PRIVATE POLICY

Privacy Policy

“Yuyu Fei Co., Ltd.” (hereinafter referred to as the Company) greatly values the privacy of its customers. The collection, processing, and use of customer data all comply with the Personal Data Protection Act of the Republic of China (Taiwan) and relevant legal regulations. You can refer to the following privacy policy to understand our specific measures. Citizens of the European Union (EU) are not currently covered by the services of Yuyu Fei Co., Ltd. If you do not inform us that you hold EU citizenship, the Yuyu Active platform will assume that you are not an EU citizen, and we will provide services to you accordingly.

If you click links to other cooperative websites or services provided by the Company, you must refer to and comply with the privacy policy and terms of service of those linked sites.

I. Legal Basis for the Collection, Processing, and Use of Customer Data

1. We obtain customers’ personal data from the members or customers who have registered or made purchases through the Yuyu Active platform’s sales channels (including its mobile apps and services).

2. We may also legally obtain such data from other marketing or cross-industry alliance activities (including but not limited to obtaining data from business partners). In such cases, before processing or using that data, Yuyu Fei Co., Ltd. will explain the source of the data and disclose all necessary information to you.

3. Yuyu Fei Co., Ltd. collects, processes, and uses your personal data in accordance with the Personal Data Protection Act:

• (1) When you join the Yuyu Active platform as a member, you provide data upon your consent.

• (2) When you have a contract or similar contractual relationship with us (for example, when you order products or when Yuyu Fei Co., Ltd. delivers products).

• (3) Where there is an explicit legal requirement for Yuyu Fei Co., Ltd. to collect, process, or use such data.

• (4) Data that you yourself have made public or is already legally public; however, Yuyu Fei Co., Ltd. does not proactively collect, process, or use such publicly available data.

• (5) To enhance the public interest, Yuyu Fei Co., Ltd. will conduct only the necessary and limited processing of data for lawful interests such as information security and fraud prevention.

• (6) Where there is no infringement on your rights, Yuyu Fei Co., Ltd. will only carry out necessary and reasonable handling of data to verify the intended purposes for which Yuyu Fei Co., Ltd. collects data.

4. Yuyu Fei Co., Ltd. does not process any of the sensitive data referred to in Article 6 of the Personal Data Protection Act.

II. Types of Customer Data Collected

We will request from customers only the necessary data required to provide services through various channels of the Yuyu Active platform. If you do not provide the relevant data or provide incorrect data, it may affect the quality of service from Yuyu Fei Co., Ltd.:

1. Member or Customer Data for the Yuyu Active Platform Channels: We may ask you to provide basic information, including but not limited to your name, gender, National ID number, date of birth, contact phone number, address, email address, and any other information you voluntarily provide.

2. Shipping/Delivery Information: When you designate product delivery services, we may request the recipient’s name, contact phone number, delivery address, and other necessary information for shipping.

3. Financial/Transactional Data: When you actually make a purchase, we will retain your transaction data. However, if you choose to use Apple Pay, Google Pay, or other third-party payment methods included in the app, the relevant information will be protected and managed in accordance with that third-party provider’s privacy policy.

4. Other Data for Services: For market analysis, prize giveaways, member and customer notifications, and related services, we may request additional information as necessary.

5. Voice Search Services: If you use the website’s voice search feature, we will record and keep the audio logs for at least one month to conduct service optimization analysis.

6. Login via FB, LINE, Google, or Taiwan Mobile: If you legally apply for and validly use an FB, LINE, Google, or Taiwan Mobile account to log in, data such as name, address, phone number, and email address may be provided to us by those account providers.

7. Device/Network Shared Data: If you share data with us through a device or internet connection—such as granting us access to GPS location, photos, or other metadata, IP address, Cookies, similar technologies, or information related to the network you are connected to—we may collect and process such data.

According to the “Specific Purposes and Categories of Personal Data” promulgated by the Ministry of Justice under the Personal Data Protection Act, Yuyu Fei Co., Ltd. collects, processes, uses, and retains the following categories of your personal data:

• Identifying individuals (e.g., name, job title, home address, work address, previous address, home phone number, mobile number, account IDs registered on internet platforms, membership number, mailing address, household registration address, email address, and any other information that can identify an individual).

• Identifying financial information (e.g., bank account number and account holder name, credit card number, debit card number, insurance policy number, or other personal financial numbers or accounts).

• Identifiers from government data (e.g., National ID number, passport number).

• Personal descriptors (e.g., age, gender, date of birth, place of birth, nationality, voice, etc.).

