Information Security and Personal Data Protection Policy
1. Rainforest Information Security Policy
Establish a robust information security system and ensure a secure environment
Promote awareness and foster a culture of cybersecurity
Control security risks and prevent information leaks
2. Personal Data Protection Policy
The collection, processing, and use of personal data comply with the Personal Data Protection Act and other relevant laws and regulations.
Personal data is collected, processed, and used within a specific purpose and through reasonably secure methods.
Personal data files are protected using reasonable and expected levels of security technology.
A designated contact point is established to facilitate the exercise of rights by data subjects, ensuring the effectiveness of such rights.
An emergency response procedure is in place to address incidents such as data theft, alteration, damage, loss, or leakage.
Supervision responsibilities are fulfilled for parties entrusted with the collection, processing, and use of personal data.
A security maintenance plan is established and continuously updated to ensure the protection of personal data files.
• 8. Staff are provided with proper awareness and training regarding privacy and data protection practices.
3. Personal Data Protection Objectives
Ensure that the collection, processing, and use of personal data within business processes comply with relevant laws and regulations (e.g., Personal Data Protection Act).
Define and verify the purposes and methods of collection, processing, and use to ensure the appropriateness of personal data handling.
Implement adequate security measures to protect personal data and prevent unauthorized access.
Establish channels for data subjects to exercise their rights and continuously provide services to uphold their rights.
Ensure the appropriateness of emergency response processes to minimize the impact of incidents.
Maintain compliance and exercise oversight of commissioned agencies through well-controlled contracts.
Establish and validate the adequacy of security maintenance plans.
• 8. Conduct personal data protection training to raise awareness among staff and strengthen their understanding of related responsibilities.
Privacy Policy
1. Purpose of Data Collection
When you use our services, we collect your personal data to provide you with a complete and seamless experience. We may also receive your information through our partners, including vendors, brands, and platform providers.
2. Duration, Region, Recipients, and Method of Use
We process your personal data from the time you begin using our services until the time you terminate them, unless a longer period is required by law. Data may be processed by automated or manual means, and shared with our business partners to improve service quality. This usage and data transfer is limited to regions where we operate or provide services.
3. Data Security
Your personal information is stored securely in our systems. Access is strictly controlled and granted only to authorized personnel. We use Secure Sockets Layer (SSL) encryption for data transmission and firewalls to prevent unauthorized access, ensuring your data is well protected.
4. Your Rights
You may request to access, review, copy, correct, stop the use of, or delete your personal data. To do so, please contact the platform you used to make a purchase or our customer service center. You may be asked to provide identification and complete a request form. If someone is acting on your behalf, a power of attorney and ID documents are required.
Please note that withdrawing your consent may affect our ability to continue providing certain services.
5. Cookies
Cookies help us understand your preferences and improve your experience. They are stored in your browser when you visit our website. You can disable or limit cookies through your browser settings; however, this may restrict access to some features or personalized services.
6. Contact Us
If you have any questions about our privacy policy, please contact us:
Service Hours: Monday to Friday, 09:00–18:00
Customer Service: (02) 2578-9488
Email: office@rainforestretail.com.tw
7. Updates to This Policy
We may update this Privacy Policy to reflect changes in laws or our practices. All updates will be published on this website. By continuing to use our services after changes are made, you agree to the updated terms.
Rainforest Retail Co., Ltd.
