Privacy Policy
Update and Effective Date: February 2024
Heshun Ben Cao respects your privacy concerns and values our relationship with you.
When you visit the store we established, authorized by our SaaS service provider SHOPLINE (hereinafter referred to as "SHOPLINE"), we may collect, process, and use your personal data (including your employees and/or representatives, agents handling affairs on your behalf). If you visit or make purchases on the store, we may also collect, process, and use your personal data. We fully recognize the importance of personal data to you and are committed to ensuring the integrity and security of the store. This privacy policy describes the types of personal data we collect about you, how we use this information, with whom we share it, and the choices you have regarding our use of this information.
This privacy policy will help you understand the following:
1. What We Collect
2. Information You Provide
3. How We Use Personal Data
4. How We Use "Cookies" and Other Similar Tracking Technologies
5. How We Handle, Share, Transfer, and Disclose Personal Data
6. Your Rights and Choices
7. How We Protect Personal Data
8. How to Update This Privacy Policy
9. How to Contact Us
What We Collect
We may obtain personal data about you from various sources. When you access our store, [extensions][Note: Please include all data collection channels applicable to your business], or through your access to and/or use of our social media/network pages (or their related stores or corresponding applications, such as Facebook, Instagram), we may collect this information. Our products are sold in many department stores or other types of physical stores. If you join our store membership, the relevant records may also be collected by us when you purchase products in physical stores. [Note: Please confirm if POS functionality is used] When you visit this store, our social media/network pages (or their related stores or corresponding applications), we may also collect certain information about your device or usage through automated methods or using cookies, web server logs, and web beacons.
Categories of Information You Provide
The categories of personal data that the store may collect from you may include the following:
1. Identification - (1) Identifiable individual information (e.g., member name, address, phone number, email, etc.); (2) Financial identification information (e.g., credit card or financial institution account information, etc.); (3) Identification in government data (e.g., ID number, unified certificate number, tax number, passport number, etc.).
2. Personal Characteristics - Personal description (e.g., gender, date of birth, size, etc.).
3. Social Situation – (1) Residence and facilities (e.g., residential address, etc.); (2) Property (e.g., movable property owned or other rights); (3) Immigration status (e.g., passport, work permit, residence proof, etc.); (4) Lifestyle (e.g., type of consumer goods used and details of services); (5) Membership in charitable organizations or other groups (e.g., records of participation in associations, clubs, or other voluntary groups).
[Note: Please be sure to list all applicable content to your business]
Information You Provide
You can choose to provide us with your personal data in various ways, such as when you register on our store, shop on our store, or through our social media (or their related stores or corresponding extensions). The types of personal data you may provide to us (if applicable) include:
- Contact information (e.g., name, postal address, email address, mobile or other phone numbers, mobile service provider);
- Age and date of birth;
- Gender, preferred language;
- Ethnicity, gender, preferred language;
- Username and password;
- Payment information (e.g., your payment card number, expiration date, shipping address, and billing address);
- Purchase history;
- Product preferences and communication channel preferences;
- Content you provide (e.g., photos, videos, reviews, articles, survey responses, and comments);
- Information provided to us when you visit our social media pages (e.g., your name, profile picture, likes, location, friend list, and other information described on the registration page of the social media network or application, or geographic location details when you use our mobile application);
- Device identifiers, such as information about your device like MAC address, IP address, or other online identifiers.
[Note: Please be sure to list all applicable content to your business]
You voluntarily provide your personal data to us, but if you do not provide your personal data, you may not be able to receive certain services and promotions.
Why We Collect Your Personal Data
The specific purposes for which the store collects personal data are to provide you with goods or services, including but not limited to providing:
(1) consumer, customer management, and services;
(2) consumer protection;
(3) online shopping and other e-commerce services;
(4) verifying your personal identity (e.g., to protect you from fraud and other criminal activities);
(5) resolving various types of disputes (including but not limited to consumer disputes, intellectual property disputes, etc.);
(6) enhancing secure transactions;
(7) collecting debts;
(8) notifying you of business opportunities, products, services, and updates;
(9) detecting and protecting you and the store from errors, fraud, or other criminal activities, and monitoring compliance risks;
(10) investigating potential illegal activities against personal safety, property safety, and breaches of contract;
(11) fulfilling terms and conditions and return/exchange policies;
(12) actions taken in accordance with legal requirements; and
(13) other purposes obtained with your consent at the time of collection.
