Privacy policy

You can browse temple and cultural information without logging in. Google sign-in links your own orders, receipts and after-sales support. Temple browsing and enquiries are currently available; online booking is not yet open. Please provide only the information needed for communication.

Entity responsible for data processing: 看围科技有限公司. Privacy contact: support@baifo.xyz. Please explain your request and include an order number if it relates to an order. You do not need to send the full text of your wish, identity documents or payment details.

The account identifier and email provided by Google sign-in, together with a display name generated by the website, identify your account. When an order is created, we save the chosen temple, wish, requested date, package and offerings. Payment and refund records contain amounts, currency, transaction identifiers and statuses; receipts contain the agreed media and service description. The website requests only Google’s basic openid and email identity permissions. It does not read your Gmail, Drive or contacts, and does not store complete bank card numbers. Browsing public cultural content does not require creating an order; online booking and live payments are currently disabled.

When you visit, Cloudflare hosting and network protection process necessary connection information such as IP address, request time, browser and device information. The website uses the network exit region supplied by Cloudflare to restrict the regions where the service is available. When you use a proxy or travel, this may differ from your actual place of residence. This processing supports page delivery, access restrictions, account security and troubleshooting; it does not mean optional usage measurement is enabled.

Please express your wishes in your own words, using forms of address and only brief, necessary information wherever possible. Do not enter identity document numbers, detailed home addresses, medical records or financial information unrelated to the commission. If you provide information about family members or others, please ensure you have authority to do so. Wishes may involve sensitive information such as religious beliefs or health. Browsing the website or accepting general terms does not constitute blanket consent to all processing of sensitive information. Please also avoid sending unnecessary material such as medical records during enquiries. Wishes and private receipts are not used as public search content, reviews or advertising material.

Access to orders and receipts is checked against the signed-in account; other customers cannot access your records. The website uses Google sign-in and Cloudflare hosting and data storage. Creem is currently only being prepared as a payment integration. Live payments are not open, and the platform must still approve whether it can be used for this service. Authorised support and field staff should use only the information needed to carry out your own commission, for communication, scheduling, the visit and after-sales support. Wishes and private receipts are not made available to other customers or the public. With WeChat or WhatsApp, you choose what to communicate only after actively opening the relevant link; clicking it does not automatically send your wish or complete order. Each platform has its own information about data processing within its services.

Some cultural articles embed third-party video players from YouTube/Google or Bilibili. When a player loads or plays, your browser connects to that platform, which may receive your IP address, device and browser information, referring website and playback interactions, and may use cookies or similar technologies under its own policies. YouTube’s privacy-enhanced mode does not mean no data is processed. You can instead read the text only, or choose the original video link to watch on that platform. Wishes and private order content are not actively sent to these players.

For orders subject to the new retention rules, wishes and private photos and videos are retained for one calendar month from receipt delivery. If the following month has no corresponding date, its last day is used; deadlines are displayed in Beijing time. Viewing or downloading does not extend retention. Cleanup is paused for unfinished services, refunds in progress or necessary dispute holds. Minimum transaction records are retained separately for reconciliation, refunds, necessary disputes and applicable accounting obligations. Their exact retention periods still need to be confirmed against applicable requirements; we do not promise that all information will be deleted within one month.

In your order’s ‘Private data retention and deletion’ section, you can check the deadline and status, save the files you need and then confirm deletion. Deleting private content does not cancel the commission, close your account or reverse payment. Information needed for unfinished fulfilment will not be silently removed. Existing orders follow the applicable rules and status displayed on their own pages; information not covered by the new rules is not automatically cleaned up because this page changes.

To the extent provided by applicable law, you may request access, correction, deletion, restriction of processing, objection to processing or a portable copy of your data. Where processing is based on consent, you can withdraw that consent; withdrawal does not affect processing lawfully carried out beforehand. You may also complain to a data protection authority with jurisdiction. The conditions and scope of these rights can differ. If you cannot sign in or a self-service option is unavailable, you can still use the privacy email address. We will carry out necessary identity and security checks, without asking for Google passwords, verification codes or complete bank card details.

Deletion covers the full wish text in the primary database, private media and copies such as thumbnails or subtitles. Necessary order, payment and refund records are retained separately from private content. The actual treatment of backups, support-channel copies or copies held by other providers will be explained separately; hiding a web page is not treated as actual deletion.

Without separate authorisation, wishes, profile images, reviews and receipts are not used for public display. Sign-in and protection use necessary session information. Wish text, private contact details and payment evidence are not included in public URLs or search material. Please keep your Google account secure and contact us promptly if you find an unusual record or an incorrect receipt.

The service involves access from overseas, international service providers and in-person fulfilment in mainland China, so data may be processed across borders. Specific storage regions, applicable cross-border safeguard documents, backup deletion cycles, retention periods for accounts and minimum financial records, and applicable conditions for processing sensitive information still need to be verified and published before the relevant services formally open. This page does not mean particular cross-border clauses have already been signed, and does not claim all data is stored in the EU or that every copy has been deleted.

Significant changes to data use or access arrangements will be explained clearly, including their effects. Privacy contact: support@baifo.xyz. Order communication is also available through WeChat William97659 or WhatsApp +65 8531 5198. Please do not disclose private information in public comments.

Optional measurement is off by default. You can allow, refuse or withdraw it through Usage preferences in the footer; refusing does not affect access to any service. Usage preferences show whether this feature is enabled and your current choice. When the feature is enabled, a random source identifier is used only with permission to record controlled pages, source categories and campaign identifiers. Complete URLs, raw referrer links, IP addresses, wishes, email addresses and private media are not uploaded. Public activity is retained as daily aggregates for 90 days. Source identifiers and order attribution are retained for no more than 30 days, alongside order privacy cleanup. Withdrawal stops reporting and removes source associations; anonymous daily aggregates that can no longer be linked to an individual remain until expiry. Necessary account, security and financial records follow their own rules.