Privacy Policy 隐私政策

1. Who operates this website 网站运营方

This policy applies to the Catfé Māo website at https://catfemao.com/, including online reservations, booking management, waiting lists, gift tickets, voluntary cat-care contributions, customer messages and optional Google sign-in. The café is located at 240 Broadway, Newmarket, Auckland 1023, New Zealand.

本政策适用于 Catfé Māo 官网、线上预约、预约管理、候补、电子礼品票、猫咪自愿支持款、顾客通知及可选的 Google 登录。门店地址为新西兰奥克兰 Newmarket，240 Broadway，邮编 1023。

2. Information we collect 我们收集的资料

• Reservations and visits: name, email address, contact phone number, guest count, requested date and session, changes or cancellations, attendance/check-in status, waiting-list choices, and notes you choose to provide.
• Gift tickets and enquiries: sender and recipient details, delivery preferences, gift messages, purchase or redemption references, and information submitted in contact or adoption enquiries where applicable.
• Voluntary cat-care contributions: contribution amounts and frequencies, payment references, billing contact details, and payment information processed securely by Stripe. Catfé Māo does not collect card numbers in its booking form.
• Website operation: necessary session and security cookies, basic technical information such as IP address and browser/device details, and website usage information through configured analytics tools.

预约和到访资料可能包括姓名、邮箱、电话、预约人数与场次、改期或取消记录、签到状态、候补选择及主动填写的备注。电子礼品票与咨询可能涉及收件人、送礼信息、发送时间、购买／核销记录或领养咨询。自愿猫咪支持款可能涉及金额、频率、交易编号与账单联系资料；支付卡信息由 Stripe 在安全支付页面处理，猫咖预约表单不会收集银行卡号。网站运行还可能处理必要的会话及安全 Cookie、IP 地址、设备／浏览器信息与网站使用统计。

Please avoid including unnecessary sensitive information in free-text booking notes or gift messages.

请勿在预约备注或礼品留言中填写与服务无关的敏感个人信息。

3. Optional Sign in with Google 可选的 Google 登录

Google Identity Services is an optional alternative to entering an email verification code. When you choose Google sign-in, Google supplies an ID token containing your Google account identifier, email address, email-verification status and basic profile information such as your display name. Our server verifies the token's signature, issuer, intended audience and validity before signing you in.

We store your Google account identifier and verified email address to link future sign-ins to the correct customer account. Your display name may prefill your booking form, but it is only included in a booking record when you submit that form. We create a short-lived customer session. We do not store your Google password, do not keep a Google access or refresh token for ongoing access, and do not request permission to read Gmail, Google Drive, Google Calendar or your contacts.

We use Google sign-in information only to authenticate you, associate the verified email with bookings and help prevent fraudulent account access. We do not sell it or use it to build advertising profiles. You may choose email verification instead. Google's handling of the sign-in process is subject to Google's Privacy Policy.

Google Identity Services 登录是邮件验证码的可选替代方式。选择 Google 登录时，Google 提供包含账号唯一标识、邮箱、邮箱验证状态及显示名称等基本资料的身份令牌；我们的服务器会验证令牌签名、签发方、适用客户端及有效期。我们保存 Google 账号标识与已验证邮箱用于识别顾客账号；显示名称可能自动填写预约表单，只有提交预约后才会保存为预约资料。我们不会取得或保存 Google 密码，不会保留可持续访问 Google 服务的访问／刷新令牌，也不申请读取 Gmail、Google Drive、Google Calendar 或联系人权限。这些身份信息只用于验证身份、衔接预约和防止账号冒用，不用于出售或建立广告画像。你仍可使用邮件验证码登录。

4. How we use information 资料使用目的

We use information to accept and manage reservations and waiting lists, confirm visits, communicate service changes, send booking verification codes, confirmations, reminders and relevant post-visit messages, deliver or redeem gift tickets, record and administer voluntary cat-care contributions and monthly payments, respond to enquiries, provide customer assistance, maintain service security, and understand the performance of our website. Booking and service messages are distinct from optional marketing communications.

我们使用相关资料来建立、管理及确认预约和候补，发送验证码、预约确认、提醒、变更和相关到访后服务消息，发送与核验电子礼品票，记录与管理猫咪自愿支持款及月捐，回应顾客咨询，保障系统安全，并了解网站的整体使用情况。与预约直接相关的服务通知不等同于可选营销信息。

5. Service providers, sharing and overseas processing 服务供应商、资料共享及境外处理

We use trusted service providers to operate the website and deliver services. These include our website and booking host (Render), transactional email providers, Google for optional sign-in and analytics, and Stripe where digital gift-ticket payments and cat-care contributions are available. Such providers may process information outside New Zealand. We share only information reasonably necessary for their functions, or when required by law. We do not sell customer personal information.

