Privacy policy
Data we collect
- Account: your email and password. The password is stored hashed; we cannot see it. Name, phone and address are optional.
- Orders and subscriptions: name, phone, email, shipping address, delivery time, note, items and amounts, and the last five digits of your transfer account when you report a subscription payment.
- Sign-in security: an identifier for your usual browser (stored only as a hash) and a rough browser and operating system description, used for new-device sign-in alerts.
- Browsing: site traffic statistics (see “Third-party services”), without your name, phone, email or address.
How we use it
- To process orders and subscriptions: confirm orders, confirm payments (including checking subscription transfers), ship, and handle after-sales and refunds.
- To send order confirmation, change and cancellation emails, verification codes and new-device sign-in alerts.
- To keep accounts secure and prevent abuse.
- To count page views and the purchase flow so we can improve the site.
- We do not sell your personal data, and we do not use it for anything unrelated to the above.
Third-party services
- Cloudflare: provides our hosting, database, email sending and traffic statistics; your data is stored in or passes through Cloudflare systems.
- Carrier (Kerry TJ Logistics): to deliver your order we give the carrier the recipient’s name, phone and address.
- Google Analytics: counts page views and the purchase flow. Events carry only product, amount and order number, never name, phone, email or address; it is not loaded on account pages, the order lookup page or the admin area.
- Google Customer Reviews: after you place an order we pass your email, order number and estimated delivery date to Google so it can ask whether you would like a survey after delivery. If you decline, you will not receive one. Google handles this data under its own privacy policy.
- Google Maps: the footer embeds a Google map showing our address. When the footer loads, your browser connects to Google, which may receive your IP address and browser information and set cookies; we do not pass your personal data to Google for this. Google handles this data under its own privacy policy.
- LINE (LINE Corporation): if you choose to sign in with LINE or link LINE, we receive only your LINE user ID and display name (not your friend list or chats; email is entered and verified separately) to identify your member account. You can revoke the authorization in your LINE settings. LINE handles the authorization under its own privacy policy.
- ECPay (Green World FinTech): when you choose to pay by credit card or ATM virtual account, your browser goes to ECPay’s payment page and we pass ECPay the order number, amount and item name. Card details are entered only on ECPay’s page and never pass through or are stored on our site. After payment, ECPay tells us the result and a transaction number (for ATM, also the virtual account and deadline). ECPay handles this data under its own privacy policy.
- SMS provider (Mitake): used only when an SMS verification code is needed; your phone number and the code are passed to the provider to send.
- Apart from the above and legal requirements, we do not share your data with other third parties.
Your rights and contact
- Members can view and correct their name, phone and address on the “Edit profile” page, and change their email (the new address must be verified).
- You can call or email us at any time to ask to access, correct or delete your personal data, or to stop its use. We act once we have confirmed it is you; order records we must keep for bookkeeping, tax and after-sales are kept for the period required by law.
- If this policy changes, we will post the update on this page.
Questions about your personal data? Call or email us:08-706-2222 contact@royaljade.com.tw
