Privacy Policy

BRIGHT SKIN Privacy Policy

Updated and effective date: 2025.05.06

The operators of BRIGHT SKIN (hereinafter referred to as "we", "us" or "our") respect your concerns about privacy and value our relationship with you.

When you visit a store (hereinafter referred to as the "Store") established by our SaaS service provider SHOPLINE (hereinafter referred to as "SHOPLINE") with authorization from us, we may collect, process and use personal data about you (including your employees and/or representatives, and persons acting on your behalf to handle matters). If you visit or purchase on the store, we may also collect, process and use your personal data. We are fully aware of the importance of your personal data and we are committed to ensuring the integrity and security of our store. This Privacy Policy describes the types of personal data we collect about you, how we use that information, with whom we share it, and the choices you have regarding our use of that information.

This Privacy Policy will explain to you the following:

What we collect
Information You Provide
How we use personal data
How we use cookies and other similar tracking technologies
How we process, share, transfer and disclose personal data
Your Rights and Choices
How we protect personal data
How this Privacy Policy is updated
How to Contact Us

What we collect

We may obtain personal data about you from a variety of sources. We may collect this information when you interact with us through our store, or through your visit and/or use of our social media/social networking pages (or their related stores or corresponding applications, such as Facebook, Instagram). Our products may be sold in many department stores or other types of physical stores. If you are a member of our store, when you purchase goods in a physical store, relevant records will also be collected by us. When you visit this store, our social media/social networking pages (or their related stores or corresponding applications), we may also collect certain information about your equipment or usage by automated means or by using technologies such as cookies, web server logs and web beacons.

The type of information you provide

The categories of personal information that the store collects from you may include the following: 1. Identification - (1) Identifiers of individuals (such as a member’s name, address, phone number, email address, etc.); (2) Identifiers of finances (such as credit card or financial institution account information, etc.); (3) Identifiers in government data (such as identity card number, unified card number, tax registration number, passport number, etc.). 2. Personal characteristics - personal description (such as gender, date of birth, size, etc.). 3. Social situation – (1) Home and facilities (such as residential address, etc.); (2) Property (such as movable property owned or with other rights, etc.); (3) Immigration status (passport, work permit, residence certificate, etc.); (4) Lifestyle (such as types of consumer goods used and details of services, etc.); (5) Membership of charitable organizations or other groups (such as records of participants in corporate bodies, clubs or other voluntary groups, etc.).

Information You Provide

You may choose to provide us with Personal Data in a variety of ways, such as when you register on our store, when you make a purchase on our store, or through our social media (or their related stores or corresponding expansions). The types of personal data you may provide to us include, where applicable:

Contact information (e.g., name, postal address, email address, mobile or other telephone number, mobile service provider);
Age and date of birth;
gender, preferred language;
Race, gender, preferred language;
Username and Password
Payment information (such as your payment card number, expiration date, shipping address and billing address);
Purchase history;
Product preferences and communication channel preferences;
Content you provide (such as photos, videos, reviews, articles, survey responses and comments);
Information you provide to us when you visit our social media pages (such as your name, profile picture, likes, location, friends list and other information described on the social media network or application registration page, or your geolocation details when you use our mobile applications);
Device identifiers, such as information about your device, such as its MAC address, IP address, or other online identifiers.
Meta Platform Information: When you interact with our Services, link your account or log in through a Meta Platform (such as Facebook or Instagram, “Meta Platform Information”), we may collect information that you authorize Meta Platform to share with us in accordance with its terms of service and your privacy settings. This information may include your public profile information (such as name, profile picture), email address, friends list, and content or location information that you publicly share or like on the Meta Platform. We use this Meta platform information mainly to help you simplify the registration process, create or link your account in our services, provide a customized or personalized user experience (for example, displaying content or recommendations related to your interests), and, with your explicit consent, for social interaction features or to send you related service notifications or marketing information. We will strictly abide by Meta's Open Platform Terms of Use, the provisions of this Privacy Policy and relevant applicable laws when collecting and processing all Meta platform information.

You provide us with your personal data on a voluntary basis, but if you do not provide us with your personal data, you may not be able to receive certain services and promotions.

