PRIVACY POLICY

2 - Statutory Notification Under Taiwan PDPA (Article 8)

In accordance with Taiwan’s Personal Data Protection Act, we explicitly notify you of the following terms regarding your personal data:

A. Name of the Data Collector (Data Controller)

NŌRIEN 紫今東方

B. Purposes of Collection

We collect your data for the following specific purposes under Taiwan law:

• E-Commerce & Contract Fulfillment: Processing shopping carts, orders, billing, payments, shipping, and product deliveries.
• Customer Management & Support: Managing your Account registration, handling inquiries, processing returns, and sending system or security updates.
• Marketing & Promotions: Sending newsletters, special offers, event notifications, and personalized advertisements (unless you have opted out).
• Operations & Risk Control: Website analytics, tracking usage trends, evaluating promotional effectiveness, fraud prevention, and enforcing system security.
• Business Transitions: Evaluating or executing mergers, acquisitions, restructuring, or asset sales.

C. Categories of Personal Data Collected

Depending on your interactions, we collect the following categories of data:

• Identified Personal Identifiers: First name, last name, email address, phone number, shipping address, billing address, zip code, and city.
• Identified Financial Identifiers: Credit card or third-party payment confirmation data processed securely via encrypted gateways; we do not store raw card numbers.
• Technical & Usage Identifiers: IP address, browser type and version, pages visited, time and date of visits, time spent on pages, unique device identifiers, and diagnostic data.

D. Period, Territory, Recipients, and Methods of Data Use

• Period of Use: For the duration necessary to fulfill the specific purposes outlined above, until you request deletion, or as required by statutory retention laws.
• Territory of Use: Taiwan (where the brand is based and users are located), and any jurisdictions where our external hosting servers, third-party logistics, or cloud service providers operate.
• Recipients of Use: The Company, our corporate affiliates, trusted third-party Service Providers in logistics, secure payment gateways, email marketing services, analytics networks, and competent legal authorities upon valid official request.
• Methods of Use: Automated electronic processing, digital storage, transmission, and manual data management necessary for order fulfillment and platform optimization.

E. Your Statutory Rights (Taiwan PDPA Article 3)

As a data subject, you hold the following rights which can be exercised at any time by contacting us at inquiries@drinknorien.com:

1. The right to inquire or request an overview of your personal data.
2. The right to request a copy of your personal data.
3. The right to supplement or correct inaccurate personal data.
4. The right to request the cessation of collection, processing, or utilization of your data.
5. The right to request the deletion of your personal data.

Note: We will respond to your requests within the statutory timeline. If maintaining the data is required for us to fulfill legal obligations or execute an ongoing contract, we may deny parts of the deletion request as permitted by law.

F. Impact of Non-Provision of Personal Data

You are completely free to choose whether or not to provide your personal data. However, if you choose not to provide essential contact, identity, or billing information, you will be unable to complete registration for an Account, make purchases on our e-commerce platform, or receive customer support.

3 - Tracking Technology & Cookies

We utilize Cookies and similar tools (web beacons, pixels, tags) to monitor activity on our Platform and improve performance.

• Necessary/Essential Cookies: Mandatory for fundamental site actions, user authentication, and maintaining your shopping cart.
• Notice Acceptance Cookies: Identify whether you have accepted our cookie consent banner.
• Functionality Cookies: Remember localized choices you make, such as language preferences or saved login configurations, to deliver a personalized experience.
• Web Beacons: Small tracking pixels used in emails or web pages to count users who opened communications, serving statistical optimization and security monitoring.
• You can configure your web browser to refuse all cookies. However, please note that blocking essential cookies will cause parts of our e-commerce checkout system to malfunction.

4 - International Cross-Border Data Transfers

As our e-commerce platform and core digital applications operate globally, your personal information may be transferred across borders to be stored and processed outside of Taiwan. The Company takes all necessary technical and contractual measures to guarantee that your data is handled with security protocols that meet international standards and comply with the protective principles of Taiwan’s PDPA.

5 - Data Security

The security of your Personal Data is a top priority. We implement industry-compliant administrative, organizational, and technical safeguards (such as SSL/TLS encryption) to defend your details against unauthorized access, loss, or alteration. However, please remember that no electronic transmission or digital storage method over the internet can be guaranteed to be 100% secure.

6 - Children’s Privacy (Minor Protection)

Our Service is not directed to individuals under the age of 18 (“Children”). Under Taiwan’s Civil Code, individuals under 18 require parental or legal guardian consent to engage in contractual e-commerce transactions and data provision.

We do not knowingly collect personal information from anyone under 18. If you are a parent or guardian and realize your child has submitted personal data to us without your authorization, please contact us immediately. We will promptly take steps to remove that information from our active servers.

7 - Changes to this Privacy Policy

We may revise this Privacy Policy periodically. Any modifications will become effective immediately upon being posted on this page. We will notify you of prominent updates by refreshing the “Last Updated” date at the top of this page or, where appropriate, via an email alert. We encourage you to review this policy periodically.

8 - Contact Information

For any inquiries regarding your data rights, Taiwan PDPA compliance, or this policy, please reach out via:

• Email: inquiries@drinknorien.com
• Mailing Address: No. 510, 7F, Section 5, Zhongxiao E. Rd, Xinyi District, Taipei, Taiwan 110.