Where a payment provider handles a purchase, its own privacy and payment terms may also apply. Catfé Māo does not need your Google password or access to private Google files to provide a booking.

我们使用服务供应商运行网站与提供服务，例如 Render 网站及预约托管、事务性邮件发送商、用于可选登录与流量分析的 Google，以及处理电子礼品票与猫咪支持款的 Stripe。部分资料可能由新西兰境外的供应商处理。我们仅在提供相应服务或法律要求的范围内共享必要资料，不出售顾客个人资料。涉及付款时，支付服务商自己的隐私及付款条款也可能适用。

6. Cookies and analytics Cookie 与网站统计

Essential cookies help keep customer login and booking sessions secure. A signed-in customer session can last up to 24 hours; the Google sign-in challenge uses a short-lived security cookie. We also use configured website analytics, such as Google Analytics, to understand traffic and improve the site. These tools may process technical identifiers and visit information. Browser settings can restrict cookies, although blocking essential cookies may prevent sign-in or some booking features from working.

必要 Cookie 用于保护顾客登录及预约会话；顾客登录会话最长有效 24 小时，Google 登录验证使用短时安全 Cookie。网站也可能使用 Google Analytics 等统计工具了解访问情况，以持续改善体验，相关工具可能处理技术标识与访问数据。你可以在浏览器中限制 Cookie，但禁用必要 Cookie 可能影响登录和预约功能。

7. Security and data retention 资料安全与保留

We use measures appropriate to an online booking service, including HTTPS, server-side verification of sign-in tokens, time-limited customer sessions and staff access controls. No internet service can guarantee complete security. We retain booking, gift and customer-service records for as long as reasonably needed to provide services, resolve disputes, keep business records, maintain security and meet applicable legal obligations. The precise period depends on the type and purpose of the record. Expired customer login sessions are not intended to provide ongoing access.

我们采取适合线上预约服务的安全措施，包括 HTTPS、服务器验证身份令牌、限定顾客会话有效期，以及员工权限管理。任何互联网服务均无法承诺绝对安全。预约、礼品票与客服记录会按提供服务、处理争议、保存经营记录、保障安全及履行适用法律义务所需的合理期限保留，具体时间取决于资料类型及用途。已过期的顾客会话不能继续作为登录授权使用。

8. Your privacy choices and requests 你的隐私权利与选择

You may use email verification instead of Google sign-in, and you can sign out to end your customer session. Signing out does not cancel reservations or erase legally necessary booking records. To request access to, correction of, or deletion of personal information we hold about you, contact catfe.mao@gmail.com. We may ask you to verify your identity before disclosing or changing records, and some records may need to be retained for legal or legitimate business reasons.

你可以选择邮件验证码而非 Google 登录，并可通过退出登录结束顾客会话。退出登录不会自动取消预约或删除依法需要保留的经营记录。如需查询、更正或申请删除我们持有的个人资料，请邮件联系 catfe.mao@gmail.com。为保护隐私，我们可能会在披露或修改资料前核对身份；部分记录可能因法律或正当经营需要继续保留。

9. Children and accompanying adults 儿童与陪同成人

Children under 14 must be accompanied by a paying adult during a visit. Parents and guardians should provide or supervise the submission of reservation contact information for children.

未满 14 岁的儿童到访时须由付费成人全程陪同。儿童预约所需的联系资料应由家长或监护人填写或在其指导下提交。

10. Changes to this policy 政策更新

We may update this policy when our website, services, legal obligations or use of Google sign-in information changes. We will publish the revised policy here with an updated effective date. Material changes to how we use Google account data will be reflected in this policy before those practices take effect.

当网站功能、服务、法律要求或 Google 登录数据处理方式改变时，我们可能更新本政策，并在本页面更新生效日期。对于 Google 账号数据用途的重要变化，我们会在实施前更新公开说明。

11. Contact us 联系我们

Catfé Māo · 猫
240 Broadway, Newmarket, Auckland 1023, New Zealand
Email: catfe.mao@gmail.com

如对本政策、你的预约资料或 Google 登录信息有疑问，欢迎通过上述邮箱与我们联系。