枫缘 Maple Match 隐私政策 / Privacy Policy
⚠️ 重要声明:本文件为临时草案,尚未经执业律师审阅,正式版本以律师定稿为准。
⚠️ IMPORTANT NOTICE: This document is an interim draft. It has not been reviewed by a licensed lawyer. The final version prepared by legal counsel shall prevail.
第一部分:中文版
运营主体:[运营公司名称,待注册](注册地:加拿大安大略省,以下简称"我们"或"平台")
适用产品:枫缘 Maple Match 婚恋服务网站(内测地址:match.honghai.app,含 Web 与 PWA 形式)
生效日期:[待补]
最近更新:[待补]
内测期账号注销受理方式:在产品内的自助注销功能上线前,您可通过红娘微信或站内「举报/联系」渠道提出注销申请,我们将在核实身份后 30 天内彻底删除您的账号与全部个人信息(仅保留法律要求的最小审计记录),并向您确认。
1. 引言与适用范围
1.1 本隐私政策说明我们在您使用枫缘 Maple Match 服务时,如何收集、使用、存储、披露和删除您的个人信息。
1.2 我们遵守加拿大《个人信息保护与电子文件法》(PIPEDA)及安大略省适用法律。婚恋服务涉及高度敏感的个人信息,我们对此采取比一般网站更严格的保护标准。
1.3 您注册账号即表示已阅读并理解本政策。对敏感信息的收集,我们将另行取得您的明示同意(见第 4 条),而非仅凭注册行为推定。
2. 我们收集的个人信息
2.1 账号信息:手机号码或电子邮箱、登录凭证、注册时间。
2.2 资料与择偶问卷(敏感信息):姓名或昵称、出生日期、性别、身高、居住城市、学历、职业、收入区间、婚姻状况、是否有子女、移民/居留身份类别、宗教信仰(选填)、生活习惯、择偶偏好与期望。其中婚姻状况、宗教信仰、收入、身份类别等属敏感信息,采集时逐项明示 opt-in,选填项不填不影响基础功能。
2.3 照片:您上传的个人照片。照片存储于私有存储空间,须经人工审核通过后,方按您设定的可见权限向其他用户展示;审核不通过的照片不会对外展示。
2.4 配对与服务记录:心动/配对记录、红娘牵线沟通记录、线下活动报名信息、会员订阅档位与开通记录(内测期由管理员手动开通,我们不收集在线支付卡信息)。
2.5 技术与使用数据:设备类型、浏览器信息、IP 地址、访问日志。仅用于安全防护与故障排查,不用于广告追踪。
2.6 我们不会主动收集:政府证件号码全文、健康与基因信息、精确地理位置。若未来为实名核验需要收集证件信息,将另行单独告知并取得同意。
3. 收集与使用目的
3.1 我们仅为以下目的使用您的个人信息:
(a) 创建与管理账号,提供资料展示、浏览筛选与互相心动配对功能;
(b) 由红娘在配对成功后进行人工牵线(平台无站内聊天,联系方式仅在双方同意后经红娘转达);
(c) 组织您报名参加的线下活动;
(d) 履行会员订阅及红娘服务合同;
(e) 内容审核、反欺诈、账号安全与平台治理;
(f) 履行法律义务(如响应合法的执法要求)。
3.2 超出上述目的的新用途,我们将在使用前重新取得您的同意。我们不出售个人信息,不将您的资料用于第三方广告。
4. 同意机制(分层同意)
4.1 明示 opt-in:对第 2.2 条所列敏感信息,我们在采集界面逐类说明用途,由您逐项勾选同意后方才收集;所有同意选项默认为未勾选。
4.2 分层同意:基础账号功能、资料公开展示、敏感问卷项、照片展示范围、营销通讯,分别独立取得同意,互不捆绑。拒绝某项同意仅影响对应功能。
4.3 撤回同意:您可随时在账号设置中或通过第 14 条联系方式撤回任一层级的同意。撤回后我们将停止相应处理;撤回不影响撤回前基于同意的合法处理。
5. 营销与商业电子通讯(CASL)
5.1 我们发送营销性质的消息(如活动推广、会员优惠)前,将依《加拿大反垃圾邮件法》(CASL)单独取得您的明示同意;该同意选项不预勾选,且与注册流程分离。
5.2 每条营销消息均包含发送者身份、联系方式及一键退订方式;退订请求将在 10 个工作日内生效(我们力争即时生效)。
5.3 服务必需的事务性通知(如审核结果、配对通知、安全提醒)不属于营销消息,不受退订影响,但您可在设置中调整接收渠道。
6. 数据存储地点
6.1 您的全部个人信息(含照片)存储于位于加拿大多伦多的服务器,不向加拿大境外传输或存储。
6.2 若未来因业务需要拟变更存储地点或引入境外处理环节,我们将提前通知并按法律要求重新评估与取得同意。
7. 第三方服务商
7.1 我们仅在提供服务所必需的范围内使用以下类别的第三方处理者:
(a) 云服务器与存储服务商([待补]):托管平台与数据,数据中心位于多伦多;
(b) 短信/通知服务商([待补]):发送验证码与服务通知;
(c) 内容审核辅助服务商([待补],如启用):辅助人工审核照片与文字内容。
7.2 上述服务商仅按我们的书面指示处理数据,受合同保密与安全条款约束,无权将您的数据用于其自身目的。
7.3 除下列情形外,我们不向任何第三方披露您的个人信息:(a) 取得您的明示同意(如红娘经双方同意转达联系方式);(b) 法律强制要求;(c) 为防止对人身安全的紧迫危害且符合 PIPEDA 允许的例外。
8. 保留期限
8.1 账号存续期间,我们保留为提供服务所必需的信息。
8.2 账号删除后:资料、问卷、照片与配对记录在 30 天内从生产系统删除,备份副本在不超过 90 天的备份轮换周期内清除。
8.3 例外:为履行法律义务(如税务、会计凭证)或处理未决争议所必需的最小记录,按法定期限保留后删除。
9. 您的权利
9.1 访问权:您有权索取我们持有的关于您的个人信息副本及其使用情况说明。我们在收到请求后 30 天内答复;确需延长的,依 PIPEDA 规定通知您。
9.2 更正权:您可随时在账号内更正资料,或要求我们更正不准确、不完整的信息。
9.3 删除权(真删除):您可随时注销账号并要求删除个人信息。删除是真实删除而非"隐藏"或"停用"——按第 8.2 条时限从生产系统与备份中清除,而非仅使资料对其他用户不可见。
9.4 撤回同意权:见第 4.3 条。
9.5 行使上述权利不收取费用。为保护您的信息安全,我们可能先核验请求者身份。
10. 安全措施
10.1 我们采取与信息敏感度相称的安全措施,包括:传输与存储加密、照片私有存储与权限控制、最小权限访问、操作日志、员工与红娘保密义务约束。
10.2 红娘仅可访问其服务对象为完成牵线所必需的资料,并受书面保密协议约束。
