樓梯易（StairEase）· PsyBridge Medical Services Limited · 最後更新 2026 年 9 月 15 日
本政策說明 PsyBridge Medical Services Limited 以「樓梯易」（StairEase）名義，透過應用程式、網站及相關服務處理個人資料的方式。我們按香港《個人資料（私隱）條例》處理你的個人資料。
資料使用者為 PsyBridge Medical Services Limited（營業名稱：樓梯易，英文名稱：StairEase）。
資料保障聯絡人：私隱主任
電郵：silverblossomshk@gmail.com
電話及 WhatsApp：6916 5194
本政策涵蓋帳戶、登入、預約、付款、客戶服務、上門服務、相片、影片、健康及安全資料，以及應用程式和伺服器產生的必要技術紀錄。除另有說明外，「處理」包括收集、記錄、儲存、查閱、使用、披露、傳送及刪除。
資料主要由你提供。我們亦會從 Apple 或 Google 取得登入資料、從 Stripe 取得付款結果、從獲分派的人員或交通服務商取得服務進度，以及由應用程式和伺服器產生保安及登入紀錄。如你提供他人的資料，你須已獲適當同意或具有其他合法權限，並在可行情況下讓該人士知悉本政策。
| 資料 | 是否必須 | 如不提供 |
|---|---|---|
| 姓名、電郵、登入識別碼 | 建立帳戶時必須 | 不能建立或驗證帳戶。 |
| 預約聯絡人、電話、地址、日期及服務資料 | 相關預約必須 | 不能聯絡、評估或提供服務。 |
| 樓梯尺寸、體重、年齡、活動能力及相關健康資料 | 樓梯機安全評估必須 | 不能安全評估或確認樓梯機服務。 |
| 樓梯相片及環境影片 | 樓梯機預約必須 | 未能完成遙距安全評估，可能需要現場評估或拒絕預約。 |
| 長者社區照顧服務券狀況 | 自願 | 不影響一般預約，但我們未必能協助社區券安排。 |
| 通知權限、補充備註及其他非必要資料 | 自願 | 核心預約功能仍可使用，但提醒或個別安排可能受限。 |
我們只收集與相關服務直接有關、足夠但不超出所需的資料。你可拒絕提供自願資料，而不影響不需要該等資料的服務。
我們不會出售個人資料，不使用廣告或分析追蹤工具，亦不會把個人資料用於直接促銷。如日後擬作直接促銷，我們會先提供法例要求的通知及選擇，並在取得所需同意前不會使用。
病歷、身體狀況、體重、活動能力、年齡及陪診資料屬高度敏感資料。我們只會在評估安全、安排合適人員、提供服務、處理事故或法律申索所需的範圍內使用，只提供予負責該次服務的人員，並以較短的保存期、最少權限及額外保密措施保護。
應用程式只會在你選擇拍攝、錄影或上載時使用相機、相簿或咪高峰。樓梯機預約的量度相片及環境影片用於安全評估、報價及提供服務；其他服務的相片只在你主動加入時收集。除非另行取得具體同意，我們不會公開相片或影片，亦不會用作宣傳。
伺服器使用 IP 位址、裝置資料、登入紀錄及隨機裝置識別碼作身份驗證、限制請求次數、診斷及防止濫用，不會用於廣告或跨服務追蹤。服務前一日的提醒在你的裝置本機排程，不經推送伺服器；通知權限屬自願，拒絕不影響預約，你亦可隨時在裝置設定中關閉。
我們會要求服務商只按我們的指示處理資料，並採取適當的保密及保安措施。我們不會出售你的個人資料。
Render 及 Neon 的主要運作環境位於新加坡；Stripe、Apple、Google 及 WhatsApp 亦可能在香港以外處理資料。跨境處理只限本政策所述的目的，並透過服務商審查、存取限制、加密及其他合理措施保障資料。如服務商或儲存地點有重大改變，我們會先更新本政策及應用程式商店的相關披露。
應用程式與伺服器之間的資料以加密連線（HTTPS）傳送。後台只限獲授權職員以密碼存取；登入權杖以雜湊形式儲存並會到期；我們亦採用最少權限、密鑰管理及備份措施。信用卡資料由 Stripe 處理，從不經過我們的伺服器。
任何系統均不能保證絕對安全。如發生可能對個人造成重大風險的資料事故，我們會調查、控制影響、保存所需紀錄，並按適用法律及情況通知受影響人士及有關機構。
我們的伺服器每日自動按下表刪除或清除資料。如資料涉及尚未處理完的投訴、事故、付款爭議、法律申索或法定保存要求，我們只會在所需範圍內延長保存。
| 資料類別 | 保存期 |
|---|---|
| 帳戶及個人檔案 | 帳戶有效期間。你在應用程式內刪除帳戶時即時刪除。 |
| 登入紀錄（IP 位址及裝置資料） | 每次登入最長 30 日；到期或登出後刪除。 |
| 健康及安全資料（年齡、體重、病歷及病人狀況） | 服務完成或取消後 90 日，或服務日期後 90 日，以較早者為準；之後從預約紀錄中清除。 |
| 樓梯及現場相片、影片 | 服務完成後 90 日；預約取消、被拒或未有進行則 30 日後刪除。 |
| 未付款、被拒或已取消的預約 | 最後更新後 12 個月清除其中的個人資料；只保留預約編號、服務種類、日期及狀態，以保持預約編號連貫供核數之用。 |
| 已付款或已完成預約的交易紀錄 | 交易或服務完成後 7 年，只保留帳目、稅務及申索所需的欄位；之後清除其中的個人資料。 |
| 客戶服務及投訴紀錄 | 個案結束後 2 年。 |
| 裝置內的預約草稿及快取 | 登出或刪除帳戶時即時清除；未提交的草稿最長保留 14 日。 |
已刪除的資料可能在受保護的備份中保留至正常備份週期結束。備份只用於災難復原，不作日常業務用途；如需從備份還原，我們會重新執行已到期的刪除。
登出時，應用程式會即時從你的裝置移除登入權杖、預約快取及未提交的預約草稿。你可在應用程式「我」分頁選擇「刪除帳戶」，或透過本政策所列的聯絡方式提出要求。
刪除帳戶時，我們會刪除你的帳戶、登入紀錄、上載的相片及影片，並從預約紀錄中清除年齡、體重、病歷及病人狀況等健康資料。已付款或已完成的交易如須依法保存，我們只保留必要的交易欄位至第 13 條所列期限屆滿；這些紀錄即使不再與帳戶連結，只要仍載有姓名、電話或地址，仍屬個人資料並繼續受本政策保障。
你可要求查閱我們持有關於你的個人資料，以及改正不準確的資料。你亦可要求刪除資料或撤回日後處理的同意；如我們因法定紀錄、合約、事故調查或法律申索而不能即時刪除，我們會說明所保留的資料、原因及期限。