Why we collect your personal data

The specific purpose of the store collecting personal information is to provide you with goods or services, including but not limited to: (1) consumer and customer management and services; (2) consumer protection; (3) online shopping and other e-commerce services; (4) verifying your personal identity (such as to protect you from fraud and other criminal acts); (5) resolving various types of disputes (including but not limited to consumer disputes, intellectual property disputes, etc.); (6) promoting safe transaction behavior; (7) collecting debts; (8) notifying you of business opportunities, products, services and updates; (9) detecting and protecting you and the store from errors, fraud or other criminal acts, and monitoring compliance risks; (10) investigating potential illegal activities against personal safety, property safety and breach of contract; (11) enforcing terms and conditions and return and exchange policies; (12) actions required by law; and (13) other purposes for which you consent at the time of collection.

How we use personal data

We may use the information you provide for the following purposes:

Send you promotional content or other communications;
Provide you with requested information and services;
Contact you to follow up or confirm your orders, appointments, returns or refunds, and to send you other non-marketing communications related to the products and services we provide to you;
Process your payments and/or transactions;
Create and manage your account, including accessing your purchase history;
To respond to your inquiries;
Tailor advertising in our stores, on social media outlets and elsewhere to suit your interests and history;
Communicate with you and administer your participation in special events, contests, sweepstakes, campaigns (if any), surveys, and other offers;
To operate and communicate with you about our social networks or [mobile applications];
To operate, evaluate and improve our business (including developing new products and services, enhancing and improving our products and services, managing our communications, analyzing our offerings, performing market research, data analysis and customer relationship management initiatives, and performing accounting, auditing and other internal functions);
Comply with applicable legal requirements, relevant industry standards and our policies;
To avoid duplication and ensure the accuracy of your information, we periodically perform data cleansing, linking or merging our records either internally or through our service providers.
Any Meta Platform Information we obtain from the Meta Platform will be used strictly for the purposes described in this Privacy Policy and agreed to by you at the time of authorization, and will fully comply with Meta's Open Platform Terms of Use and all relevant applicable policies. Unless otherwise stated in this policy or with your explicit consent, we will not use your Meta Platform information for other undisclosed purposes. If we need to use your Meta Platform information to establish or significantly enhance your personal user portrait (profile augmentation) in the future, or for any new purpose beyond the scope of your initial consent, we will provide you with clear instructions in advance and obtain your explicit consent again before proceeding.

We may also use this information in other ways for which we will provide specific notice when we collect the information.

If you provide us with your personal data, we intend to use it for direct marketing purposes to offer or advertise the availability of our goods and/or services. However, we will confirm that you are willing to receive marketing messages when we send you marketing messages for the first time; if you are not willing, you can express your wishes to us when you first receive marketing messages, and you can also refuse to receive marketing messages at any time.

We may use the categories of personal data set out in the “Information You Provide” section above in direct marketing if you provide us with the information and expressly consent to such use.

Direct marketing communications may be sent to you through various channels, including telephone, post, email, text message, mobile applications, web applications, social media stores and other communication methods. If your consent has been obtained, the personal data you provide in the form or when agreeing to the above subscription will also be used by us for such marketing purposes. Our handling of any data transfer issues described in this paragraph will be consistent with that provided in this Privacy Policy.

If you do not want us to use your personal data for direct marketing, you may opt-out of our direct marketing at any time by following the procedures set out in the “Your Rights and Choices” section below. If you so request, we must cease using your personal data for direct marketing purposes without charging you any cost.

We will only use the personal data you provide for direct marketing purposes in accordance with the Personal Data Protection Act of the Republic of China. Our direct marketing communications may come in several forms, including but not limited to marketing mail, email and text messages, as detailed in the following subsections.

How we use cookies and other similar tracking technologies

(1) What are Cookies?

Cookies are small files stored by the store server on your computer, mobile phone or any other smart terminal device when you log in to the store or browse the store content. They usually contain an identifier, store name and some numbers and characters. When you visit the store again, the store can recognize your browser through cookies. Cookies may store user preferences and other information.

(2) How to use "Cookies"

When you use our store, we may collect the device model, operating system, device identification code and login IP address information of the personal data subject through cookies or similar technologies, and cache the browsing information and click information of the personal data subject in order to view the network environment of the personal data subject. Cookies allow us to recognize you when you visit the store, to continuously optimize the user-friendliness of the store and to adapt the store to your needs. You can also change your browser settings so that your browser does not accept cookies on our store, but this may affect your use of certain features of the store.

In the stores we have created in SHOPLINE, with the help of cookies and other similar technologies, we can recognize whether you are an existing user or member of ours without having to log in again and authenticate yourself on each page.

(3) How to manage cookies

You can manage or delete certain categories of tracking technologies based on your preferences. Many browsers have a “Do Not Track” feature that can send a “Do Not Track” request to stores.

