Privacy Policy

Last updated: 9 September 2026

1. Introduction and Scope

This Privacy Policy explains how Magicpaw Limited ("we", "us", or "our") collects, uses, stores, and protects your personal data in the course of operating hkkindergarten.com (the "Website" or the "Platform").

We are committed to complying with the Personal Data (Privacy) Ordinance (Cap. 486 of the laws of Hong Kong) (the "PDPO") and related requirements. By using the Platform, you acknowledge that you have read and understood the data practices described in this Policy.

This Policy applies to personal data involved when you use our services through the Platform, including browsing information, logging into an account, saving schools, generating comparisons or reports, making payments, and participating in the community. This Policy does not apply to third-party websites or services linked from the Platform.

2. Information We Collect

Depending on how you use the Platform, we may collect the following categories of data:

2.1 Account Information

  • Phone number: collected when you choose to log in via SMS verification code.
  • Google account information: when you choose to log in with Google, this may include your email address, display name, and profile picture.

Our login uses a passwordless mechanism (SMS code or Google sign-in); we do not collect or store your login password.

2.2 Usage Data

When you use features that require login, we store data associated with your account in a Firestore database, for example:

  • your list of favorite schools;
  • records related to school comparisons and reports;
  • records related to consultation interactions.

2.3 Payment Information

When you purchase a paid product, payment is processed through our third-party payment service provider, Stripe. Your full payment card details, such as your credit card number, are collected and processed directly by Stripe, and we do not store your credit card number. We may retain non-sensitive records related to a transaction (such as transaction status and the product purchased) in order to fulfil orders and provide our services.

2.4 Analytics Data

We use Google Analytics to understand how the Platform is used. The data collected may include device type, browser type, pages viewed, and interaction behavior. This data is generally used in aggregated or de-identified form.

2.5 Security and Technical Data

We use Cloudflare as a content delivery network and for security protection. For security and abuse-prevention purposes, your IP address and technical request metadata (such as request time and browser user-agent string) may be processed.

3. Purposes of Use

We collect and use your personal data for the following purposes:

  • to provide and maintain login and account functionality;
  • to store and display your favorites, comparisons, and school reports;
  • to process payments and deliver paid products;
  • to analyze Platform usage in order to improve our services and content;
  • to conduct security monitoring, prevent abuse, and maintain stable operation of the Platform;
  • to contact you regarding your enquiries or consultations where necessary;
  • to comply with applicable laws and regulations.

We will only use your personal data to the extent necessary to achieve the above purposes. If we intend to use your data for a new purpose not directly related to the original purpose, we will obtain your consent where required by law.

4. Cookies and Similar Technologies

The Platform and the third-party services we use may use cookies and similar technologies, primarily for:

  • Authentication: to maintain your login state;
  • Analytics: to understand usage through Google Analytics;
  • Security: for protection and traffic management through Cloudflare.

You can manage or disable cookies through your browser settings. However, some features (such as maintaining your login state) may not function properly as a result.

5. Third-Party Processors

To operate the Platform, we engage the following third-party service providers to process certain data on our behalf:

  • Firebase / Google Cloud: authentication, database (Firestore), and infrastructure;
  • Stripe: payment processing;
  • Google Analytics: usage analytics;
  • Cloudflare: content delivery network and security protection.

Each of the above providers processes data subject to its own privacy policy. We disclose data to them only to the extent necessary to provide our services.

We do not sell your personal data. Except as necessary to provide the Platform's services, or where required or permitted by law, we will not transfer your personal data to other third parties for their own purposes.

6. Data Storage and Security

Your personal data is stored on Google Cloud / Firebase infrastructure. We take reasonable technical and organizational measures to protect personal data against unauthorized access, processing, deletion, loss, or use.

Although we strive to safeguard your data, transmission over the internet and electronic storage are not absolutely secure, and we cannot guarantee the absolute security of information.

7. Data Retention

We retain your personal data only for as long as necessary to achieve the purposes for which it was collected, generally:

  • account-related data: retained for the duration your account remains active;
  • for such period as is required by law or necessary to handle potential disputes.

When personal data is no longer needed, we will take reasonable steps to delete or de-identify it.

8. Cross-Border Transfers

Some of the service providers we use (such as Google Cloud, Stripe, and Cloudflare) are international services, and your personal data may be processed or stored on servers outside Hong Kong. Where any such transfer takes place, we will take reasonable steps to ensure that the data is protected in a manner consistent with the principles of the PDPO.

9. Your Rights Under the PDPO

Under the PDPO, you have the following rights in relation to your personal data:

  • Right of access: to request access to the personal data we hold about you;
  • Right of correction: to request correction of inaccurate personal data.

To exercise the above rights, please contact us using the details set out in Section 13 of this Policy. We will handle your request in accordance with the PDPO; for a data access request, we may charge a reasonable fee as permitted by law.

10. Children's Privacy

The Platform is intended to provide kindergarten-related information to parents and guardians, and is not directed at children. We do not knowingly collect personal data from children.

If you are a parent or guardian and believe that a child has provided personal data to us, please contact us using the details in Section 13, and we will take reasonable steps to delete such data.

11. Third-Party Links Disclaimer

The Platform may contain links to third-party websites or services (such as schools' official websites and Education Bureau pages). These third-party websites have their own privacy policies, and we are not responsible for their content or data practices. We recommend that you review their privacy policies before using such websites.

12. Updates to This Policy

We may revise this Policy from time to time in response to changes in law, adjustments to our services, or operational needs. The revised version will bear a "Last updated" date and be published on the Platform. We recommend that you review this Policy periodically. Your continued use of the Platform after an update takes effect constitutes acceptance of the revised content.

13. Contact Us

If you have any enquiries, comments, or requests regarding this Policy or your personal data, please contact Magicpaw Limited through the following:

We will respond to your enquiry within a reasonable time.