Privacy Policy
Shihua Co., Ltd. (hereinafter referred to as "the Company") is committed to ensuring that you can use the services and information on our platform with confidence. Please read the Shihua Aromatherapy Privacy Policy (hereinafter referred to as "this Privacy Policy") carefully to safeguard your rights.
1. Scope of Privacy Protection Policy
This Privacy Protection Policy covers how Shihua Aromatherapy website (hereinafter referred to as "this website") handles the collection, use, and protection of personal data when you use the services on this website. This Privacy Protection Policy does not apply to websites linked from this website or personnel not commissioned or managed by this website.
2. Collection, Processing, and Use of Personal Data
When you visit this website or use the services provided by this website, we will request necessary personal data based on the nature of the service, including but not limited to your name, phone number, address, email address, ID number, and other relevant data. We will process and use your personal data within the scope of the specific purpose.
When you use interactive features such as the service mailbox, surveys, or other forms of communication to provide feedback or inquire about related business matters, we will retain your provided name, email address, contact details, usage time, and communication records for responding to or providing the information you need.
During general browsing, our server automatically records related information, including your IP address, usage time, browser type, browsing, and clicking data. This information is used internally to enhance our website services and will not be disclosed externally.
To provide accurate services, we may analyze and compile the data collected from surveys. Statistical data or descriptive text derived from these analyses may be published as needed, but will not include specific personal data.
Except for the specific purposes mentioned above, including but not limited to customer and member management, transaction processing and queries, service provision, marketing, and sending event notifications, your personal data will be used within the necessary scope of the Company’s business needs. Unless you give written consent or special legal provisions apply, the Company will not use your personal data for other purposes and will comply with legal regulations to maintain the confidentiality of your personal data.
3. Protection of Data
To protect the integrity and security of your personal data, only authorized personnel can access it. If it is necessary to entrust another entity to provide services due to business needs, this website will strictly require them to adhere to confidentiality obligations.
Our company has entrusted professional website service providers to offer services, and your data will be stored in the service provider’s database. According to the agreement, the provider will implement appropriate technologies and store the data on secure servers protected by firewalls. Therefore, our company does not guarantee that the data uploaded by users will be fully and properly displayed, nor does it guarantee the accuracy of data transmission. If users discover any errors or omissions in the system, they should notify the website administrator immediately.
Unless there is intentional misconduct or gross negligence, users agree that the system is not responsible for errors leading to the deletion of data or failure in backup storage. As the website service has been entrusted to a service provider, any technical, security, or other lapses are unrelated to our company. Please be aware that data transmission over the Internet cannot be guaranteed to be 100% secure. However, our company will make every effort to supervise and require the website provider to maintain the security of all personal data, ensuring that consumers have a secure shopping environment. The service provider, in accordance with the agreement, provides the following security measures for system protection:
The frontend, backend, and third-party payment gateway redirection processes all support SSL security certificates for encrypted transmission, effectively preventing issues such as data interception or alteration during transmission.
The payment service integration complies with PCI DSS Level 1, the highest security standard in the payment card industry.
A mechanism to detect and block suspicious IP addresses is in place to prevent malicious attacks and ensure efficient system operation.
Regular vulnerability scans and penetration tests are conducted by impartial third parties as part of the system’s security maintenance.
Consumer Security Obligations: To protect your privacy and security, you are reminded to regularly update your antivirus software and securely manage your personal data, codes, or passwords. Do not share your personal data, especially passwords, with anyone or any other institution. If you find that your account or password has been compromised, immediately notify the website’s customer service. The website may suspend the subsequent use of your account if necessary.
If you share a computer with others or use a public computer, be sure to log out and close the browser window after use to prevent others from accessing your personal data. Any attempts to destroy or interfere with the data and functions of this website, invade or damage any system on the network, will result in legal action and compensation claims from our company (including but not limited to attorney fees and litigation costs).
4. External Links on the Website
The website may provide links to other websites. You may click these links to enter other websites. Since these linked websites have their own privacy policies, they do not apply to our privacy protection policy. You must refer to the privacy protection policies of the linked websites. In other words, when you engage in activities on these sites, the protection of personal data is unrelated to our company.
Online Credit Card Transactions The credit card numbers and expiration dates you enter during transactions are transmitted through closed circuits with financial institutions, not through open internet transmissions. Our website does not have access to or retain this information. The frontend, backend, and third-party payment gateway redirection processes all support SSL security certificates for encrypted transmission, effectively preventing issues such as data interception or alteration during transmission. The payment service integration complies with PCI DSS Level 1, the highest security standard in the payment card industry.
5. Policy on Sharing Personal Data with Third Parties
This website will never provide, exchange, rent, or sell any of your personal data to other individuals, groups, private enterprises, or public agencies, except where there is legal basis or contractual obligation. The exceptions include but are not limited to the following:
With your written consent.
As required by law.
To avoid danger to your life, body, freedom, or property.
When cooperating with public agencies or academic research institutions for statistical or academic research based on public interest, where the data is processed by the provider or collected in such a way that specific individuals cannot be identified by the method of disclosure.
When your actions on the website violate the terms of service or may harm or interfere with the rights of the website or other users, or cause harm to anyone, revealing your personal data is necessary for identification, contact, or legal action.
For your benefit.
When the website entrusts vendors to assist in the collection, processing, or use of your personal data, the website will fully supervise and manage the outsourced vendors or individuals.
6. Use of Cookies
To provide you with the best service, this website will place and access our cookies on your computer. If you do not wish to accept the writing of cookies, you can set your browser's privacy level to high to refuse the writing of cookies. However, this may result in certain functions of the website not working properly.
7. Amendments to the Privacy Policy
When you use the services provided by Flowery Hours or agree to the membership terms, it is considered that you have read and agreed to this privacy policy. The company reserves the right to amend this privacy policy at any time. The revised terms will be updated on this website, and individual notifications will not be sent to members. Please check the latest information regularly. If you do not agree with this privacy policy, please immediately stop using Flowery Hours and its services; your continued use will be deemed as acceptance of the privacy policy.
8. Data Review and Deletion
Members of this website can view the authorized name and email information in their account at any time, and this information is only used as content for store membership or order data. Members can request the deletion or cessation of the use of their personal data through the "Contact Us" channel of the store. Related requests can also be sent to: Floweryhours@gmail.com
If you have any questions about the above privacy protection policy, please contact the company directly.
Flowery Co., Ltd. | Flowery Hours Therapy
Customer Service Phone: 0938400032
E-mail: Floweryhours@gmail.com | Service Hours: Weekdays 13:00-17:00
(Last Updated: March 3, 2023)
