Privacy Policy

01

What Personal Data We Collect

1.1 Data you provide to us

• Name, phone number, email address, shipping address and billing address
• Member account and password (stored in encrypted form)
• Date of birth and gender (if you choose to provide them)
• Order details, payment method and transaction records
• Invoice information (tax ID, company title, e-invoice carrier number, donation code)
• Bank account details provided for refunds in return or exchange cases
• Your correspondence with customer service, product reviews and survey responses

1.2 Data collected automatically

• IP address, browser and operating system type, device identifiers
• Visit time, pages viewed, time spent, clicks and add-to-cart activity
• Referring URLs and advertising source parameters

1.3 Data obtained through third-party sign-in

When you sign in to this Website using your LINE, Facebook or Google account, we access the email address, display name and profile picture provided by that account in order to create and identify your member account. We do not obtain your password for that account, and we will not post any content on your behalf. You may disconnect this Website from your account at any time in that third-party platform's account settings.

1.4 Data from our stores and other channels

Our physical stores use the same membership system as this Website. If you are a registered member and present your membership when making a purchase in store, that transaction record, amount and item details will be merged into your member profile in order to calculate member benefits and accumulated spending, and to provide a consistent experience online and offline.

The above data falls within the categories defined under the Personal Data Protection Act, including C001 identifiers of a natural person, C002 financial identifiers and C003 government-issued identifiers.

You may choose not to provide the above data. However, certain fields (such as name, phone number, address and payment information) are necessary to complete your order, arrange delivery and issue an invoice; without them we will be unable to provide the corresponding services.

02

Why We Collect It and How We Use It

We collect your personal data for the following specified purposes: 040 Marketing; 069 Contracts, quasi-contracts or other legal relationships; 090 Consumer and customer management and service; 091 Consumer protection; 148 Online shopping and other electronic commerce services; 152 Advertising or business conduct management; 157 Surveys, statistics and research analysis; and 181 Other business activities consistent with our registered scope of business or articles of incorporation.

Specifically, we use your data to:

• Create and manage your member account and verify your identity
• Process orders, payments, shipping, invoicing, returns, exchanges and refunds
• Calculate and provide member benefits, points, coupons and integrated online-offline services
• Provide customer service and after-sales support, and respond to your enquiries
• Notify you of order status, delivery and out-of-stock situations
• Send promotional campaigns, new product announcements and newsletters, where you have consented
• Analyse website traffic and product preferences in order to improve our website and services
• Segment members and provide personalised recommendations and advertising
• Prevent fraud, abnormal transactions and unauthorised account access
• Comply with legal requirements or requests from competent authorities

RETENTION PERIOD

From the date of collection until you terminate your membership or we cease to provide the service. Transaction, invoice and accounting records are retained for at least five years as required by the Business Entity Accounting Act, the Tax Collection Act and other applicable laws.

GEOGRAPHIC SCOPE

Taiwan, together with the locations of the servers or operations of our outsourced service providers (see Section 9).

RECIPIENTS

The Company, our physical stores, and the parties listed in Section 5.

METHOD OF USE

By automated or non-automated means, within the scope necessary for the specified purposes described above.

03

Marketing Messages and Opting Out

Where you have consented, we may send promotional and campaign messages by email, SMS, LINE Official Account or website notification. You may opt out at any time, free of charge:

• Newsletters: click the "unsubscribe" link at the bottom of the email
• SMS: follow the opt-out instructions in the message, or contact customer service by email or phone
• LINE messages: block our LINE Official Account
• Opt out of everything at once: email us at zl_f@kintaiwu.com.tw

After you opt out of marketing messages, we will still send transaction-related notifications such as order confirmations and shipping notices.

04

Cookies and Tracking Technologies

This Website uses cookies and similar technologies (such as web pixels and SDKs) for the following purposes:

• Strictly necessary cookies: maintain your login session, remember your cart contents, and secure the checkout process. Disabling them will prevent you from shopping on this Website.
• Functional cookies: remember your preferences, such as language and browsing history
• Analytics and advertising cookies: tools such as Google Analytics 4 and the Meta (Facebook / Instagram) pixel help us understand how the site is used and measure advertising performance so that we can show you more relevant ads

You may refuse or delete cookies through your browser settings, and adjust personalised advertising preferences in the account settings of each advertising platform. Please note that disabling strictly necessary cookies will make parts of this Website unusable.

