本声明说明我们如何收集、使用、保存与保护您的个人数据。它是为符合 PDPA 告知要求而准备的网站声明，不构成法律意见。中文与英文如有歧义，以有利于清楚告知为准。
1. 数据使用者
相知有素（Xiangzhi Vegetarian）由以下企业营运，并作为 PDPA 下的数据使用者（Data User）：
- XIANGZHI VEGETARIAN ENTERPRISE
- 注册号：202603182273 (MA0349499-T)
- 地址：39 Jalan Eco Santuari 8/1C, Persiaran Eco Sanctuary, 42500 Telok Panglima Garang, Selangor
- 电话：+6011 5917 6933
- 电邮：xiangzhihow@gmail.com
2. 我们收集的个人数据
当您通过本网站订座、发电邮或致电我们时，可能收集：
- 身份与称呼：姓名、先生/女士等称谓
- 联络资料：电话号码、电子邮箱
- 订座资料：到店日期与时间、人数、聚会原因、备注
- 饮食资料：忌口、过敏或饮食偏好（可能属于与健康相关的敏感个人数据）
- 技术资料：浏览器在订座确认过程中暂存的资料，以及维持员工后台登录所需的必要 cookie
我们不会故意通过本网站向 18 岁以下人士收集数据。若您代他人订座，请确保对方已知悉本声明，并同意您提供其资料。
3. 收集目的与使用方式
个人数据用于：
- 处理、确认与履行餐桌预订
- 就订座、迟到、改期或取消与您联络
- 照顾忌口与现场接待
- 保存营业记录、处理查询、投诉与争议
- 遵守法律、监管或会计要求
- 在取得您同意，或法律允许的情况下，发送与餐厅相关的通知
提交订座表即表示您同意我们按本声明处理您的个人数据。敏感饮食资料仅用于安排餐食与接待。您可拒绝提供资料，但若缺少必要的姓名、电话或电邮，我们将无法完成订座。
4. 披露与委托处理
我们不会出售您的个人数据。仅在必要范围内，可能向以下类别披露或委托处理：
- 餐厅员工及授权营运人员
- 网站托管与应用服务提供商
- 数据库托管服务提供商
- 电邮发送服务提供商（用于订座确认函）
- 即时通讯服务提供商（用于向餐厅员工发送订座通知，例如 Telegram）
- 法律、会计或专业顾问
- 法律要求或为保护权利、安全而必须披露的监管机构或执法单位
部分服务提供商的服务器可能位于马来西亚以外（例如新加坡）。在跨境转移时，我们会在合理范围内要求对方采取与 PDPA 相符的保护措施。
5. 安全与保存期限
我们采取合理的技术与管理措施保护个人数据，包括限制员工后台访问、使用加密连线，以及将订座记录存放于受控数据库。互联网传输无法保证绝对安全。
个人数据仅在实现上述目的所需期间保存，其后将删除、匿名化或封存。订座记录通常保存至用餐完成后的合理期间，或法律要求的更长期间。
6. 您的权利
在 PDPA 规定的范围内，您有权：
- 获知我们是否持有您的个人数据
- 请求查阅或改正不准确、不完整或过时的数据
- 撤回同意（撤回后，未完成的订座或后续联络可能无法继续）
- 限制或反对特定处理（法律允许的情况除外）
- 就个人数据相关事项向我们提出查询或投诉
请电邮 xiangzhihow@gmail.com 或致电预约专线提出请求，并提供足够资料以便核实身份。我们可能依法收取合理费用，或在 PDPA 允许的情形下拒绝请求，并说明理由。
若您认为我们未妥善处理您的个人数据，可向马来西亚个人数据保护当局投诉：Jabatan Perlindungan Data Peribadi (JPDP)，网站 www.pdp.gov.my。
7. Cookie 与本地储存
顾客订座使用浏览器的会话/本地储存，以便显示确认页，并非广告追踪。员工后台使用必要的登录 cookie，以便授权人员查看订座。您可在浏览器中清除这些资料；清除后，未完成的确认显示或后台登录状态可能会中断。
8. 声明更新
我们可能不时更新本声明。更新后将公布于本页面，并修改“最后更新”日期。重大变更时，我们会在网站上作出合理提示。
This notice explains how we collect, use, keep, and protect your personal data. It is a website notice prepared for PDPA transparency. It is not legal advice. If the Chinese and English texts differ, the clearer statement for the data subject prevails.
1. Data user
Xiang Zhi Vegetarian is operated by the following enterprise, which is the data user under the PDPA:
- XIANGZHI VEGETARIAN ENTERPRISE
- Registration No. 202603182273 (MA0349499-T)
- Address: 39 Jalan Eco Santuari 8/1C, Persiaran Eco Sanctuary, 42500 Telok Panglima Garang, Selangor
- Phone: +6011 5917 6933
- Email: xiangzhihow@gmail.com
2. Personal data we collect
When you book a table on this website, email us, or call us, we may collect:
- Identity and title: name and honorific (Mr / Ms)
- Contact details: phone number and email
- Reservation details: date and time, party size, occasion, and notes
- Dietary information: restrictions, allergies, or preferences (this may be sensitive personal data related to health)
- Technical data: information stored in your browser for the confirmation page, and a necessary cookie to keep the staff page signed in
We do not knowingly collect data from persons under 18 through this website. If you book for someone else, please make sure they know about this notice and agree to you providing their details.
3. Purpose and use
Personal data is used to:
- Process, confirm, and fulfil table reservations
- Contact you about timing, lateness, changes, or cancellation
- Look after dietary needs and receive you at the restaurant
- Keep business records and handle queries, complaints, and disputes
- Meet legal, regulatory, or accounting requirements
- Send restaurant-related notices where you have consented, or where the law allows
Submitting a reservation means you consent to this processing. Sensitive dietary data is used only to prepare your meal and receive you. You may decline to provide data, but we cannot complete a booking without the required name, phone, and email.
4. Disclosure and processors
We do not sell your personal data. We may disclose it, only as needed, to:
- Restaurant staff and authorised operators
- Website hosting and application providers
- Database hosting providers
- Email providers (for reservation confirmations)
- Messaging providers (to notify restaurant staff of a booking, for example Telegram)
- Legal, accounting, or professional advisers
- Regulators or law enforcement where required by law or to protect rights and safety
Some providers may process data outside Malaysia (for example Singapore). For cross-border transfers, we take reasonable steps to require safeguards consistent with the PDPA.
5. Security and retention
We take reasonable technical and organisational measures to protect personal data, including restricted staff access, encrypted connections, and storing reservations in a controlled database. Transmission over the internet is not guaranteed to be fully secure.
We keep personal data only as long as needed for these purposes, then delete, anonymise, or archive it. Reservation records are usually kept for a reasonable period after the meal, or longer where the law requires.
6. Your rights
Subject to the PDPA, you may:
- Ask whether we hold your personal data
- Request access, or correction of data that is inaccurate, incomplete, or out of date
- Withdraw consent (after withdrawal, an unfinished booking or later contact may not continue)
- Limit or object to certain processing, except where the law allows it
- Raise a query or complaint about your personal data
Please email xiangzhihow@gmail.com or call the reservation line, and give enough detail for us to verify your identity. We may charge a lawful fee, or refuse a request where the PDPA allows, and explain why.
If you believe we have not handled your personal data properly, you may complain to Jabatan Perlindungan Data Peribadi (JPDP) at www.pdp.gov.my.
7. Cookies and local storage
Guest booking confirmation uses the browser’s session or local storage so we can show the confirmation page. It is not advertising tracking. The staff page uses a necessary login cookie so authorised staff can view reservations. You may clear this data in your browser; doing so may interrupt an unfinished confirmation display or a staff login.
8. Updates
We may update this notice from time to time. Updates will be published on this page with a revised “last updated” date. For material changes, we will give reasonable notice on the website. Last updated: 10 September 2026.
