Privacy Policy

Last Updated: July 2025

Whomfor Jewelry, operated by Whomfor International Co., Ltd. ("we", "our company"), is committed to protecting your privacy and personal data. This policy explains how we collect, use, store, and share your information. It is designed to comply with applicable data protection laws including the Taiwan Personal Data Protection Act (PIPA), the EU General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA), and Meta API requirements.

1. Types of Information We Collect

When you use the Whomfor website or services, we may collect the following types of personal data:

1. Basic Information: Name, phone number, email, date of birth, shipping address, and payment method.

2. Interaction Records: Messages you send to us via Facebook Messenger, Instagram, LINE Official Account, email, contact forms, website chat, and customer service channels.

3. Technical Data: Cookies, IP address, browser type, device identifiers, and site usage behavior.

4. Transaction Records: Purchase history, payment status, and delivery details.

2. Purposes of Data Use

We process your information for the following legitimate and specified purposes:

• To fulfill your orders, process payments, and manage deliveries

• To provide customer support (including automated replies and human service)

• For marketing and remarketing purposes (including Meta Custom Audience targeting)

• To analyze website usage and improve user experience

• For legal, tax, and compliance purposes

3. Data Sources and Automation Explanation

1. We collect data through user input, authorized e-commerce processes, or via third-party integrations (e.g., Facebook, Instagram).

2. Some data may be processed using internal automated systems for predefined tasks (such as auto-replies to FAQs or real-time delivery notifications), without profiling or automated decision-making.

3. Manual review and override mechanisms are in place to ensure data is not misused.

4. Third-Party Sharing and Security

We may share personal data with trusted service providers only when necessary, including:

• Payment Gateways: Shopline Payments, LINE Pay, ATM transfers, etc.

• Logistics Providers: HCT Logistics, SF Express, Chunghwa Post, 7-Eleven Pickup, FamilyMart Pickup

• Analytics and Ad Platforms: Google Analytics, Meta Pixel

All third-party partners are contractually bound to comply with privacy laws and maintain strict confidentiality.

5. Your Rights

In accordance with applicable data laws, you have the right to:

• Access or request a copy of your personal data

• Request correction or deletion of inaccurate or unnecessary data

• Object to data processing for direct marketing purposes

• Withdraw consent and unsubscribe from promotional communications

• Request data portability in a machine-readable format

To exercise these rights, contact us at info@whomfor.com. We will respond within 30 business days.

6. Data Security and Retention

1. We use SSL encryption to secure all website and transaction data.

2. Periodic audits and penetration tests are conducted by certified third-party providers.

3. Retention periods:

   • Order and billing data: Retained for 7 years in accordance with financial regulations

   • Inactive accounts: Deleted after 3 years of inactivity

7. Meta API Data Handling Disclosure (Required by Meta)

1. When users interact with our brand via Facebook or Instagram (e.g., sending messages or leaving comments), we may receive their input through Meta’s API.

2. This information is used solely for customer service, order tracking, or notifications. It is not resold, analyzed, or stored for unrelated marketing purposes.

3. We do not use the Messenger API to send unsolicited automated promotional messages.

4. If you wish to delete your personal data collected through our Facebook application, please send a request to info@whomfor.com with the subject line “Data Deletion Request”.

   When you remove our app from your Facebook account settings, Meta will notify us, and we will automatically delete all data associated with your account in accordance with Facebook’s platform policy.

   For more information, please feel free to contact our Data Protection Officer or visit the Facebook Help Center on Data Deletion.

8. Policy Updates

We may update this policy periodically. Any material changes will be announced via our official website and/or email notifications.

For questions about this policy, please contact: info@whomfor.com

Effective Date: July 2025