05

Sharing with Third Parties

We do not sell, rent or otherwise trade your personal data. We share it only in the following circumstances and only to the extent necessary:

• To fulfil your order: payment service providers (credit card acquiring, ATM transfer, convenience store payment codes, mobile payments and similar), logistics and convenience store pick-up operators, and e-invoice service providers
• To operate this Website: our e-commerce platform provider (this Website runs on the SHOPLINE platform), cloud hosting, customer service systems, and email and SMS delivery providers
• For analytics and advertising: platforms such as Google, Meta and LINE, for performance measurement and ad delivery
• Legal requirements: where required by law, or upon a lawful request from judicial, police, tax or other competent authorities
• Protection of rights: to investigate fraud or abnormal transactions, or where your conduct may breach our terms of service or harm the rights of the Company or others
• Merger or transfer of business: if the Company undergoes a merger, spin-off or transfer of business, your data may be transferred accordingly; we will give notice before any such transfer

We require these parties to observe confidentiality obligations and prohibit them from using the data for any purpose beyond what has been agreed.

06

Your Rights and How to Exercise Them

Under Article 3 of the Personal Data Protection Act, you have the following rights in respect of the personal data we hold about you:

1. To enquire about and request to review your data
2. To request a copy of your data
3. To request supplementation or correction
4. To request that we cease collecting, processing or using your data
5. To request deletion

How to exercise these rights: email us at zl_f@kintaiwu.com.tw from your registered member email address, providing information sufficient to verify your identity. We will process your request within a reasonable period after verification. We may charge the necessary administrative cost for enquiries or for providing copies, as permitted by law.

Please note: if you ask us to cease using or to delete your data, we may be unable to continue providing membership services or to handle orders in progress and subsequent returns or exchanges. In addition, transaction and accounting records that we are required by law to retain (such as invoices and shipping documents) cannot be deleted during the statutory retention period.

07

Account and Data Deletion

If you wish to delete your member account and associated personal data, you may submit a request in any of the following ways:

• Email zl_f@kintaiwu.com.tw with the subject line "Delete member data"
• Use the "Contact Us" form on this Website, or message our Facebook Page or LINE Official Account

After verifying your identity we will delete your member data (including in-store purchase records) and cease using it for marketing. Deletion is irreversible: accumulated member benefits, points, coupons and purchase history will be forfeited, so please confirm before submitting your request. Transaction documents that we are legally required to retain are excluded from deletion.

08

Data Security

We apply reasonable technical and organisational measures to protect your personal data, including SSL/TLS encryption across the site, irreversible encryption of member passwords, tiered access control in our back office, and confidentiality obligations for personnel who handle personal data.

Credit card payments are handled by payment service providers that meet payment industry security standards. We neither obtain nor store your full card number or security code.

Please note that no transmission over the internet can be guaranteed to be completely secure. Please keep your account credentials safe and do not disclose your password to anyone. If you notice any unusual activity on your account, contact customer service immediately.

09

Cross-Border Transfers

Some of the services used by this Website (such as the e-commerce platform, cloud hosting, and analytics and advertising platforms) may operate servers outside Taiwan. Where this is the case, we carry out such transfers in compliance with the Personal Data Protection Act and the requirements of the competent authorities, and require those service providers to apply appropriate safeguards.

In addition, if you ask us to ship goods overseas, we will provide the necessary recipient details to international logistics operators and to the customs authority of the destination in order to complete delivery and customs clearance.

10

Minors

If you are under 18 years of age, please use this Website's services or provide personal data only after your legal representative has read, understood and agreed to this Policy. If we become aware that we have collected data from a minor without the consent of their legal representative, we will delete it upon verification.

11

Changes to This Policy

We may revise this Policy in response to changes in law, our business or our services. Revisions will be posted on this page. Where a change materially affects how personal data is used, we will additionally notify you by email or by notice on this Website. Please check this page periodically for the latest version.

12

Contact Us

If you have any questions about this Policy, or wish to exercise your rights in relation to your personal data, please contact us: