1. Who We Are (Data User)
This Policy explains how the independent SafeRent community project and its platform operator collect, use, protect and process personal data. We are the data user for personal data collected through the Platform. This Policy is drafted with reference to Hong Kong's Personal Data (Privacy) Ordinance (Cap. 486) and its data protection principles.
2. Data We Collect
- Account data: email, public nickname, securely processed authentication data and institution information you provide;
- Verification data: the current student-verification process uses an institution email and one-time code. Public pages show only the recognised institution, never the email. If evidence is requested in a future process, its purpose and retention will be stated first;
- User Content: reviews, ratings, photos, correction suggestions and campaign entries you actively submit;
- Review photos: public copies are compressed, stripped of metadata and watermarked. Originals are processed only for disclosed verification, appeal and content-safety purposes;
- Usage data: service records such as searches, pages viewed, clicks, sorting, filters and login times;
- Device and technical data: IP address, browser, device type, operating system and language;
- Approximate location inferred from IP or a district or MTR station you select, not precise live location;
- data produced by cookies, browser local storage and similar technologies.
3. How We Collect Data
You provide data during registration, posting, verification, corrections or activities. Server logs and technologies you have consented to may generate other data automatically. We do not obtain your tenancy agreements or financial data from third parties.
4. Purposes
- provide, maintain and improve search, filtering, rating, sorting and account functions;
- verify student status through an institution email;
- process and display reviews and User Content you authorise;
- respond to enquiries, corrections, reports and activity participation;
- secure the Platform, prevent fraud and abuse, and enforce rules;
- perform anonymised or aggregated analysis;
- send updates or related activity messages where required consent is obtained or you have not objected; you may unsubscribe at any time.
5. Processing Principles
We process personal data only for the period and extent necessary for the stated purposes and follow the PDPO data protection principles. We do not use it for an incompatible new purpose unless you consent or the law permits.
6. Service Providers and Sharing
We do not sell personal data. The Platform currently uses Supabase for authentication, database and storage, Vercel for hosting and delivery, and Resend for transactional email. We provide only the minimum data needed for those services and require reasonable confidentiality and data protection.
We may also share data with your consent, to comply with a law, court or regulator, or where necessary to protect Platform and user rights and safety. Optional analytics or promotion tools process corresponding data only after they are enabled and the necessary choice has been obtained.
7. Processing Outside Hong Kong
Some providers may process data outside Hong Kong. We take reasonable measures to require comparable protection, such as contractual terms, access restrictions and standard security controls.
8. Retention
We retain data only as long as needed for its collection purpose, disputes, security, regulation or law enforcement, then delete or anonymise it. Some account records may remain for a reasonable period after termination; verification data follows a minimum-necessary approach.
9. Your Privacy Rights
Under the PDPO you may request access to and a copy of personal data we hold, correction of inaccurate data, and complain about our handling. Email privacy@saferent.tech. We will respond within a reasonable period as required by law. You may also complain to Hong Kong's Privacy Commissioner for Personal Data.
10. Cookies and Similar Technologies
Necessary technologies support sign-in, security and basic service. Preference, analytics and promotion technologies are optional and are used only when the corresponding feature is enabled and you make that choice. Change non-essential categories at any time in Cookie Preferences. Refusing them does not prevent access to basic public content.
11. Security
We use reasonable technical and administrative safeguards, including transport encryption, access controls and periodic review, against unauthorised access, loss or misuse. Internet transmission is never completely secure, so some risk cannot be eliminated.
12. Changes and Contact
We may update this Policy and publish the latest version and effective date. We will use reasonable efforts to notify you of material changes. Email privacy@saferent.tech for privacy, access, correction or Cookie enquiries.