2 - 依臺灣個人資料保護法（個資法）第八條之法定告知事項

依據臺灣個人資料保護法之規定，我們明確向您告知下列有關您個人資料的條款：

A. 蒐集者（資料控制者）名稱

NŌRIEN / 紫今東方

B. 蒐集之目的

我們依據臺灣法律，基於以下特定目的蒐集您的資料：

• 電子商務與契約履行：處理購物車、訂單、帳務、付款、物流及商品配送。
• 客戶管理與支援：管理您的帳號註冊、處理諮詢、辦理退換貨，以及發送系統或安全更新通知。
• 行銷與推廣：發送電子報、特別優惠、活動通知及個人化廣告（除非您選擇拒絕接收）。
• 營運與風險控管：網站數據分析、追蹤使用趨勢、評估促銷活動成效、預防詐欺及維護系統安全。
• 企業變革：評估或執行合併、收購、重組或資產出售。

C. 蒐集之個人資料類別

根據您與我們的互動，我們蒐集以下類別之資料：

• 辨識個人者：姓氏、名字、電子郵件地址、電話號碼、收件地址、帳單地址、郵遞區號及城市。
• 辨識財務者：經由加密管道安全處理之信用卡或第三方支付確認資料；我們不會儲存原始卡號。
• 技術與使用辨識碼：IP位址、瀏覽器類型及版本、造訪的網頁、造訪的時間與日期、在網頁上停留的時間、獨特裝置識別碼及診斷數據。

D. 個人資料利用之期間、地區、對象及方式

• 利用期間：達上述特定目的之必要期間、至您要求刪除為止，或依相關法令規定之保存期限。
• 利用地區：臺灣（品牌總部所在地及使用者所在地），以及我們外部代管伺服器、第三方物流或雲端服務供應商營運之任何司法管轄區。
• 利用對象：本公司、我們的關係企業、物流及受託之第三方服務供應商、安全支付通道、電子郵件行銷服務、數據分析網絡，以及依法提出正式請求之主管司法機關。
• 利用方式：自動電子處理、數位儲存、傳輸及進行訂單履行與平台優化所需之人工資料管理。

E. 您依個資法第三條得行使之權利

作為資料當事人，您隨時得透過電子郵件（inquiries@drinknorien.com）與我們聯絡，行使以下權利：

1. 查詢或請求閱覽您的個人資料。
2. 請求製給您的個人資料複製本。
3. 請求補充或更正不準確的個人資料。
4. 請求停止蒐集、處理或利用您的個人資料。
5. 請求刪除您的個人資料。

注意：我們將在法定時限內回應您的請求。若為履行法律義務或執行進行中的契約而必須保留該資料，我們得在法律允許的範圍內拒絕部分刪除請求。

F. 不提供個人資料對其權益之影響

您可以完全自由選擇是否提供您的個人資料。然而，若您選擇不提供必要的聯絡方式、身分或帳務資訊，您將無法完成本平台之帳號註冊、進行購買或獲得客服支援服務。

3 - 追蹤技術與 Cookie

我們利用 Cookie 和類似工具（網路信標、像素、標籤）來監控我們平台上的活動並提升效能。

• 必要／核心 Cookie：為網站基本運作、使用者驗證及維護您的購物車所必需。
• 通知接受 Cookie：識別您是否已接受我們的 Cookie 同意橫幅。
• 功能性 Cookie：記住您所做的在地化選擇（例如語言偏好或儲存的登入設定），以提供個人化體驗。
• 網路信標（Web Beacons）：用於電子郵件或網頁中的微型追蹤像素，用於計算瀏覽該訊息的使用者人數，以供統計優化與安全監控之用。
• 您可以將網頁瀏覽器設定為拒絕所有 Cookie。但請注意，阻擋必要 Cookie 將會導致我們電子商務結帳系統的部分功能無法正常運作。

4 - 個人資料之國際傳輸

由於我們的電子商務平台和核心數位應用程式為全球化營運，您的個人資料可能會被跨境傳輸，並在臺灣境外進行儲存或處理。本公司將採取一切必要的技術與契約措施，以確保您的資料在符合國際標準的安全協定下受到保護，並符合臺灣個資法之保護原則。

5 - 資料安全

保護您的個人資料安全是我們的首要任務。我們實施符合行業標準的行政、組織與技術防護措施（例如 SSL/TLS 加密技術），以防範您的資料遭受未經授權的存取、遺失或竄改。然而，請記住，網際網路上任何電子傳輸或數位儲存方法都無法保證 100% 的絕對安全。

6 - 兒童隱私（未成年人保護）

我們的服務不對未滿 18 歲的個人（「兒童／未成年人」）開放。根據臺灣民法規定，未滿 18 歲之個人需獲得父母或法定代理人之同意，方得進行契約性之電子商務交易並提供個人資料。

我們不會故意蒐集任何未滿 18 歲者的個人資料。如果您是家長或監護人，且發現您的孩子在未經授權的情況下向我們提交了個人資料，請立即與我們聯絡。我們將迅速採取步驟將該等資料自我們的活躍伺服器中刪除。

7 - 本隱私權政策之修訂

我們可能會定期修訂本隱私權政策。任何修改在發布於本網頁後即立即生效。我們將透過更新本網頁頂部的「最後更新日期」，或在適當情況下透過電子郵件通知您重大更新。我們建議您定期查看本政策。

8 - 聯絡資訊

若您對您的資料權利、臺灣個資法合規性或本政策有任何疑問，請透過以下方式與我們聯絡：

• 電子郵件：inquiries@drinknorien.com
• 通訊地址：110 台灣台北市信義區忠孝東路五段510號7樓