by the Service (such as Google, Stripe) may process your data outside of Hong Kong (including the United States, European Union, etc.). The Company only conducts cross-border transfers when necessary and the region provides adequate protection, and ensures that relevant processors are bound by data protection agreements.

8. Your Rights Under PDPO

Under the Personal Data (Privacy) Ordinance (PDPO), you enjoy the following rights:

Access Right (Section 18)

You have the right to request access to your personal data held by us.

Correction Right (Section 22)

If your personal data is inaccurate, you have the right to request correction.

Right to Opt-Out of Direct Marketing (Section 35A)

You have the right to request that your personal data not be used for direct marketing purposes.

Account Deletion

You may request deletion of your account and related personal data at any time (subject to legal retention periods).

To exercise these rights, please submit a written request through the contact methods below. We will respond within 40 days of receiving your request. We may need to verify your identity before processing your request.

9. Unsolicited Electronic Messages Ordinance Unsubscribe Statement

Unsolicited Electronic Messages Ordinance (Chapter 593, UEMO)

If we send you any commercial electronic messages (including promotional emails or merchant recruitment emails), each message will include:

  • • Sender identification and our contact email
  • • A clear unsubscribe mechanism (such as an "Unsubscribe" link or replying "Unsubscribe")

You may exercise your unsubscribe right at any time, and we will stop sending you relevant commercial electronic messages within 10 working days. After unsubscribing, we may still send you transactional emails directly related to your account (such as booking confirmations).

10. Personal Data Security

The Company adopts reasonable technical and organizational measures to protect your personal data against unauthorized access, disclosure, modification, or destruction, including: data transmission encryption (HTTPS/TLS), database access controls, and regular security reviews. However, the internet itself carries inherent risks, and the Company cannot guarantee absolute security of data.

11. Policy Amendments

The Company reserves the right to amend this Privacy Policy. The amended version will be published on this page with the "Last updated" date updated. We recommend that you review this policy regularly. If there are significant changes to this policy, the Company will make reasonable efforts to notify registered users via email or platform announcement.

12. Contact Us

If you have any questions about this Privacy Policy or wish to exercise your rights under the PDPO, please contact our Data Protection Officer:

Data Protection Officer

Playspot Company Limited

Email: hello@playspot.com.hk

If you are dissatisfied with how the Company handles your personal data, you may also lodge a complaint with the Office of the Privacy Commissioner for Personal Data (PCPD) in Hong Kong: www.pcpd.org.hk