How We Use Personal Data
We may use the information you provide for the following purposes:
- To send you promotional content or other communications;
- To provide you with the information and services you request;
- To contact you to follow up or confirm your orders, appointments, returns, or refunds, and to send you other non-marketing communications related to the products and services we provide to you;
- To process your payments and/or transactions;
- To create and manage your account, including access to your purchase history;
- To respond to your inquiries;
- To customize advertising in our store, on social media stores, and other locations to match your interests and history;
- To communicate with you and manage your participation in special events, contests, sweepstakes, activities (if any), surveys, and other offers;
- To operate and communicate with you about our social network or [mobile applications];
- To operate, evaluate, and improve our business (including developing new products and services, enhancing and improving our products and services, managing our communications, analyzing our products, conducting market research, data analysis, and customer relationship management programs, and performing accounting, auditing, and other internal functions);
- To comply with applicable legal requirements, relevant industry standards, and our policies;
- To avoid duplication and ensure the accuracy of your information, we regularly clean, link, or merge our records internally or through our service providers.
[Note: Be sure to list all applicable content to your business]
We may also use this information in other ways, for which we provide specific notice at the time of collection.
If you provide us with your personal data, we intend to use it for direct marketing purposes to offer or promote the availability of our goods and/or services. However, we will confirm that you have not opted out of receiving such marketing messages the first time we send you marketing messages. If you do not wish to receive them, you can express your preference upon receiving the first marketing message or opt out at any time.
If you provide us with your personal data and explicitly consent to such use, we may use the various types of personal data listed in the "Information You Provide" section for direct marketing.
Direct marketing communications may be sent to you through various channels, including phone, mail, email, SMS, mobile applications, web applications, social media stores, and other communication methods. [Note: Include all applicable content to your business] If we have obtained your consent, the personal data you provided on the form or when you subscribed to the above will be used by us for that marketing purpose. Our handling of any data transfers described in this paragraph will be consistent with the content provided in this privacy policy.
If you do not want us to use your personal data for direct marketing purposes, you can opt out of our direct marketing at any time by following the procedures described in the "Your Rights and Choices" section below. If you need it, we must stop using your personal data for direct marketing purposes without charging you any fees.
We will only use your personal data for direct marketing in accordance with the Personal Data Protection Law of the Republic of China. Our direct marketing content may take various forms, including but not limited to marketing mail, emails, and SMS, as detailed in the subsections below.
[Note: Insert the following section if cookies/tracking technologies are enabled]
How We Use "Cookies" and Other Similar Tracking Technologies
What are "Cookies"?
Cookies are small files stored on your computer, mobile phone, or any other smart terminal device when you log into the store or browse store content. They usually contain identifiers, store names, and some numbers and characters. When you visit the store again, the store can recognize your browser through cookies. Cookies may store user preferences and other information.
How We Use "Cookies"
When you use our store, we may collect personal data subjects' device models, operating systems, device identifiers, and login IP address information through cookies or similar technologies and cache personal data subjects' browsing information and click information to view personal data subjects' network environment. Cookies allow us to recognize your identity when visiting the store, continually optimize the store's user-friendliness, and tailor the store to your needs. You can also change your browser settings so that the browser does not accept cookies from our store, but this may affect your use of certain features of the store.
On the store established by SHOPLINE, with the help of cookies and other similar technologies, we can recognize whether you are our existing user or member without needing to log in and authenticate on each page.
How to Manage "Cookies"
You can manage or delete certain types of tracking technologies according to your preferences. Many browsers have a "Do Not Track" feature that sends "Do Not Track" requests to stores.
In addition to the controls we provide, you can choose to enable or disable cookies in your internet browser. Most internet browsers also allow you to choose whether to disable all cookies or only third-party cookies. By default, most internet browsers accept cookies, but you can change this setting. For more information, please refer to the "Help" menu in your internet browser or your device documentation.