• Home and facilities (e.g., residential address).

• Immigration status (e.g., passport).

• Travel and other migration details (e.g., travel details).

• Lifestyle (e.g., types of consumer goods used, details of services used, personal or family consumption patterns).

• Occupation (e.g., school principal, elected representative, or any other occupation).

• Income, earnings, assets, and investments.

• Financial transactions (e.g., amounts paid or received, credit limits, guarantors, payment methods, transaction records, security deposits, or other collateral).

• Agreements or contracts (e.g., concerning transactions, commerce, legal or other contracts, agency relationships, etc.).

• Unclassified data (e.g., letters, files, reports, or emails that cannot be categorized otherwise).

III. Purposes for Collecting Customer Data

We will use your personal data only as necessary to provide product sales, financial transaction authorization, logistics/delivery, advertising and marketing, market analysis, prize giveaways, member notifications, or other services associated with the above, as well as all current and future services that may be derived or related to the Yuyu Active platform (including but not limited to entrusting third parties to provide services). Specifically:

1. Logistics/Delivery: We provide data to our cooperating partners and logistics providers to fulfill your orders and deliver goods.

2. Financial Transaction Authorization: The basic, transaction, and other necessary data you provide may be shared with financial institutions to complete financial transactions (including credit card authorization and verification).

3. Advertising and Marketing: We may use your data to provide information about high-quality products, event updates, personalized experiences (including ads), and new marketing services.

4. Market Analysis: Based on the ads you view, your purchase records, and the information you provide, Yuyu Fei Co., Ltd. may conduct market analysis. This may involve third parties using Cookies or similar technologies to develop and offer higher-quality customer services.

• Note on Cookies: Cookies are a technology for communication between a website server and a user’s browser; certain information may be stored on the user’s computer. Users can disable or limit this function through their browser settings.

5. Other Accompanying Business: Pursuant to the above service purposes, prize giveaways, membership-related notifications, and your use of other Yuyu Active platform services (with your consent), we may process your data within the necessary scope.

6. No Fully Automated Decisions: Yuyu Fei Co., Ltd. does not use fully automated methods to process your personal data.

According to the “Specific Purposes and Categories of Personal Data” promulgated by the Ministry of Justice, Yuyu Fei Co., Ltd. collects, processes, uses, and retains your personal data for the following specific purposes:

• 040 Marketing

• 063 Collection, Processing, and Use of Personal Data by Non-Government Agencies Fulfilling Legal Obligations

• 067 Credit Card, Cash Card, Debit Card, or Electronic Ticket Operations

• 069 Contract, Quasi-Contract, or Other Legal Relationship Matters

• 090 Consumer, Customer Management, and Service

• 091 Consumer Protection

• 098 Business and Technical Information

• 104 Account Management and Claims Transactions

• 107 Procurement and Supply Management

• 111 Ticketing Services

• 118 Intellectual Property, Optical Disc Management, and Related Administration

• 125 Communications Administration and Management

• 127 Fundraising (Including Charitable Fundraising)

• 129 Accounting and Related Services

• 132 Business Communication Operations

• 136 Information (Communications) and Database Management

• 148 Online Shopping and Other E-Commerce Services

• 152 Advertising or Commercial Activity Management

• 153 Video, Music, and Media Management

• 157 Research, Statistics, and Analysis

• 181 Other Business Operations Aligned with Registered Business Items or Organizational Charter

IV. Period and Geographic Scope of Use of Customer Data

Unless otherwise stated, we will use customer data only within the scope you have authorized and for as long as your membership remains valid, and only within the regions where our services are provided, for the purposes described above. Exceptions include:

1. Clear legal stipulations.

2. Necessity to enhance the public interest.

3. Necessity to prevent danger to the life, body, liberty, or property of the data subject.

4. Necessity to prevent serious harm to the rights of others.

5. With the data subject’s consent.

6. Beneficial to the data subject’s rights.

V. Transfer and Disclosure of Customer Data, Recipients, and Methods

1. Recipients: The primary recipient of your personal data is Yuyu Fei Co., Ltd. We may entrust Yuyu Fei Co., Ltd. and any third parties we designate to handle business-related tasks (including but not limited to financial institutions, partners, logistics providers, advertisers, social media networks, search engines, and business affiliates) to process personal data—potentially using Cookies or similar technologies—to the extent necessary to fulfill the above service purposes. Unless otherwise required by law or after obtaining your separate consent, we will not disclose your personal data to third parties beyond those mentioned. Except where significantly impacting your rights, protecting public interest, or where we have obtained your consent to conduct marketing, Yuyu Fei Co., Ltd. will not actively contact you.

