Privacy Policy
Effective 5 November 2026
English is the authoritative version of this policy. A Simplified Chinese translation is provided for convenience; if there is any inconsistency, the English version prevails.
This policy explains how Mtime Ltd (“we”, “us”), a New Zealand company and the operator of Easy FCP at easyfcp.co.nz (the “Service”), collects, uses, stores and shares personal information, in line with the Privacy Act 2020 and its Information Privacy Principles (IPPs).
1. Who we are and how to contact us
Mtime Ltd, New Zealand (GST 098-632-840). Our Privacy Officer can be contacted at [email protected].
2. Information we collect
- Account information: the email address you log in with.
- Business and setup information: restaurant name and address, and the setup details you enter (equipment, cleaning tasks, products, pre-cook and cooling items).
- Food Control Plan records: temperatures, cooling, cleaning, pre-cook and other logs, including staff names or initials that you or your staff enter into records.
- Billing information: payments are processed by Stripe. We do not receive or store full card numbers. We store your Stripe customer and subscription identifiers and subscription status (for example trialing, active, cancelled).
- Technical information: basic logs such as IP address, browser type, timestamps and error information, used to run and secure the Service.
If you enter information about other people (such as staff), please make sure they know it will be recorded in Easy FCP.
Free local mode: if you use Easy FCP without logging in, your records are stored only on your own device and are not sent to us.
3. How we use your information
- to provide the Service: storing and syncing your records, generating your forms and reports, and letting you export them;
- to manage your account, trial and subscription, and to bill you;
- to send service emails, such as login emails and billing emails (billing emails, including receipts and trial reminders, are sent by Stripe);
- to keep the Service secure, fix problems and improve it;
- to meet our legal obligations (for example tax records).
We do not sell your personal information, and we do not use advertising or cross-site tracking.
4. Who we share it with (service providers)
We use the following providers to run the Service. They process information on our behalf:
- Supabase – database and login (authentication);
- Stripe – payments, invoices and the subscription customer portal;
- Cloudflare – website hosting and content delivery.
We may also disclose information if required by law, or to a buyer of our business (who would be bound by this policy).
5. Storage overseas (IPP 12)
These providers may store or process information outside New Zealand, for example in Australia, the United States or other countries where they operate. Where personal information is disclosed overseas, we rely on providers that are subject to privacy laws or contractual obligations (such as data processing agreements) that, overall, provide safeguards comparable to those in the Privacy Act 2020.
6. Security
Data is encrypted in transit, access is controlled by your login, and the database enforces per-restaurant access rules. Records are append-only by design: corrections are added as new entries rather than overwriting history, to keep an accurate audit trail. No system is completely secure, so please keep your email account secure.
7. How long we keep it
We keep your account data while your subscription is active and for 24 months after cancellation or the end of the Service, after which we delete it (except where we must keep some information longer by law, such as billing records for tax purposes). When a subscription ends, the account becomes read-only and you can still export your records during this period.
Important: you are responsible for keeping your own Food Control Plan records for the period required by the Food Act 2014 and MPI (generally at least 4 years). Please export your records before they are deleted.
8. Your rights
You may ask to access the personal information we hold about you (IPP 6) and to correct it (IPP 7). Email [email protected]. We will respond within 20 working days. Because records are append-only, a correction may be made by adding a note or correcting entry.
9. Privacy breaches
If a privacy breach occurs that has caused or is likely to cause serious harm, we will notify the Office of the Privacy Commissioner and affected people as soon as practicable, as required by the Privacy Act 2020.
10. Complaints
Please contact us first at [email protected]. If you are not satisfied, you can complain to the Office of the Privacy Commissioner: www.privacy.org.nz.
11. Changes
We may update this policy. We will post the new version here with its effective date and, for significant changes, let subscribers know by email.
