歡迎來到MK體育（中國）官方網站！我們承諾嚴格保護您的隱私和個人資料。本隱私政策將詳細說明您在使用我們服務時，我們如何收集、使用、揭露和保護您的資訊。
使用我們的服務即表示您同意本政策中描述的資料處理方式。如果您不同意本隱私政策的條款，請不要存取我們的服務。
1. 簡介與範圍
LuxeLens Studio（「我們」或「我們的」）尊重您的隱私，並致力於保護您的個人資料。本隱私權政策適用於：
- 我們的網站 (luxelens.com) 及所有相關子網域
- 我們的行動應用程式（如有）
- LuxeLens Studio 提供的所有攝影服務
- 與我們進行的電子郵件、簡訊及其他電子通訊
- 任何收集個人資料的線下互動
本政策說明我們可能向您收集或您在使用我們的服務時可能提供的資訊類型，以及我們收集、使用、維護、保護和揭露該資訊的做法。
2. 定義
就本隱私權政策而言：
個人資料
任何與已識別或可識別的自然人（「資料主體」）相關的資訊。可識別的自然人是指可以直接或間接被識別的人。
處理
對個人資料進行的任何操作或一系列操作，無論是否透過自動化方式，例如收集、記錄、組織、建構、儲存、改編、修改、檢索、查詢、使用、揭露、傳播、刪除或銷毀。
資料控制者
單獨或與他人共同決定個人資料處理目的和方式的自然人或法人、公共機構、機關或其他機構。
資料保護法： 我們遵守適用的資料保護法，包括針對歐盟居民的《一般資料保護規範》(GDPR)、針對加州居民的《加州消費者隱私法》(CCPA) 及其他適用的隱私法。
3. 我們收集的資訊
我們向服務使用者收集多種類型的資訊，包括：
個人識別資訊
- 全名、電子郵件地址、電話號碼
- 帳單和送貨地址
- 付款資訊（透過第三方服務商安全處理）
- 出生日期（如需進行年齡驗證）
攝影會資訊
- 活動日期、時間和地點
- 攝影會偏好與要求
- 賓客名單與參與者資訊
- 特殊要求與備註
技術與使用資料
- IP 位址、瀏覽器類型和版本
- 時區設定和位置
- 瀏覽器外掛程式類型和版本
- 作業系統和平台
- 網站使用資料和模式
攝影內容
- 數位影像和照片
- 影片片段和音訊錄製
- 影像中繼資料（EXIF 資料）
- 編輯和修飾後的版本
我們如何收集資料： 我們透過直接互動（當您提供給我們時）、自動化技術（Cookie 和類似技術）以及第三方（支付處理商、社群媒體平台）收集資料。
4. 我們如何使用您的資訊
我們將收集的資訊用於多種目的，包括：
- 服務提供： 提供、維護和改善我們的攝影服務
- 溝通： 就預約、詢問和更新與您溝通
- 帳務： 處理付款和寄送發票
- 行銷： 寄送促銷資料（經您同意）
- 法律遵循： 遵守法律義務和保護權利
- 品質改善： 分析使用模式以改善我們的服務
- 客戶支援： 回覆您的問題並提供支援
- 安全性： 偵測、預防和處理技術問題與詐欺
攝影內容使用
我們可能將攝影內容用於：
- 作品集展示（經客戶同意）
- 行銷和促銷資料
- 比賽投稿
- 教育和訓練目的
客戶可在預約過程中或直接聯絡我們，選擇退出特定用途。
5. 處理的法律依據
我們基於以下法律依據處理您的個人資料：
合約必要性
處理是履行您為當事方的合約所必需，或是在簽訂合約前應您的要求採取步驟所必需（例如提供攝影服務）。
正當利益
處理是為了我們或第三方的正當利益所必需，前提是您的利益和基本權利不凌駕於這些利益之上（例如網站安全、詐欺預防）。
法律義務
處理是為了遵守我們所適用的法律義務所必需（例如稅務申報、法律要求）。
同意
您已明確同意我們為特定目的處理您的個人資料（例如行銷通訊、作品集展示）。
若我們依賴同意，您有權隨時撤回同意，但不影響撤回前基於同意進行處理的合法性。
6. 分享您的資訊
我們可能在以下情況下與第三方分享您的資訊：
- 服務提供者： 與代表我們執行服務的供應商和服務提供者（支付處理商、電子郵件服務提供者、雲端儲存）
- 業務轉讓： 涉及合併、收購或資產出售時
- 法律要求： 為遵守法律義務、保護權利或防止損害
- 專業顧問： 與律師、會計師及其他專業顧問
- 經您同意： 用於您提供資訊時所揭露的任何其他目的
國際資料傳輸
您的資訊可能被傳輸到位於您所在州、省、國家或其他政府管轄區之外的電腦並進行維護，這些地方的資料保護法可能有所不同。我們確保為此類傳輸採取適當的保護措施。
對於從歐盟/歐洲經濟區傳輸至第三國的資料，我們使用歐盟委員會批准的標準契約條款或其他適當的保護措施。
資料處理協議： 所有第三方服務提供者都必須與我們簽訂資料處理協議，並實施適當的安全措施。
7. 資料安全措施
我們實施適當的技術和組織措施，以保護您的個人資料免於未經授權或非法的處理、意外遺失、毀損或損害。
技術安全措施
- 傳輸中資料加密 (SSL/TLS) 及靜態資料加密
- Secure servers and firewalls
- Regular security assessments and penetration testing
- Access controls and authentication mechanisms
- Regular software updates and patches
Organizational Security Measures
- Staff training on data protection
- Confidentiality agreements with employees
- Regular privacy impact assessments
- Incident response procedures
- Data protection by design and by default
Breach Notification: In the event of a personal data breach, we will notify you and the appropriate supervisory authority as required by applicable law.
