Privacy Policy

Website Terms of Use and Privacy Policy

Welcome to the Official X MART Website (hereinafter referred to as “this Website”).To safeguard your personal data and privacy, and to ensure your peace of mind when using this Website and other related services (including mobile applications, official social media accounts, and online services, collectively referred to as “the Services”), we have established this Privacy Policy in accordance with the Personal Data Protection Act of the Republic of China (Taiwan) and other applicable laws and regulations. Please read the following contents carefully.

1. Scope of Application

This Privacy Policy applies to how X MART collects, processes, uses, and protects your personal data when you use the Services. This Policy does not apply to websites or services other than those of the Company, nor to personnel who are not commissioned or managed by the Company.

2. Collection, Processing, and Use of Personal Data

Categories of Data Collected
The categories of personal data that the Company may collect include, but are not limited to:

Basic Identification Data: Name, gender, date of birth, contact number, email address, and mailing address.
Transaction and Payment Information: Payment account details, invoice information, and transaction records.
Online Usage Data: IP address, browser type, operating system, access time, browsing and click history, as well as information collected through cookies and similar technologies.
Other Information: Any other data that can directly or indirectly identify you.

Purposes of Collection
We collect, process, and use your personal data for the following specific purposes:

Membership registration and management
Provision and fulfillment of products and services
Customer service and communication
Marketing, promotional offers, and advertising
Market analysis and statistical research
Compliance with legal or contractual obligations
Information security management

Methods of Use and Retention Period

Your personal data will be processed and used for the duration necessary to fulfill the purposes of collection, and within the scope required.
The retention period will be determined in accordance with applicable laws, contractual agreements, or the period necessary for specific purposes. Upon expiration, your data will be securely deleted or anonymized.

Consent and Right to Refuse
Unless otherwise required by law or necessary for the performance of a contract, the Company will collect, process, and use your personal data only after obtaining your explicit consent. You may, at any time and in accordance with Article 7 of this Policy, exercise your rights to request cessation of use or deletion of your personal data.

3. Data Protection

Information Security Measures
The Company adopts firewalls, antivirus systems, encrypted transmission, access control, and other reasonable security measures to prevent unauthorized access, use, modification, disclosure, or destruction of your personal data.
Personnel Management
Only authorized personnel are permitted to access your personal data, and all such personnel are bound by confidentiality agreements. Any violation will be subject to legal liability.
Outsourced Processing
When it is necessary to entrust a third party with the processing of personal data for business purposes, the Company will require such third parties to comply with confidentiality obligations and will implement necessary supervision and management measures.
Cross-Border Data Transfer
If it is necessary for business purposes to transfer your personal data overseas (including to parent companies, subsidiaries, affiliates, or outsourced service providers), such transfer will be conducted in accordance with the Personal Data Protection Act and other applicable laws and regulations, and appropriate measures will be taken to ensure data security.

4. Website Links

The Services may contain links to other websites or services. Such websites or services are not governed by this Privacy Policy, and you are advised to review their respective privacy policies.

5. Principles for Sharing Personal Data with Third Parties

Except in the following circumstances, the Company will not sell, rent, exchange, or provide your personal data to any third party:

With your explicit consent.
As expressly required by law or by a competent authority.
To prevent harm to your life, body, freedom, or property
When necessary for the public interest or academic research, and the data has been anonymized.
When you violate the Terms of Service or are involved in harming the rights and interests of the Company or others, and it is determined necessary to disclose your information to identify, contact, or take legal action.
To protect your legitimate rights and interests.
When outsourcing vendors assist the Company in handling business, provided that a confidentiality agreement has been signed and supervision and management are in place.

6. Use of Cookies and Similar Technologies

To provide you with the best service experience, the Company uses Cookies and similar technologies to record your preferences and behavior.
You may choose to accept or reject non-essential Cookies upon your first visit to this website, and you may change your choice at any time through your browser settings.
Rejecting Cookies may result in certain functions not operating properly.

7. Your Rights

In accordance with Article 3 of the Personal Data Protection Act, you may exercise the following rights:

Inquire about or request access to your personal data.
Request a copy of your personal data.
Request supplementation or correction of your personal data.
Request the cessation of the collection, processing, or use of your personal data.
Request the deletion of your personal data.
To exercise your rights, please submit an application via the Company’s contact information.

8. Policy Revisions

If there are significant changes to this policy, the Company will announce them on the website and, when necessary, notify you via the contact information you have provided. You are advised to review the latest version periodically.

9. Contact Information

If you have any questions regarding this Privacy Policy or matters related to personal data, please contact:

Company Name: X Mart Group Co., Ltd.
Address: 9F-2, No. 508, Section 5, Zhongxiao East Road, Xinyi District, Taipei City 110, Taiwan
Email: service@xmart-group.com