DA CHENG BRA Privacy Policy

1. Preamble & Core Principles

We value the importance of personal data and privacy. In accordance with the Personal Data Protection Act and relevant laws and regulations, DA CHENG BRA is committed to protecting the personal data you (the “Consumer” or “User”) provide. This Policy explains how, when you use DA CHENG BRA’s official website, in-store checkout systems, membership services, marketing activities, customer service channels, social media, and other related services (collectively, the “Services”), we collect, use, process, store, and protect your personal data, and how you may exercise your rights.

We follow these principles: lawfulness, fairness, and transparency; purpose limitation; data minimization; accuracy; security; and accessibility. All collection and use of data are based on specific and legitimate purposes, with proper notice provided as required by law.

2. Types of Personal Data We Collect & How We Collect It

(1) Data You Provide

When you register as a member, shop online, participate in events, subscribe to newsletters, or contact us, you may provide:

• Basic identity information: name, gender, date of birth, phone number, email address, mailing address, member ID, etc.
• Billing & transaction information: order details, payment method, invoice information, return/exchange records, last four digits of credit card, etc.
• Interaction information: customer service records, newsletter subscriptions, marketing responses, survey content, etc.
• Social login information (if applicable): if you log in via a third-party account, we may, within the authorized scope, obtain public information such as your name and email.

(2) Data Collected Automatically

To maintain site security and enhance user experience, our website or apps may automatically collect:

• Device information (e.g., browser type, OS version, IP address, device model, language settings).
• Usage logs (e.g., pages viewed, dwell time, clicks, login/logout times).
• Cookies and similar technologies used to remember preferences, login status, and analyze trends. You may reject Cookies in your browser settings; however, some functions may not work properly.

(3) Data from Third Parties

If you join our activities through third-party marketing campaigns, ad platforms, or partner brands, we may lawfully receive necessary data within the authorized scope to complete notifications, product delivery, or after-sales service.

3. Purposes & Scope of Use

1. Membership management: registration, identity verification, membership tier maintenance, reward points management, and birthday gifts.
2. Product sales & performance of contract: online shopping, order processing, payment, shipping, returns/exchanges, and after-sales service.
3. Marketing & customer relations: newsletters, promotional notices, event invitations, satisfaction surveys, etc.
4. Security & anti-fraud: user identity confirmation, prevention of unauthorized access, and prevention of unlawful misuse.
5. Service optimization & analytics: anonymized statistics based on user behavior to improve our website and product quality.
6. Legal or contractual obligations: compliance with competent authorities’ requirements and fulfillment of contractual needs.

4. Sharing, Entrusted Processing & Disclosure

We do not provide your personal data to third parties unless required by law or with your consent. However, disclosure or entrusted processing may occur within the necessary scope in the following situations:

• Outsourced service providers: e.g., payment processors, logistics providers, newsletter senders, call centers, etc., to help deliver the Services.
• Partners: during events, promotions, or co-branded activities, after clear notice and with your consent.
• By legal procedures: when required by courts or competent authorities.

All entrusted or partner units must comply with this Policy and confidentiality obligations, and may not use data beyond the entrusted purposes.

5. Retention Period & Location

We retain your data for the period necessary to achieve the purposes of collection. As a general rule:

• Membership data: retained for up to five (5) years from the date of last interaction.
• Transaction data: retained for seven (7) years in accordance with laws (e.g., tax and accounting records).
• Marketing records: retained for two (2) years from the end of the activity.

All data are stored on servers with robust security protections, using encryption and access controls to ensure safety.

6. Security Measures

• Use of SSL encryption to protect data in transit.
• Strict access controls for employees handling personal data.
• Regular security audits and staff training.
• Monitoring for abnormal activities to prevent unauthorized intrusions.

In the unlikely event of a data breach, we will promptly notify competent authorities and affected individuals in accordance with applicable law and implement remedial measures.

7. Your Rights

Under the Personal Data Protection Act, you may exercise the following rights:

1. Inquire about or request access to your personal data;
2. Request copies;
3. Request supplementation or correction;
4. Request cessation of collection, processing, or use; and
5. Request deletion of your personal data.

To exercise any of the above rights, please contact us in writing or by email. We will respond and handle your request within a reasonable time.

8. Marketing Communications & Opt-Out

To provide you with the latest promotions and event information, DA CHENG BRA may contact you via newsletters, SMS, or push notifications. If you no longer wish to receive such messages, you may opt out at any time via the unsubscribe link, your member account settings, or by contacting customer service. We will cease sending communications without delay.

9. Protection of Minors’ Data

If you are under the age of twenty (20), you should use the Services only after your legal guardian has read and agreed to this Policy. If a guardian discovers that personal data was provided without consent, they may notify us to delete it, and we will handle it promptly.

10. Amendments & Notification

We may amend this Policy from time to time in response to changes in laws or services. For material changes, we will announce them on the homepage of our website or notify you by email or other means. The latest version will be published on our official website: www.dcbra.com.tw.

12. Language

This Policy is provided in multiple languages. In the event of any inconsistency or discrepancy, the Chinese version shall prevail.