提供扫码点餐、会员管理、钱包充值、优惠券发放、推广返佣、数据看板、客服、安全风控、履行法定义务。超出原目的会另行征得同意。
注册/勾选即表示同意。您可随时撤回（见第 8 条），但可能导致部分功能不可用。营销推送仅在您同意后发送，可随时退订。
传输加密（HTTPS/HSTS）、密码哈希（bcrypt）、JWT 短期令牌、访问控制、日志审计。尽管如此，互联网传输无法保证 100% 安全。
如发生可能造成重大伤害的泄露，我们将依 PDPA 12B 尽快通知个人数据保护专员，并在无不当延迟下通知受影响个人。
仅在实现目的或法律要求期限内保留（如交易记录 7 年备审计）。注销/删除请求经核验后删除或匿名化，法律另有保留义务除外。
用于维持登录（admin_token/merchant_token）、语言、防刷。禁用 Cookie 可能导致无法登录。可在浏览器清除，退出登录会清除服务端会话 Cookie。
本服务面向商家及成年顾客，不主动向 13 岁以下儿童营销。如发现误收集请联系删除。
站外链接（如 WhatsApp、支付页）适用其各自政策。
重大变更将在站内公告或邮件通知，继续使用视为接受新版。
Data Controller: LoyalBrew · Email: achstar02@gmail.com · WhatsApp: 011-1897 5678
Pengawal Data: LoyalBrew · Emel: achstar02@gmail.com
Controller: LoyalBrew. Data collected: merchant profile, customer profile/orders/wallet, promoter payout data, technical logs, payment references via HitPay (no full card storage). Purposes: ordering, membership, wallet top-up, coupons, referrals, analytics, support, security, legal compliance. Sharing: Google Cloud/Firebase hosting, payment gateway, authorities when required. No sale of data. Cross-border: only where PDPA permits. Security: HTTPS, hashed passwords, short-lived JWT, access controls. Breach: notify Commissioner ASAP and affected individuals without undue delay where likely significant harm. Rights: access, correction, withdraw consent, restrict marketing, portability (per 2024 amendments), complain to the Commissioner. Exercise via achstar02@gmail.com within statutory timelines. Retention: only as needed or required by law. Cookies: login, language, anti-abuse.
Pengawal Data: LoyalBrew. Data: profil peniaga, profil/tempahan/dompet pelanggan, data pembayaran promoter, log teknikal, rujukan pembayaran via HitPay. Tujuan: pesanan, keahlian, tambah nilai, kupon, rujukan, analitik, sokongan, keselamatan, pematuhan undang-undang. Perkongsian: Google Cloud/Firebase, gerbang pembayaran, pihak berkuasa jika dikehendaki. Tiada jualan data. Hak: akses, pembetulan, tarik balik keizinan, had pemasaran, mudah alih data, aduan kepada Pesuruhjaya. Emel: achstar02@gmail.com.