跳至主內容

Privacy Policy

Data Protection · Transparency

Yellow Girl takes your privacy seriously. This policy explains what data we collect, how we use it, and the choices you have.

Effective: 2026-06-01

1. What We Collect

To provide our products, fulfillment, customer service, and membership features, we collect the following categories of personal data:

  • ·Identity: name, email, phone number
  • ·Order data: shipping address, items and amount
  • ·Payment: last 4 digits of card, invoice carrier (we never store full card numbers)
  • ·Account: hashed password, date of birth, membership tier, cumulative spend
  • ·Behavioral: browsing history, cart contents, cookies and device info
  • ·Support: correspondence and contact history

2. How We Use Your Data

  • ·Processing orders, payments, fulfillment, and issuing e-invoices
  • ·Providing membership features, order tracking, loyalty records, and birthday gifts
  • ·Aggregated, non-identifying analysis of member purchasing
  • ·Customer support and quality issue resolution
  • ·Site optimization, personalization, and shopping experience improvements
  • ·Sending marketing SMS and emails (only with your consent)
  • ·Fraud prevention, account security, and legal compliance

3. Who We Share With

We only share data with the following third-party service providers as necessary for fulfillment and operations:

  • ·PAYUNi — payment processing (credit card, ATM, convenience store, LINE Pay, e-invoice)
  • ·Logistics provider — Black Cat refrigerated home delivery
  • ·Resend — transactional email delivery
  • ·Mitake — SMS delivery
  • ·Cloudflare — CDN, DNS, DDoS protection
  • ·Railway — application hosting and database
  • ·Lawful disclosure when required by law or due-process request from authorities

We never sell or rent your personal data to third parties for marketing purposes outside the scope above.

4. Data Retention

We retain your personal data only as long as necessary to fulfill the purposes above:

  • ·Orders and transaction records: at least 5 years (per Taiwan tax law)
  • ·Member account data: until you request account deletion
  • ·Support correspondence: 2 years after the last interaction
  • ·Marketing consent records: 1 year after consent withdrawal
  • ·Cookies and browsing logs: up to 12 months

5. Your Rights

Under the Taiwan Personal Data Protection Act §3, you have the following rights regarding your data:

  • ·Inquire or request access to your data
  • ·Request a copy
  • ·Request correction or supplementation
  • ·Request cessation of collection, processing, or use
  • ·Request deletion
  • ·Withdraw marketing consent at any time

Members can manage personal data directly in the Account Center. For other requests, email our support address — we respond within 30 days.

6. Cookies

We use cookies and similar technologies to maintain login sessions, cart contents, browsing history, and to analyze site usage. You can disable cookies in your browser settings, though some features (login, cart) will not function properly.

7. Security

We protect your data with: HTTPS in transit, one-way hashed passwords, no full card numbers on our servers (tokenized via PAYUNi), least-privilege access controls, and regular security updates.

No system is 100% secure. Please contact us immediately if you notice anything suspicious.

8. Minors

Our service is intended for adults. Minors under 18 must use this service with parental consent. We do not knowingly collect data from children under 13 — contact us to delete any such data.

9. Policy Updates

This policy may be updated due to legal changes, service adjustments, or security needs. Material changes will be announced on the site or via email. Continued use constitutes acceptance.

10. Contact Us

For questions about this policy or to exercise your data rights, contact us:

[email protected]