請聯絡私隱主任，並提供足以核實身份及找出相關資料的資料。我們可按法例收取不超過直接及必要成本的費用，並會在收到符合要求的查閱要求後 40 日內回覆。如你對我們處理個人資料的方式不滿，可向香港個人資料私隱專員公署投訴。
帳戶持有人須年滿 18 歲。如服務使用者是未成年人，預約者須為其父母、合法監護人或獲授權照顧者，並只提供服務所需的資料。
我們會在本頁頂部列明更新日期。如變更涉及新的資料類別、用途、披露對象或較長的保存期，我們會在變更生效前作出適當通知，並在法律要求時取得同意。
私隱主任 · PsyBridge Medical Services Limited（樓梯易 StairEase）
電郵：silverblossomshk@gmail.com
電話及 WhatsApp：6916 5194
StairEase (樓梯易) · PsyBridge Medical Services Limited · Last updated 15 September 2026
This Policy explains how PsyBridge Medical Services Limited, trading as StairEase (樓梯易), handles personal data through the app, website and related services. We handle personal data under Hong Kong's Personal Data (Privacy) Ordinance.
The data user is PsyBridge Medical Services Limited, trading as StairEase (樓梯易).
Data protection contact: Privacy Officer
Email: silverblossomshk@gmail.com
Phone and WhatsApp: 6916 5194
This Policy covers account, sign-in, booking, payment, support, on-site service, photo, video, health and safety data, and the necessary technical records generated by the app and server. Unless stated otherwise, "handling" includes collection, recording, storage, access, use, disclosure, transfer and deletion.
Most data comes from you. We also receive sign-in data from Apple or Google, payment results from Stripe, service updates from assigned staff or transport providers, and security and sign-in records generated by the app and server. If you give us someone else's data, you must have their appropriate consent or another lawful authority and, where practicable, tell them about this Policy.
| Data | Status | If not provided |
|---|---|---|
| Name, email, sign-in identifier | Required for an account | We cannot create or verify the account. |
| Booking contact, phone, address, date and service details | Required for that booking | We cannot contact you, assess or provide the service. |
| Stair measurements, weight, age, mobility and relevant health information | Required for stair-climber safety | We cannot safely assess or confirm the stair-climber service. |
| Stair photos and walk-through video | Required for a stair-climber booking | A remote safety review cannot be completed; an on-site review or refusal may follow. |
| Community Care Service Voucher status | Voluntary | Ordinary booking is unaffected, but we may not be able to help with voucher arrangements. |
| Notification permission, extra notes and other non-essential details | Voluntary | Core booking still works, but reminders or tailored arrangements may be limited. |
We collect only data directly related to the service, adequate for its purpose and not excessive. You may withhold voluntary information without affecting services that do not need it.