In addition to the controls we provide, you can choose to enable or disable cookies in their internet browser. Most internet browsers also allow you to choose whether to disable all cookies or only third-party cookies. Most internet browsers accept cookies by default, but this setting can be changed. For more information, see the Help menu in your Internet browser or the device's documentation.

The following links provide instructions on how to control cookies in all major browsers:

Google Chrome: https://support.google.com/chrome/answer/95647?hl=en
IE: https://support.microsoft.com/en-us/help/260971/description-of-cookies
Safari (desktop): https://support.apple.com/kb/PH5042?locale=en_US
Firefox: https://support.mozilla.org/en-US/kb/cookies-information-websites-store-on-your-computer?redirectlocale=en-US&redirectslug=Cookies
Opera: https://www.opera.com/en-us/help

If you use any other browser, please refer to the documentation provided by your browser.

On the Store, you can delete existing tracking technologies by clearing your cache.

When you browse the web without logging in, we will collect cookies required to achieve browsing functions so that we can provide you with related services.

Please note that if you refuse to use or delete existing tracking technologies, you will need to change your user settings personally each time you visit. We may not be able to provide you with a quality user experience and some features may not function properly.

How we process and use, share, transfer and disclose personal data

(1) Processing and Utilization

Certain features of the store may be provided by our third-party partners, and we may entrust our partners (including technical service providers) to process some of your personal data. For example, when you use the automatic payment function, we may ask a third-party payment company to process your credit card information so that we can charge you the relevant service fees according to your instructions; when you use SHOPLINE payment, we may ask third-party service providers to process your and your customers' personal data, which can facilitate "know your customer" and transaction monitoring and risk management. [Note: Add any other vendors you share this information with. For example, sales channels, payment gateways, shipping and fulfillment applications] We will sign confidentiality agreements with third-party service providers to manage the purpose of data processing, processing period and responsibilities of both parties, and will require partners to process data in accordance with our requirements and this Privacy Policy. If you do not agree with the partners collecting personal data required to provide relevant services, you or your customers may not be able to use the relevant services.

(2) Sharing

We will not share personal data with any third party unless one or more of the following circumstances apply:

At your request, or with your prior express authorization or consent;
In connection with fulfilling our obligations under laws and regulations;
Directly related to national security and national defense security;
Directly related to public safety, public health and major public interests;
Directly related to criminal investigation, prosecution, trial and enforcement;
To protect your or any other person's life, property and other major legal rights, but it is difficult to obtain that person's consent;
The personal data in question is disclosed to the public by you;
The personal data involved is collected from lawful and publicly disclosed information.
Sharing with SHOPLINE and SHOPLINE’s Affiliates: You acknowledge and agree that we may share your and your customers’ personal information with our affiliates to provide you with SHOPLINE products and services, make recommendations that may be of interest to you, resolve account issues, and protect the life and property safety of our affiliates, other users, or the public. We will only share personal data to the extent necessary and subject to the purposes set out in this Privacy Policy. If we share sensitive personal data or our affiliates use and process personal data for different purposes, we will seek your authorization and consent again.
Sharing with our third-party partners: We will only share personal data for legitimate, lawful, necessary, specific and explicit purposes, and will only share personal data necessary to provide relevant services to you or your customers. We will not share personal information that can identify you unless otherwise required by law or regulation. Typically, these third-party partners are also data controllers and will process personal data in their own accounts based on your consent. Such partners may have their own separate privacy policies and user agreements.

In addition, when we use the Store, we may use third-party features or services (including apps of Apps Stores, payment gateways, or logistics service providers). Please note that such features or services are provided by third parties. The rules and procedures described in this Privacy Policy do not apply to such third-party features and services. Any information you provide to third-party stores or services will be provided directly to the network operators of those services. Even if you access them through the Store, you are subject to the applicable privacy policies and user agreements (if any) of those third parties. We are not responsible for the content of any third-party store or third-party policies regarding personal data and security measures. Before providing any personal information to a third party, you should read and understand the third party's privacy policy and user agreement.

(3) Transfer

In principle, we will not transfer control of your personal data to any third party, except in the following circumstances:

At the request of the personal data subject, or with your prior explicit authorization or consent;
In connection with fulfilling our obligations under laws and regulations;
Directly related to national security and national defense security;
Directly related to public safety, public health and major public interests;
Directly related to criminal investigation, prosecution, trial and enforcement;
To protect your or any other person's life, property and other major legal rights and interests, but it is difficult to obtain the authorization and consent of that person;
The personal data in question is disclosed to the public by you;
The personal data involved is collected from lawful and publicly disclosed information;
Transfers are made when there is a change in the operating entity following an acquisition, merger, reorganization or bankruptcy.