The following links provide instructions on how to control cookies in all major browsers:
- [Google Chrome](https://support.google.com/chrome/answer/95647?hl=en)
- [Internet Explorer](https://support.microsoft.com/en-us/help/260971/description-of-cookies)
- [Safari (desktop)](https://support.apple.com/kb/PH5042?locale=en_US)
- [Mozilla Firefox](https://support.mozilla.org/en-US/kb/cookies-information-websites-store-on-your-computer?redirectlocale=en-US&redirectslug=Cookies)
- [Opera](https://www.opera.com/zh-cn/help)
If you use any other browser, please refer to the documentation provided by the browser.
In the store, you can delete existing tracking technologies by clearing the cache.
When you browse the web without logging in, we collect cookies necessary for browsing functionality to provide you with relevant services.
Please note that if you refuse or delete existing tracking technologies, you will need to personally change user settings each time you visit, and we may not be able to provide you with a high-quality user experience, and some functions may not work properly.
How We Handle, Share, Transfer, and Disclose Personal Data
Handling and Use
Some functions of the store may be provided by our third-party partners. We may entrust partners (including technical service providers) to process some of your personal data. For example, when you use the automatic payment function, we may ask a third-party payment company to process your credit card information to charge you for the relevant services as instructed; when using SHOPLINE payments, we may ask third-party service providers to process the personal data of you and your customers, these service providers can facilitate "know your customer" and transaction monitoring and risk management. [Note: Add any other suppliers you share this information with, such as sales channels, payment gateways, shipping, and fulfillment applications] We will sign confidentiality agreements with third-party service providers to manage the purpose, processing period, and responsibilities of data processing and require partners to process data in accordance with our requirements and this privacy policy. If you do not agree to partners collecting personal data necessary to provide relevant services, you or your customers may not be able to use the relevant services.
Sharing
We do not share personal data with any third parties unless one or more of the following situations exist:
[Note: Include all applicable content to your business]
- At your request, or with your prior explicit authorization or consent;
- Related to the fulfillment of our obligations under laws and regulations;
- Directly related to national security, national defense security;
- Directly related to public safety, public health, and significant public interests;
- Directly related to criminal investigation, prosecution, trial, and enforcement;
- To protect your or others' life, property, and other significant legitimate rights, but it is difficult to obtain that person's consent;
- The personal data involved is disclosed by you to the public;
- The personal data involved is collected from legally and publicly disclosed information.
Sharing with SHOPLINE and SHOPLINE Affiliates
To provide you with SHOPLINE products and services, make recommendations that may interest you, resolve account issues, and protect the personal and property safety of our affiliates or other users or the public, you acknowledge and agree that we may share your and your customers' personal data with our affiliates. We will only share personal data to the necessary extent and will be bound by the purposes stipulated in this privacy policy. If we share sensitive personal data or our affiliates use and process personal data for different purposes, we will seek your authorization and consent again.
Sharing with Our Third-Party Partners
We will only share personal data for legal, legitimate, necessary, specific, and explicit purposes and only share the personal data necessary to provide relevant services to you or your customers. We will not share personal data that can identify you unless otherwise required by law or regulations. Typically, these third-party partners are also data controllers and will process personal data in their accounts with your consent. Such partners may have their own separate privacy policies and user agreements.
[If you use third-party marketing applications to collect information about buyer activities on your store, insert]
Additionally, when we use the store, we may use third-party features or services (including applications from the Apps Store, payment gateways, or logistics service providers). Please note that such features or services are provided by third parties. The rules and procedures described in this privacy policy do not apply to such third-party features and services. Any information you provide to third-party stores or services will be directly provided to these network operators. Even if you access it through the store, you must comply with these third parties' applicable privacy policies and user agreements (if any). We are not responsible for the content of any third-party store and the third party's policies on personal data and security measures. Before providing any personal data to third parties, you should read and understand the third party
's privacy policies and user agreements.
