Privacy & Cookie Policy

1. Scope and controller

This policy applies to the website, member center, shopping cart, checkout, orders, Rewards, customer support, Google Sign-In, cookie preferences, and related services available through dailybeautyjewel.com.

The website is operated by DailyBeautyJewel. In this policy, “DailyBeautyJewel,” “we,” “us,” and “our” refer to the controller of the website services.

Third-party websites and services, such as Google, payment providers, and logistics providers, process information under their own privacy policies. Please review those policies when you use their services or leave our website.

2. Information we collect

2.1 Information you provide

• Account and contact information: name, email address, password hash, phone number, birthday, and membership details you provide or update.
• Order and delivery information: products purchased, order amount, recipient name, phone number, country or region, address, convenience-store location, and delivery notes.
• Payment-related information: payment method, payment status, transaction or payment reference information, and details needed to process refunds. A payment provider may collect full payment details directly from you and process them under its own policy.
• Support and request information: messages and attachments you submit by email, contact form, order messaging, or Privacy Rights Request.
• Rewards and benefit information: eligible spending, membership tier, coupons, birthday rewards, welcome benefits, and issuance or redemption history.

2.2 Information generated when you use the website

• Login and session data, shopping cart, language preference, cookie-consent status, and locally stored preferences.
• IP address, browser and device type, operating system, access time, page requests, error logs, and security-event records.
• Technical records reasonably necessary to prevent duplicate actions, fraud, abuse, and unauthorized access.

Please do not submit sensitive personal information that is unrelated to our services through general forms or email.

3. Google Sign-In data

When you choose “Sign in with Google,” we use Google Identity Services and receive the basic account information needed for authentication:

• Your Google Account unique identifier (sub)
• Email address
• Whether Google has verified the email address
• Google Account display name

The Google sign-in response may contain a profile-image URL. Our current implementation does not download, store, or use that image as your member profile picture.

You may use our Privacy Rights Request page to request that a Google link be removed or that eligible related data be deleted. Unlinking Google does not necessarily delete your website member account; please state clearly which action you want.

4. How we use information

We may use your information as reasonably necessary to:

• Create, authenticate, maintain, and protect member accounts, including standard login and Google Sign-In.
• Process carts, orders, payments, refunds, shipping, pickup, returns, and transaction notices.
• Provide the member center, Wishlist, Rewards, coupons, birthday rewards, welcome benefits, and other member services you choose to use.
• Respond to customer support, order messages, privacy requests, disputes, and after-sales matters.
• Operate, secure, back up, troubleshoot, and maintain the website and prevent fraud, abuse, or unauthorized actions.
• Meet accounting, tax, consumer-protection, payment, logistics, judicial, and other applicable legal obligations.
• Analyze website use or send marketing information where we have consent or another lawful basis. The website currently does not load Google Analytics, Google Tag Manager, Meta Pixel, or Facebook Pixel.

5. Sharing and service providers

We do not sell or rent personal information. We may disclose or make information available only as reasonably necessary to:

• Google: to provide Google Account authentication and sign-in.
• Payment providers: such as ECPay, for payment, payment-code services, transaction verification, refunds, and fraud prevention.
• Logistics and delivery providers: including convenience-store pickup networks, home-delivery services, or international carriers. Applicable international orders may be delivered by carriers such as UPS.
• Website operations providers: hosting, backup, email, security, maintenance, and technical-support providers.
• Authorities or rights holders: where required by law, court order, fraud investigation, or to protect users, DailyBeautyJewel, or third-party rights.
• Business transaction recipients: if a merger, asset sale, or transfer of operations occurs, information may transfer with the relevant business subject to confidentiality and applicable law.

Service providers should process information only as necessary to provide the services entrusted to them and may also process information under the laws and privacy policies applicable to them.

6. Retention and international processing

We retain information according to its type and purpose:

• Member and Google-link data is generally retained until the account or link is deleted, or until it is no longer reasonably necessary.
• Order, payment, refund, accounting, tax, customer-support, and dispute records are retained as needed to complete transactions, resolve disputes, prevent fraud, and meet legal recordkeeping obligations.
• Security, access, and error logs are retained for a reasonable period needed to maintain system security, investigate incidents, and improve services.
• Cookie and preference data is retained as described in Section 9 or until you clear it.

Because we may use Google, hosting, payment, email, or international logistics services located in other countries or regions, information may be transferred or processed across borders as necessary to provide the service. We take reasonable measures and expect applicable providers to protect information according to their contracts and legal obligations.

7. Data security

We use reasonable administrative and technical safeguards appropriate to the risk, such as HTTPS transmission, account authentication, access controls, restrictions on database and file access, backups, security logging, and necessary system maintenance, to reduce the risk of unauthorized access, alteration, loss, disclosure, or misuse.

No internet transmission or information system can be guaranteed completely secure. Please protect your password and device, do not share login credentials, and sign out after using a shared device. Contact us promptly if you suspect unauthorized access.

8. Your rights and choices

Subject to applicable law, you may request to:

• Access, review, or obtain a copy of personal information we hold about you.
• Supplement or correct inaccurate information.
• Stop or restrict certain collection, processing, or use.
• Delete personal information, except where retention is required for transactions, tax, accounting, fraud prevention, disputes, or other legal obligations.
• Unlink Google from your website member account.
• Change non-essential cookie preferences at any time.

You may update certain details in the member center or submit a request through Privacy Rights Request. We may verify your identity before acting on a request. If you do not provide information necessary for an account, payment, or delivery, we may be unable to register or authenticate an account, complete an order, accept payment, deliver goods, or provide support.

9. Cookies and similar technologies

DailyBeautyJewel uses cookies, browser local storage, and similar technologies to operate the website, remember preferences, and protect transaction security.

The preference center stores your choices in the browser local-storage item dbj_cookie_preferences_v1 and uses the dbj_cookie_consent cookie to record that you have completed a choice. That cookie is set for up to 365 days. You can reopen the settings at any time or clear cookies and local storage through your browser.

Blocking necessary cookies may prevent login, cart, checkout, language switching, or other core functions from working correctly.

10. Taiwan PDPA notice

Where Taiwan’s Personal Data Protection Act applies, the collector is DailyBeautyJewel. The purposes, categories of data, period, territories, recipients, and methods of use are described in Sections 2, 4, 5, and 6. You may exercise rights of inquiry, review, copy, supplementation, correction, cessation of collection/processing/use, and deletion as described in Section 8.

If required information is not provided or is incomplete, we may be unable to provide member registration, authentication, Google linking, order formation, payment, delivery, refunds, Rewards, support, or other services.

11. Changes to this policy

We may update this policy when our services, technology, third-party providers, or legal requirements change. Updates will be posted on this page with a revised “Last updated” date. Where a change materially affects your rights, we will provide more prominent notice where reasonably practicable.

12. Contact us

For questions about this policy, Google Sign-In data, cookies, account linking, or personal-information handling, email sales@dailybeautyjewel.com or use our Privacy Rights Request page.