11. 数据泄露通知
11.1 若发生涉及您个人信息的安全泄露,且合理判断可能对您造成重大伤害风险(婚恋数据泄露通常构成该风险),我们将:
(a) 尽快通知受影响用户,说明泄露情况、可能影响与建议措施;
(b) 依 PIPEDA 向加拿大隐私专员公署(OPC)报告;
(c) 按法律要求保存泄露事件记录至少 24 个月。
12. 未成年人
12.1 本平台仅向 18 周岁及以上人士开放。我们不故意收集未成年人信息;若发现账号持有人未满 18 周岁,将删除其账号与全部信息。
13. 政策更新
13.1 本政策更新时,我们将在平台内公示并标注更新日期;涉及敏感信息用途或存储地点等重大变更的,将重新取得您的同意。
14. 联系我们与投诉
14.1 隐私负责人:[待补]
电子邮箱:[待补]
通讯地址:[待补](安大略省)
14.2 若您认为我们的处理不当且未获满意答复,您有权向加拿大隐私专员公署(Office of the Privacy Commissioner of Canada)投诉:www.priv.gc.ca。
Part II: English Version
Operator: [Operating company name, to be incorporated] (Ontario, Canada; "we", "us", or the "Platform")
Applies to: Maple Match matchmaking service (beta site: match.honghai.app, Web and PWA)
Effective date: [TBD] Last updated: [TBD]
1. Introduction and Scope
1.1 This Privacy Policy explains how we collect, use, store, disclose, and delete your personal information when you use Maple Match.
1.2 We comply with Canada's Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable Ontario law. Matchmaking involves highly sensitive personal information, and we apply protection standards stricter than those of ordinary websites.
1.3 Registering an account indicates you have read and understood this Policy. For sensitive information, we obtain separate express consent (Section 4) rather than implying it from registration alone.
2. Personal Information We Collect
2.1 Account information: mobile number or email, login credentials, registration time.
2.2 Profile and matchmaking questionnaire (sensitive): name or nickname, date of birth, gender, height, city of residence, education, occupation, income range, marital status, whether you have children, immigration/residency category, religion (optional), lifestyle, and partner preferences. Items such as marital status, religion, income, and residency category are sensitive; each is collected only with item-by-item express opt-in, and declining optional items does not affect basic functions.
2.3 Photos: photos you upload. Photos are held in private storage and are shown to other users only after passing manual review and only according to the visibility settings you choose. Rejected photos are never displayed.
2.4 Matching and service records: likes/matches, matchmaker communication records, offline event registrations, and membership tier and activation records (during beta, memberships are activated manually by administrators; we do not collect online payment card data).
2.5 Technical and usage data: device type, browser information, IP address, access logs — used only for security and troubleshooting, not for advertising tracking.
2.6 We do not collect full government ID numbers, health or genetic information, or precise geolocation. If identity verification later requires ID documents, we will notify you separately and obtain fresh consent.
