PRIVACY POLICY
Last Updated: [-]
This Privacy Policy ("Policy") sets out the basis upon which Shun Yu Holdings Co., Ltd. ("Company", "we", "us", "our"), may collect, use, disclose or otherwise process personal data of customers in our physical coffee shops, and of users on and through our application(s), website(s) and other related services provided in Taiwan (“Services”), including but not limited to Company’s official website ("Website ") and the mobile application ("Application").
It is important that you read this Policy together with the Terms of Use or any other terms and conditions made available to you when we are collecting or processing your personal data, so that you are aware of how and why we are collecting and processing your personal data under the applicable laws.
We may collaborate with other business partners and entities, and these business partners and entities may have separate and distinct privacy policies in addition to ours. Please ensure that you read through their privacy policies to understand how your personal data is being collected, used and disclosed.
1. Collection of Personal Data
1.1 Definition of Personal Data
"Personal data" means any data, whether true or not, about you (or any other individuals) who can be identified either directly or indirectly, from that data.
1.2 Basis for Personal Data Collection
We generally collect personal data that:
(a) you knowingly, willingly and voluntarily provide in the course of receiving our Services or in connection with your interaction with us (including registration of an account on the Application), after you have been notified of the purposes of collecting your personal data , and have provided consent to the collection and processing of your personal data for these purposes (Provision of your personal data is voluntary. However, if you do not provide your personal data, we may not be able to provide certain Services to you or perform our obligations under the Terms of Use.); or
(b) are permitted or mandated by the applicable laws to collect and process without your consent.
1.3 Personal Data Which We May Collect
(a) Personal data provided by you, including:
- personal details such as name or alias, gender;
- contact details such as your mobile phone number, postal address, email address, and other identifiers or credentials associated with your account on the Application;
- location data such as GPS location (only if enabled);
- financial account and payment information, provided that your full account and payment card number will be directly processed by third-party payment service providers and we only receive limited transaction-related information solely for the purpose of completing and managing your transactions;
- transaction information, such as the products and services you purchase, how often you purchase our products and services, where do you usually make your purchase, which physical coffee shops you usually visit, customization records, and other transaction, purchase, and order information;
- your comments, suggestions or other information that you provide when interacting with us or related third parties which you have duly authorized for them to share your personal data with us; and
- any other personal data that is necessary for the provision of our products and/or services to you, or for interaction with you or fulfillment of your request, as the case may be.
(b) Personal data automatically collected through the provision of our Services, including:
- device information, such as device ID, hardware model, IP addresses, file and app names and versions, unique device identifier (UDID), mobile equipment identifier (MEID), advertising identifiers, or any information that may indicate device or app modification; and
- activities on Website, Application and other related Services such as communication content records, browsing history and browsing records;
(c) Collection of any other data
Your consent will be sought prior to the collection of any additional personal data or any use of your personal data for a new purpose, except as permitted or mandated by applicable laws.
2. Purposes of Collection, Use and Disclosure of Personal Data
We may collect, process and use your personal data for any or all of the following purposes (collectively, the "Purposes") and we may disclose your personal data to third parties where necessary (as specified below) for the following purposes:
2.1 Purposes of Collection and Use
(a) to process, manage, administer and/or facilitate our obligations in relation to your purchase, delivery or use of our products and services, whether through the Website, the Application, our physical coffee shops or other related Services;
(b) to manage and administer your use and/or access to the Website, Application, Services and/or other products and services;
(c) to provide you with user support, and address any queries that you have in relation to the Website, Application, Services and/or other products and services;
(d) to allow you to participate in different features and functions on the Website, Application, and other related Services;
(e) to tailor a better experience for you by remembering your account preferences, purchase history and payment information;
(f) to notify you about changes to our Website, Application, and other related Services;
(g) to communicate with you via your preferred mode of contact about your orders or purchases of our goods and service;
(h) to provide you with location-based services related to your orders and purchases;
(i) to customize and personalize advertisements and marketing materials for you;
(j) to provide you with promotional and marketing materials in connection with our products and/or services provided to you;
(k) to detect and prevent fraud;
(l) to troubleshoot, analyze, improve and update our Website, Application, and other related Services;
(m) to enforce our policies, Terms of Use, and other guidelines and terms and conditions;
(n) to protect our rights, property, security and reputation; and
(o) to comply with applicable laws and regulations.
2.2 Direct Marketing
Where applicable and required by law, we will obtain your opt-in consent before sending marketing or promotional materials directly to you about our products or Services (such as new product launches, campaigns, or coupons). If you do not wish to receive these communications, you may withdraw your consent and opt out at any time, free of charge, using the methods disclosed to you. Upon receipt of your opt-out request, we will cease sending you such messages.
2.3 Disclosure of Personal Data
We will not sell, rent, transfer or divulge your personal data outside the Company, except as necessary for the abovementioned Purposes, as required by law or with prior consent. In particular, we may share certain information of you with third parties, including our service providers (such as our delivery partners, credit card processors, website hosts, etc.) and business partners, and other related entities in the following cases:
(a) where we need to do so to facilitate our obligations to you;
(b) where we engage third parties service providers to perform any of the functions for the abovementioned Purposes;
(c) to comply with our legal or regulatory obligations; and/or
(d) in other cases where you consent to us doing so.