2. Sharing Data with Third Parties: In addition to obtaining the customer’s consent, the following situations may also apply:

• (1) Necessity for operations within the scope of the specified purposes stated above.

• (2) Uses outside the specified purposes, in conformity with the proviso to Article 20 of the Personal Data Protection Act.

• (3) Where required by law or by a judicial or other authorized agency following legal procedures.

• (4) In an emergency situation, to protect the legitimate rights of other members or third parties.

• (5) To maintain the normal operation of the membership service system.

• (6) When the member, through this service, engages in shopping, redeeming prizes, participating in raffles, etc., and such actions result in necessary financial or logistical information exchanges.

3. Joint Marketing with a Third-Party Partner: Yuyu Fei Co., Ltd. or a collaborating third-party partner (hereinafter referred to as a “third-party business partner”) may use your personal data for marketing activities, product information, or new service information only if you have given your consent. Upon the first marketing contact, they will provide you with a way to opt out of further marketing, and Yuyu Fei Co., Ltd. will not charge you for exercising this right. If you refuse marketing services or decide to refuse at a later date, you may notify us at any time, and Yuyu Fei Co., Ltd. or the third-party business partner will immediately cease using your personal data for marketing.

VI. Data Retention Period and Security Measures

1. Retention Period: The personal data you provide will be retained by Yuyu Fei Co., Ltd. for the duration of your membership-related services until your account is deleted or until you exercise related personal rights.

2. Security Measures: For any personal data you provide, the Company has strict regulations for information systems and corporate operations. Any individual must follow our defined authorization guidelines when processing and using necessary data. Our protective measures for data security include:

• We use the Secure Sockets Layer (SSL) mechanism (128-bit) for data encryption during transmission on our web pages and have installed a firewall to prevent unauthorized intrusion, thus safeguarding your personal data against illegal access.

• In November 2009, we obtained ISO/IEC 27001 information security certification verified by SGS Switzerland to ensure that your data is protected by a multi-layer information security control, providing the highest level of protection.

• Additionally, to offer services more tailored to your needs, we receive and record information from your browser’s server values, including IP addresses and Cookies, which may be used to improve our products and optimize network services.

VII. Exercising Your Rights Over Customer Data

In accordance with Article 3 of the Personal Data Protection Act, unless otherwise stipulated by law, you have the right to inquire, request access to or copies of your personal data, request supplements or corrections, request cessation of data collection, processing, or use (including withdrawing consent or objecting to Yuyu Fei Co., Ltd.’s continued processing of your data), and request deletion of such data.

• If you wish to exercise any of the above rights or have other inquiries or complaints, you may complete the relevant actions in the “My Account” section of the Yuyu Active platform’s Member Center or directly contact Customer Service with your feedback. We will respond to your request as soon as possible.

• When Yuyu Fei Co., Ltd. receives your request to exercise your rights regarding personal data:

• For requests to inquire, review, or obtain copies of personal data, Yuyu Fei Co., Ltd. will reply within 15 days of your request. If necessary, this period may be extended for another 15 days, and we will notify you in writing of the extension.

• For requests to supplement or correct, cease collection, processing, or use, or delete personal data, Yuyu Fei Co., Ltd. will reply within 30 days of your request. If necessary, this period may be extended for another 30 days, and we will notify you in writing of the extension.

VIII. Consequences of Incorrect Data

Please note that if you do not provide complete personal data, you may not be able to become our member or enjoy various corresponding membership benefits or the latest information. If the data you provide is incorrect, Yuyu Fei Co., Ltd. is not bound by this statement. You may also request to stop or delete your personal data at any time, but once processing or data deletion occurs, you will no longer be able to continue using any services provided by Yuyu Fei Co., Ltd.

IX. Contact Us Regarding This Privacy Policy

If you have any questions about this Privacy Policy, please contact our Customer Service Center.

X. Updates to This Privacy Policy

We may, at any time, amend this Privacy Policy in response to changes in societal conditions, legal requirements, or technological advancements. We will notify customers of any modifications by email, phone, brochures, communications network, website announcements, or other appropriate means. By downloading, installing, using, or continuing to use any of the services provided by the Yuyu Active platform and upon confirming the privacy and membership-related terms, you are deemed to have read, understood, and agreed to accept all the provisions of this Privacy Policy.