Note: If transfer is necessary for the above reasons, we will inform you of the purpose and type of information and the transferee before the transfer (if sensitive information is involved, we will also inform you) and obtain your consent, unless otherwise required by law or regulation. The Transferee will continue to perform its obligations with respect to personal data under this Agreement. If we go bankrupt or cease operations and there is no assignee, we will delete or anonymize your personal data.

(4) Public disclosure

In principle, we will not disclose your personal data to the public or undefined groups, but we may disclose your personal data in accordance with our agreement with you or applicable laws and regulations.

Minors

This store is not intended for individuals under the age of 18. We do not intentionally collect personal information from children. If you are a parent or guardian and believe that your child has provided us with Personal Information, please contact us at the address above to request deletion.

Your Rights and Choices

We offer you certain choices regarding the personal information we collect from you, such as how we use the information and how we communicate with you. To update your preferences, ask us to remove you from our mailing list or submit a request, please contact us as described below.

Email Opt-Out Notice

You can tell us not to send you marketing communications by email at any time by double-clicking the unsubscribe link in a marketing email you receive from us or by contacting us as described in the "How to Contact Us" section below. You may also opt-out of receiving marketing emails from us by sending an opt-out request to service@brightskin.tw.

SMS Exit Announcement

You can ask us not to send you text messages by contacting us as follows.

Social Network Application Exit Announcement

To remove or delete our social media applications from your social network account, please follow the instructions from the social network.

For Facebook: See the instructions provided in the Facebook Help Center.

Geographic location information

When you use our mobile applications, you may be asked to provide your geographic location through the mobile application. You can choose not to share your location details by adjusting the location services settings of your mobile device. To opt out of sharing your location details, follow the instructions on your mobile device to change the relevant settings; otherwise, contact your service provider or device manufacturer.

Withdrawal of consent

You can withdraw any consent you have previously provided to us, or object to the processing of your personal data on legitimate grounds at any time. We will apply your preferences in the future. In some cases, withdrawing your consent to our use or disclosure of your personal data will mean that you are unable to take advantage of some of our products or services.

Review, update and modify personal data

We may retain and use your information as necessary to achieve the purposes listed above. You have the right to request access to and receive details about the personal data we maintain about you, to update and correct inaccuracies in your personal data, and to have that information blocked or deleted, as appropriate. In some cases, the right to access personal data may be limited by local legal requirements. We may take reasonable steps to verify your identity before granting access or making corrections. You may request to review, change or delete your personal information by sending an email to service@brightskin.tw.

In particular, with respect to the Meta Platform Data you provide to us through the Meta Platform, in addition to responding to your deletion request, we promise to delete or de-identify your Meta Platform Data as soon as possible, either proactively or upon request by Meta, in the following circumstances:

When the retention of the Meta Platform data is no longer necessary for the legitimate business purposes notified and agreed to by you when it was initially collected, or is no longer necessary for the performance of services;
When we cease operating products or services that use the Meta Platform Data to obtain related functionality;
When Meta asks us to delete it based on protecting user rights or its platform policies;
When the user withdraws consent, or the service relationship between the user and us is terminated (for example, you delete your account), and we are not required by law to continue to retain such information;
When relevant laws and regulations require deletion.

Unless the Meta Platform data has been effectively aggregated, anonymized or de-identified so that it can no longer be associated with a specific individual.
If you would like to delete your Facebook login app data associated with Bright Skin, you can do so by following the steps below.

How we protect personal data

We maintain appropriate administrative, technical and physical safeguards designed to protect the personal information you provide from accidental, unlawful or unauthorized destruction, loss, alteration, access, disclosure or use. However, no system is completely secure and we cannot guarantee that information about you will remain secure under all circumstances, including the security of your data while it is transmitted to us or the security of your data on your mobile device.

For information on how SHOPLINE retains and protects personal data, please refer to the SHOPLINE Privacy Policy (https://shopline.tw/about/privacy).

How We Update This Privacy Policy

This Privacy Policy may be updated periodically, without prior notice, to reflect changes in our personal data practices. We will post a prominent notice on our store to notify you of any significant changes to our Privacy Policy and indicate at the top of the policy when it was most recently updated.

How to Contact Us

If you have any questions or comments about this Privacy Policy, or if you would like us to update information about you or your preferences, please email us at: service@brightskin.tw

Last updated: 2025.05.06