3. Purposes of Collection and Use
3.1 We use your personal information only to:
(a) create and manage your account and provide profile display, browsing, filtering, and mutual-like matching;
(b) enable matchmakers to make personal introductions after a mutual match (there is no in-app chat; contact details are relayed by a matchmaker only with both parties' consent);
(c) organize offline events you sign up for;
(d) perform membership and matchmaking service contracts;
(e) conduct content review, anti-fraud, account security, and platform governance;
(f) meet legal obligations (e.g., lawful law-enforcement requests).
3.2 Any new purpose beyond the above requires your fresh consent. We do not sell personal information or use your profile for third-party advertising.
4. Consent (Layered Consent)
4.1 Express opt-in: for the sensitive items in Section 2.2, the collection interface explains the purpose of each category, and we collect only after you tick each item yourself. All consent boxes are unticked by default.
4.2 Layered consent: basic account functions, public profile display, sensitive questionnaire items, photo visibility, and marketing communications each require separate, unbundled consent. Refusing one only affects the corresponding function.
4.3 Withdrawal: you may withdraw any layer of consent at any time in account settings or via Section 14. We will stop the corresponding processing; withdrawal does not affect prior lawful processing.
5. Marketing and Commercial Electronic Messages (CASL)
5.1 Before sending marketing messages (event promotions, membership offers), we obtain your separate express consent under Canada's Anti-Spam Legislation (CASL). The consent box is never pre-ticked and is separate from registration.
5.2 Every marketing message identifies the sender, provides contact information, and includes a one-click unsubscribe. Unsubscribe requests take effect within 10 business days (we aim for immediate effect).
5.3 Transactional notices necessary to the service (review results, match notifications, security alerts) are not marketing messages and are unaffected by unsubscribing, though you may adjust delivery channels in settings.
6. Data Storage Location
6.1 All your personal information, including photos, is stored on servers located in Toronto, Canada, and is not transferred or stored outside Canada.
6.2 If we ever propose to change the storage location or introduce processing outside Canada, we will notify you in advance, reassess as required by law, and obtain consent where required.
7. Third-Party Service Providers
7.1 We use only the following categories of processors, strictly as needed:
(a) Cloud hosting and storage provider ([TBD]): hosts the platform and data in Toronto data centres;
(b) SMS/notification provider ([TBD]): sends verification codes and service notices;
(c) Content-moderation support provider ([TBD], if engaged): assists human review of photos and text.
7.2 Processors act only on our written instructions, are bound by contractual confidentiality and security terms, and may not use your data for their own purposes.
7.3 We do not disclose your personal information to any other third party except: (a) with your express consent (e.g., a matchmaker relaying contact details after both parties agree); (b) where required by law; or (c) to prevent imminent harm to personal safety, within PIPEDA's permitted exceptions.
8. Retention
8.1 While your account exists, we retain only what is necessary to provide the service.
8.2 After account deletion: profiles, questionnaires, photos, and match records are deleted from production systems within 30 days, and purged from backups within a backup-rotation cycle of no more than 90 days.
8.3 Exception: minimal records required by law (tax, accounting) or for unresolved disputes are kept for the statutory period, then deleted.
9. Your Rights
9.1 Access: you may request a copy of the personal information we hold about you and an account of its use. We respond within 30 days of a request; any extension follows PIPEDA's rules with notice to you.
9.2 Correction: you may correct your profile at any time or ask us to correct inaccurate or incomplete information.
9.3 Deletion (true deletion): you may close your account and request deletion at any time. Deletion means actual erasure, not hiding or deactivation — data is removed from production and backups within the timelines in Section 8.2, not merely made invisible to other users.
9.4 Withdrawal of consent: see Section 4.3.
9.5 Exercising these rights is free of charge. We may first verify the requester's identity to protect your information.
10. Security
10.1 We apply safeguards proportionate to sensitivity, including encryption in transit and at rest, private photo storage with access control, least-privilege access, audit logs, and confidentiality obligations for staff and matchmakers.
10.2 Matchmakers may access only the profiles needed to complete an introduction for their assigned clients, under written confidentiality agreements.
11. Breach Notification
11.1 If a security breach involving your personal information creates a real risk of significant harm (a breach of matchmaking data will usually meet this threshold), we will:
(a) notify affected users as soon as feasible, describing the breach, likely impact, and recommended steps;
(b) report to the Office of the Privacy Commissioner of Canada (OPC) as required by PIPEDA;
(c) keep records of the breach for at least 24 months as required by law.
12. Minors
12.1 The Platform is open only to persons aged 18 or over. We do not knowingly collect minors' information; any account found to belong to a person under 18 will be deleted together with all its data.
13. Changes to This Policy
13.1 Updates will be posted on the Platform with the revision date. Material changes — such as new uses of sensitive information or a change of storage location — require your fresh consent.
14. Contact and Complaints
14.1 Privacy Officer: [TBD]
Email: [TBD]
Mailing address: [TBD] (Ontario)
14.2 If you believe our handling is improper and are unsatisfied with our response, you may complain to the Office of the Privacy Commissioner of Canada: www.priv.gc.ca.