Privacy Policy / 隐私政策

1. What We Collect / 我们收集哪些资料

Name, mobile number, delivery address (including map coordinates), email (if you sign in with Google or Facebook), order and payment records, and payment receipts you upload. We never see your card number — card payments are handled by Curlec.

姓名、手机号码、配送地址（含地图坐标）、电子邮箱（用 Google 或 Facebook 登录时）、订单与付款记录，以及你上传的付款截图。我们看不到你的银行卡号——卡片付款由 Curlec 处理。

2. Why We Use It / 用途

To process and deliver your orders, confirm payments, send order updates, provide customer support, run meal vouchers and membership, improve our website, and measure the performance of our ads on platforms such as Meta.

处理和配送订单、确认付款、发送订单通知、提供客服、餐券与会员服务、改善网站，以及在 Meta 等平台衡量广告效果。

3. Required or Optional / 必填与选填

Your mobile number and delivery address are required — without them we cannot deliver your order. Your name and email are optional.

手机号码和配送地址是下单必填，没有它们我们无法配送；姓名和电子邮箱为选填。

4. Who We Share It With / 我们会把资料交给谁

• Firebase (Google) — data storage and sign-in / 资料储存与登录
• Curlec by Razorpay — online payments / 网上付款
• Google Maps — calculating delivery distance / 计算配送距离
• Grab and our delivery riders — name, phone and address needed for delivery / 配送所需的姓名、电话、地址
• WhatsApp (Meta) and Telegram — order communication and internal order notifications / 订单沟通与店内订单通知
• Meta (Facebook / Instagram) — ad measurement; your phone number and email are irreversibly encrypted (SHA-256) before being sent / 广告衡量；电话与邮箱先经 SHA-256 不可逆加密再传送
• Google Analytics and Microsoft Clarity — website traffic and usage analysis / 网站流量与使用分析

We never sell your personal data. / 我们绝不出售你的个人资料。

5. Cookies & Tracking / Cookies 与追踪

This website uses cookies from Meta Pixel, Google Analytics and Microsoft Clarity to analyse traffic and measure our ads. You can clear or block cookies in your browser settings; ordering will still work.

本网站使用 Meta Pixel、Google Analytics 和 Microsoft Clarity 的 Cookies 来分析流量和衡量广告效果。你可以在浏览器设置中清除或阻止 Cookies，下单功能不受影响。

6. Your Rights / 你的权利

Under the PDPA you may request access to or correction of your personal data, limit how we use it, or withdraw your consent and ask us to delete it (except records we are required by law to keep). Contact our data protection contact:

根据 PDPA，你可以要求查阅或更正你的个人资料、限制我们的使用方式，或撤回同意并要求删除（法律要求保留的记录除外）。请联系我们的资料保护联系人：

• Cheong Yoke Wan
• Email: hello@incredibowl.my
• WhatsApp: 010-337 0197

7. Data Retention / 资料保留

Order and payment records are kept for 7 years for tax and accounting purposes. Your contact details (name, phone, address) are kept while you remain a customer; you can ask us to delete them at any time, and we will remove them from your account and anonymise them on past orders, keeping only the records required by law.

订单与付款记录依税务及会计要求保留 7 年。你的联系资料（姓名、电话、地址）在你仍是我们客人期间保留；你可以随时要求删除，我们会从你的账户中移除，并把过往订单上的这些资料匿名化，只保留法律要求的记录。

8. Security / 资料安全

Your data is stored in access-controlled cloud services, only authorised team members can see delivery details, and payments are processed over encrypted connections.

你的资料储存在有访问控制的云端服务中，只有获授权的团队成员可以查看配送资料，付款经加密连接处理。