We do not sell personal data, use advertising or analytics trackers, or use personal data for direct marketing. Before any future direct marketing, we will give the notice and choices the law requires and will not proceed without any consent required.
Medical history, physical condition, weight, mobility, age and escort information are highly sensitive. We use them only as needed to assess safety, assign suitable staff, provide the service, and handle incidents or legal claims; share them only with the staff handling that service; and protect them with shorter retention, least-privilege access and additional confidentiality measures.
The app uses the camera, photo library or microphone only when you choose to take a photo, record or upload. Stair-climber measurement photos and walk-through videos are used for the safety review, quotation and service; photos for other services are collected only when you add them. We do not publish photos or videos or use them for promotion without separate, specific consent.
The server uses IP addresses, device details, sign-in records and a random device identifier for authentication, rate limiting, diagnostics and abuse prevention, never for advertising or cross-service tracking. Day-before reminders are scheduled locally on your device, not through a push server. Notification permission is voluntary, refusing it does not affect bookings, and you can turn it off at any time in your device settings.
We require providers to handle data only on our instructions and to keep it confidential and secure. We do not sell your personal data.
Render and Neon run mainly in Singapore, and Stripe, Apple, Google and WhatsApp may also process data outside Hong Kong. Such processing is limited to the purposes in this Policy and protected through provider review, access restrictions, encryption and other reasonable measures. We will update this Policy and the app store disclosures before any material change of provider or storage location.
Data travels between the app and the server over encrypted connections (HTTPS). The back office is restricted to authorised staff with a password; sign-in tokens are stored hashed and expire; and we use least privilege, key management and backups. Card details are handled by Stripe and never pass through our servers.
No system can guarantee absolute security. If an incident may create a material risk to individuals, we will investigate, contain it, keep the required records, and notify affected people and authorities where applicable law and the circumstances require.
Our server deletes or clears data automatically every day according to this table. We keep data longer only as far as needed for an open complaint, incident, payment dispute, legal claim or statutory duty.
| Category | Retention |
|---|---|
| Account and profile | While the account is active. Deleted immediately when you delete the account in the app. |
| Sign-in records (IP address and device details) | Each sign-in lasts up to 30 days; deleted when it expires or you sign out. |
| Health and safety data (age, weight, medical history, patient condition) | Cleared from the booking record 90 days after the service is completed or cancelled, or 90 days after the service date, whichever is earlier. |
| Staircase and site photos and videos | Deleted 90 days after the service is completed, or 30 days after a booking is cancelled, declined or does not go ahead. |
| Unpaid, declined or cancelled bookings | Personal details cleared 12 months after the last update; only the booking reference, service type, date and status are kept, so booking numbers stay continuous for audit. |
| Transaction records of paid or completed bookings | Seven years after the transaction or service, limited to the fields needed for accounts, tax and claims; personal details are then cleared. |
| Support and complaint records | Two years after the case is closed. |
| Booking drafts and cache on your device | Cleared immediately on sign-out or account deletion; unsubmitted drafts are kept for at most 14 days. |
Deleted data may remain in protected backups until the normal backup cycle ends. Backups are used only for disaster recovery, not ordinary business; if a backup is ever restored, deletions that have fallen due are applied again.
When you sign out, the app immediately removes the sign-in token, cached bookings and unsubmitted drafts from your device. You can delete your account in the app (the 我 / Me tab → 刪除帳戶 / Delete account) or ask us using the contact details below.
Deleting your account removes the account, sign-in records, and uploaded photos and videos, and clears health details such as age, weight, medical history and patient condition from your booking records. Where a paid or completed transaction must be kept by law, we keep only the necessary transaction fields until the period in section 13 ends. Such a record, even no longer linked to an account, is still personal data while it contains a name, phone number or address, and remains protected by this Policy.
You may ask to see the personal data we hold about you and to correct anything inaccurate. You may also ask us to delete data or withdraw consent to future handling; if we cannot delete immediately because of statutory records, a contract, an incident investigation or a legal claim, we will explain what we keep, why and for how long.
Please contact the Privacy Officer with enough information for us to verify your identity and find the data. We may charge a fee allowed by law that does not exceed the direct and necessary cost, and we respond to a valid data access request within 40 days. If you are unhappy with how we handle your personal data, you may complain to the Office of the Privacy Commissioner for Personal Data, Hong Kong.
Account holders must be at least 18. If the service user is a minor, the person booking must be their parent, lawful guardian or authorised carer and provide only the data the service needs.
The update date is shown at the top of this page. Before a change introduces a new category of data, purpose, recipient or a longer retention period, we will give appropriate notice and obtain consent where the law requires.
Privacy Officer · PsyBridge Medical Services Limited (StairEase 樓梯易)
Email: silverblossomshk@gmail.com
Phone and WhatsApp: 6916 5194