Your Responsibilities: You are responsible for keeping your account credentials confidential and using secure networks when accessing our services.
8. Data Retention Periods
We retain personal data only for as long as necessary to fulfill the purposes for which it was collected, including for the purposes of satisfying any legal, accounting, or reporting requirements.
- Client Information: 7 years from last transaction (for tax and legal purposes)
- Marketing Data: Until consent is withdrawn or 2 years from last interaction
- Photographic Content: Archived indefinitely for client access unless deletion requested
- Website Analytics: 26 months from date of collection
- Financial Records: 7 years (legal requirement)
To determine appropriate retention periods, we consider:
- The amount, nature, and sensitivity of the personal data
- The potential risk of harm from unauthorized use or disclosure
- The purposes for which we process the data
- Whether we can achieve those purposes through other means
- Applicable legal requirements
Data Deletion: Upon expiration of the retention period or upon request (where applicable), we will securely delete or anonymize your personal data.
9. Your Data Protection Rights
Depending on your location and applicable data protection laws, you may have the following rights:
Access & Portability Rights
- Right to Access: Request copies of your personal data
- Right to Portability: Request transfer of your data to another organization
- Right to Rectification: Request correction of inaccurate data
Control & Objection Rights
- Right to Erasure: Request deletion of your personal data
- Right to Restrict Processing: Request restriction of data processing
- Right to Object: Object to processing of your personal data
- Right to Withdraw Consent: Withdraw consent at any time
How to Exercise Your Rights: To exercise any of these rights, please contact us using the information in Section 14. We will respond within 30 days (or sooner if required by law).
Verification: We may need to verify your identity before processing your request, which may require additional information.
No Fee Usually Required: You will not have to pay a fee to access your personal data or to exercise any of your rights. However, we may charge a reasonable fee if your request is clearly unfounded, repetitive, or excessive.
10. Cookies & Tracking Technologies
We use cookies and similar tracking technologies to track activity on our website and hold certain information.
Types of Cookies We Use:
| Cookie Type | Purpose | 期限 |
| Essential Cookies | Necessary for website functionality and security | Session |
| Performance Cookies | Collect information about website usage | 26 months |
| Functionality Cookies | Remember your preferences and settings | 1 year |
| Marketing Cookies | Track effectiveness of marketing campaigns | 1 year |
Managing Cookies:
You can set your browser to refuse all or some browser cookies, or to alert you when websites set or access cookies. If you disable or refuse cookies, please note that some parts of our website may become inaccessible or not function properly.
Third-Party Cookies: Some content or applications on our website are served by third parties. These third parties may use cookies alone or in conjunction with other tracking technologies to collect information about you when you use our website.
11. Third-Party Links & Services
Our website and services may contain links to third-party websites, plug-ins, and applications. Clicking on those links or enabling those connections may allow third parties to collect or share data about you.
We do not control these third-party websites and are not responsible for their privacy statements. When you leave our website, we encourage you to read the privacy policy of every website you visit.
Third-Party Services We Use
- Payment Processors: Stripe, PayPal (for payment processing)
- Email Marketing: Mailchimp (for newsletter distribution)
- Cloud Storage: Google Drive, Dropbox (for image storage)
- Website Analytics: Google Analytics (for usage analysis)
- Client Galleries: Pixieset, ShootProof (for image delivery)
Each third-party service provider has its own privacy policy addressing how they use your information. We encourage you to review those privacy policies.
12. Children's Privacy
Our services are not intended for individuals under the age of 16. We do not knowingly collect personal data from children under 16.
If you are a parent or guardian and believe that your child has provided us with personal data, please contact us. If we become aware that we have collected personal data from a child under age 16 without verification of parental consent, we will take steps to remove that information from our servers.
Photography of Minors
For photography sessions involving minors (under 18), we require:
- Parental/guardian consent for the session
- Parental/guardian consent for image usage (if applicable)
- Parental/guardian presence during sessions (for children under 13)
13. Changes to This Privacy Policy
Update Notification Process
We may update this Privacy Policy from time to time to reflect changes in our practices or for other operational, legal, or regulatory reasons.
We will notify you of any material changes by:
- Posting the new Privacy Policy on this page with an updated "Last updated" date
- Sending an email notification to registered users
- Displaying a prominent notice on our website
Review Frequency: We review this Privacy Policy at least annually or whenever significant changes occur in our data processing activities.
Historical Versions: Previous versions of this Privacy Policy are available upon request.
Your Continued Use: Your continued use of our services after any modification to this Privacy Policy will constitute your acceptance of such modification.