隐私政策
生效日期：2026年11月5日
本政策以英文版本为准。中文译本仅供参考，如中英文内容有任何不一致，以英文版本为准。
本政策说明 Mtime Ltd（“我们”）——一家新西兰公司，也是 easyfcp.co.nz 上 Easy FCP（“本服务”）的运营者——如何依据《2020 年隐私法》（Privacy Act 2020）及其信息隐私原则（IPP）收集、使用、存储和分享个人信息。
1. 我们是谁、如何联系我们
Mtime Ltd，新西兰（GST 号 098-632-840）。隐私负责人联系邮箱：[email protected]。
2. 我们收集的信息
- 账户信息：你用于登录的电子邮箱。
- 商家及设置信息：餐厅名称和地址，以及你填写的设置内容（设备、清洁任务、产品、预煮和冷却项目）。
- 食品控制计划（FCP）记录：温度、冷却、清洁、预煮等记录，包括你或员工在记录中填写的员工姓名或姓名缩写。
- 付款信息：付款由 Stripe 处理。我们不会接收或保存完整卡号，只保存你在 Stripe 的客户编号、订阅编号和订阅状态（例如试用中、已订阅、已取消）。
- 技术信息：基本日志，例如 IP 地址、浏览器类型、时间和错误信息，用于运行和保护本服务。
如果你填写了其他人（例如员工）的信息，请确保他们知道这些信息会被记录在 Easy FCP 中。
免费本地模式：如果你不登录使用 Easy FCP，记录只保存在你自己的设备上，不会发送给我们。
3. 我们如何使用你的信息
- 提供本服务：保存和同步记录、生成表单和报告、让你导出记录；
- 管理你的账户、试用和订阅，并向你收费；
- 发送服务邮件，例如登录邮件和账单邮件（收据、试用提醒等账单邮件由 Stripe 发送）；
- 保障本服务安全、修复问题和改进服务；
- 履行法律义务（例如税务记录）。
我们不会出售你的个人信息，也不使用广告追踪或跨网站追踪。
4. 我们与谁分享信息（服务商）
我们使用以下服务商来运行本服务，它们代表我们处理信息：
- Supabase —— 数据库和登录验证；
- Stripe —— 收款、发票和订阅管理页面；
- Cloudflare —— 网站托管和内容分发。
在法律要求时，或向我们业务的收购方（其须受本政策约束），我们也可能披露信息。
5. 海外存储（IPP 12）
上述服务商可能在新西兰境外存储或处理信息，例如澳大利亚、美国或其运营所在的其他国家。在向海外披露个人信息时，我们依赖的服务商须受隐私法律或合同义务（例如数据处理协议）约束，整体上提供与《2020 年隐私法》相当的保护。
6. 安全
数据在传输中加密，访问受你的登录控制，数据库按餐厅执行访问规则。记录在设计上只能追加：更正会作为新记录添加，而不是覆盖历史，以保留准确的审计记录。没有任何系统是绝对安全的，请保护好你的邮箱账户。
7. 保存期限
在你的订阅有效期间以及取消订阅或服务终止后 24 个月内，我们会保留你的账户数据，之后予以删除（法律要求保存更久的信息除外，例如用于税务的账单记录）。订阅结束后账户变为只读，在此期间你仍可导出记录。
重要提示：你有责任按照《2014 年食品法》（Food Act 2014）和 MPI 的要求，自行保存食品控制计划记录（一般至少 4 年）。请在数据被删除前导出你的记录。
8. 你的权利
你可以要求查看我们持有的你的个人信息（IPP 6）并要求更正（IPP 7）。请发邮件至 [email protected]，我们会在 20 个工作日内答复。由于记录只能追加，更正可能以添加备注或更正记录的方式进行。
9. 隐私泄露
如发生已经或可能造成严重损害的隐私泄露，我们会按照《2020 年隐私法》的要求，尽快通知隐私专员办公室和受影响的人。
10. 投诉
请先通过 [email protected] 联系我们。如果你对处理结果不满意，可以向隐私专员办公室（Office of the Privacy Commissioner）投诉：www.privacy.org.nz。
11. 政策变更
我们可能更新本政策。新版本会连同生效日期发布在此页面；如有重大变更，我们会通过邮件通知订阅用户。