Transfer
In principle, we do not transfer control of personal data to any third party, except in the following situations:
- At the request of the data subject, or with your prior explicit authorization or consent;
- Related to the fulfillment of our obligations under laws and regulations;
- Directly related to national security, national defense security;
- Directly related to public safety, public health, and significant public interests;
- Directly related to criminal investigation, prosecution, trial, and enforcement;
- To protect your or others' life, property, and other significant legitimate rights, but it is difficult to obtain that person's authorization and consent;
- The personal data involved is disclosed by you to the public;
- The personal data involved is collected from legally and publicly disclosed information;
- Transfer occurs when the operating entity changes after acquisition, merger, reorganization, or bankruptcy.
Note: If the transfer is required for the above reasons, we will inform you of the purpose and type of information and the transferee (if sensitive information is involved, we will also notify you) before the transfer and obtain your consent unless otherwise provided by laws or regulations. The transferee will continue to fulfill the personal data-related obligations under this agreement. If we go bankrupt or cease operations and there is no transferee, we will delete or anonymize your personal data.
Public Disclosure
In principle, we will not publicly disclose your personal data to the public or undefined groups, but we may disclose your personal data according to our agreement with you or applicable laws and regulations.
[Note: Insert the following section if age restriction is required]
Minors
This store is not applicable to individuals under the age of 18. We do not knowingly collect personal data from children. If you are a parent or guardian and believe your child has provided us with personal data, please contact us at the above address to request deletion.
Your Rights and Choices
We provide you with certain choices regarding the personal data we collect from you, such as how we use this information and how we communicate with you. To update your preferences, request us to remove your information from our mailing lists, or submit a request, please contact us following the instructions below.
[Note: Include opt-out links for any services being used. Common links include:]
Email Opt-Out
You can tell us not to send you marketing communications via email at any time by clicking the unsubscribe link within the marketing emails you receive from us or by contacting us as specified in the "How to Contact Us" section below. You can also opt out of receiving our marketing emails by sending an opt-out request to [insert store's CS email]. [Note: Or insert alternative instructions for sending an opt-out request]
[Note: Include all applicable content to your business]
SMS Opt-Out
You can contact us to request that we do not send SMS messages to you.
Social Network Application Opt-Out
To remove or delete our social media application from your social network account, follow the instructions provided in the social network.
For Facebook: Refer to the instructions provided by Facebook Help Center.
Location Information
When you use our mobile application, you may be asked to provide your location through the mobile application. You can choose not to share your location details by adjusting the location services settings on your mobile device. To decline sharing your location details, change the relevant settings on your mobile device according to the instructions; otherwise, please contact your service provider or device manufacturer.
Withdrawal of Consent
You can withdraw any consent you previously provided to us or object to the processing of your personal data at any time on legitimate grounds. We will apply your preferences going forward. In some circumstances, withdrawing your consent to our use or disclosure of your personal data will mean that you cannot take advantage of certain products or services.
Reviewing, Updating, and Modifying Personal Data
We may retain and use your information as necessary to accomplish the purposes outlined above. You have the right to request access to and receive details about the personal data we maintain about you, update and correct inaccuracies in your personal data, and block or delete that information as appropriate. In certain cases, the right to access personal data may be limited by local law requirements. Before granting access or making corrections, we may take reasonable steps to verify your identity. You can request to review, change, or delete your personal data by sending an email to [insert store's CS email][Note: or contact our Data Protection Officer]. [Note: Add contact information for the data protection agency or store in your jurisdiction]
How We Protect Personal Data
We maintain appropriate administrative, technical, and physical safeguards designed to protect the personal data you provide against accidental, unlawful, or unauthorized destruction, loss, alteration, access, disclosure, or use. However, no system is completely secure, and we cannot ensure the security of your information under all circumstances, including the security of your data during transmission to us or the security of data on your mobile device.
For information on how SHOPLINE retains and protects personal data, please refer to SHOPLINE's Privacy Policy (https://shopline.tw/about/privacy).
How We Update This Privacy Policy
This privacy policy may be periodically updated without prior notice to reflect changes in our personal data practices. We will post a prominent notice on our store to notify you of any significant changes to our privacy policy and indicate at the top of the policy when it was most recently updated.
How to Contact Us
If you have any questions or comments about this privacy policy or if you would like us to update information we have about you or your preferences, please contact us by email at HS@hsmed.co.