For the avoidance of doubt, we will only share certain information of you with third parties on a strict need-to-know basis; for instance, we will share certain information with a third party for analyzing and improving our business performance only after your personal data has been integrated and aggregated with other data by us.
To the extent permitted by law, we may also share your personal data with those involved in the negotiation or transfer in the context of a merger, acquisition, financing or sale of assets or any other situation involving the transfer of our business assets.
3. Location of Use
3.1 The personal data collected by the Company will be used and stored in Taiwan and, if necessary, transferred to and stored in the Republic of Singapore where our databases and/or service providers are located.
3.2 Where we transfer your personal data, we will implement appropriate and suitable safeguards to ensure that the transferred personal data will be accorded the same level of protection as under the applicable laws.
4. Retention of Personal Data
4.1 We will only retain your personal data for as long as it is necessary to fulfil the purposes for which it is collected, or as required or permitted by applicable laws.
4.2 We will cease to retain your personal data, or remove the means by which the data can be associated with you, as soon as it is reasonable to assume that such retention no longer serves the purpose for which the personal data was collected, and is no longer necessary for business or legal purposes.
5. Protection of Personal Data
5.1 To safeguard your personal data from unauthorized access, collection, use, disclosure, copying, modification, disposal or similar risks, we will implement appropriate administrative, physical and technical measures to secure the storage and transmission of your personal data by us. Details of such measures are available upon request. We will only disclose your personal data both internally and to our authorized third-party service providers on a strict need-to-know basis and under contractual obligations of confidentiality.
5.2 To protect the security of our information systems and the transmission of your personal data, we use Secure Sockets Layer (SSL) mechanism to encrypt data transmissions. We have also implemented firewalls and intrusion prevention systems to block unauthorized access and safeguard your personal information. Additionally, we employ masking, de-identification, and encryption mechanisms for personal data processed and stored in our systems. Access to personal data files and databases is strictly controlled and monitored, with appropriate management policies and mechanisms governing system use, maintenance, staff access, and monitoring for abnormal activity. We regularly review our data collection, storage, and processing practices, including physical security measures, to prevent unauthorized access or use and to reinforce the security of data transmission, storage, and application.
5.3 You should be aware, however, that no method of transmission over the internet or method of electronic storage is completely secure. While security cannot be guaranteed, we strive to protect the security of your information and are constantly reviewing and enhancing our information security measures.
6. Your Rights and How to Exercise
6.1 Pursuant to the applicable law, you have the following rights regarding your personal data that we hold about you:
(a) The right to inquire about and request access to your personal data.
(b) The right to request a copy of your personal data.
(c) The right to supplement or correct your personal data.
(d) The right to demand the cessation of collection, processing, or use of your personal data.
(e) The right to delete your personal data.
You may submit your request in writing to us using the contact details provided below.
6.2 We may charge you a reasonable fee for an inquiry, access request, or request for a copy of your personal data. If so, we will inform you before processing the request. To process your request, we may request for specific information from you to help us verify your identity. This is one of our measures to help safeguard your personal data and prevent any unauthorized access by third parties.
6.3 Upon receipt of your written request for cessation of collection, processing, or use, or for deletion of your persona data, we may require reasonable time (depending on the complexity of the request and its impact on our relationship with you, to the extent permitted by law) for your request to be processed and for us to notify you of the consequences of us acceding to the same, including any legal consequences which may affect your rights and liabilities.
6.4 Whilst we respect your decision to withdraw your consent or to request cessation or deletion, please note that depending on the nature and scope of your request, we may not be in a position to perform obligations under and/or in connection with your contract, and/or continue your contractual relationship (as the case may be).You can update your account information or manage your preferences at any time by logging in to your account via our Application.
7. Cookies
7.1 We may use cookies on our Websites and Applications to collect and process your personal data. Cookies are small data files sent from websites and stored on your hard drive which can, among others, help us improve our Services and enhance your experience.
7.2 Most browsers and devices allow for configurations to accept, block, or manage cookies, and to delete cookies and browsing data. Please note that some or all of our Services may not function properly without the cookies.
8. Contact Details
8.1 You may contact us if you have any enquiries or feedback regarding our personal data protection policies and procedures, or if you wish to make any request, in the following manner:
Shun Yu Holdings Co., Ltd.
Email: []
Phone: []
9. Effect of Policy and Changes to Policy
9.1 This Policy applies in conjunction with any other notices, policies, contractual clauses and consent clauses that apply in relation to the collection, use and disclosure of your personal data by us.
9.2 We may amend the contents of this Policy from time to time due to service adjustments or changes in laws. Any amendments will be announced via our official Website, Services and/or on the Application. You may determine if such revision has taken place by referring to the date on which this Policy was last updated. We may also broadcast information about amendments through the Application or other appropriate means to notify you of any changes. Your continued access and use of our Website, Application, and other related Services provided by us may constitute your acknowledgement and acceptance of such changes.