私隱政策及個人資料收集聲明

("私隱聲明")

1. 簡介

1.1. istyle Retail (Hong Kong) Co., Limited(「ISRHK」)、我們的母公司,株式会社アイスタイル(istyle Inc.),及 istyle Inc.集團下的附屬公司及/或聯屬公司(「聯屬公司」)深知妥善處理個人資料的重要性,並制定了以下個人資料收集及私隱聲明(此「私隱聲明」)。

1.2. 任何在本條款中提及的「我們」和「我們的」均是指 ISRHK 及其聯屬公司,而任何在本私隱聲明中提及的「閣下」、「你」、「你的」、「你們」和「你們的」均是指 ISRHK 及其聯屬公司之顧客。請仔細閱讀本私隱聲明,以瞭解我們將如何處理您的個人資料。

2. 適用範圍

2.1. 本私隱聲明適用於 ISRHK 之顧客,ISRHK 所提供的 @cosme 會員計劃之會員,以及由我們以各種方法收集、使用及保存其個人資料的其他人士。

2.2. 當閣下登入或使用 ISRHK 網站(www.cosmestore.hk,即 @cosme STORE)、@Cosme media site(https://hk.cosme.net/)及相關應用程式或 ISRHK 的社交平台或服務,包括而不限於 Facebook、Instagram、YouTube 等專頁(統稱「ISRHK 網站」),即表明閣下已閱讀並理解本私隱聲明的條款。如閣下不想接受下列條款的約束,請勿使用 ISRHK 網站及立即離開網站。

2.3. 我們需要閣下所提供的個人資料以便我們能向作為顧客的你提供服務及供運作 ISRHK 所提供的 @cosme 會員計劃,其他 ISRHK 不時會為會員提供任何的其他計畫或優惠或於與我們的合作夥伴合辦之推廣等之用。如你沒能向我們提供個人資料,ISRHK 可能無法向閣下提供我們的產品及服務(包括登記閣下成為會員)。

2.4. 本私隱聲明同時備有英文版本。如本私隱聲明的英文和中文版本有任何差異或不一致時,概以英文版本為準。

3. 個人資料之收集

3.1. 為了能使閣下享受我們不同種類的產品及服務(包括登記註冊成為 ISRHK 所提供的 @cosme 會員計劃之會員,登記參加我們的任何活動,參與我們的互動式服務,或以任何方式與我們聯絡),你是需要於收集之際向我們提供指定的個人資料。我們亦可能向閣下索取其他資料如當我們認為其能幫助我們向你提供閣下會感興趣之特定產品及服務。我們可能向你收集的個人資料包括:

(i) 閣下之姓名;
(ii) 閣下之電話號碼;
(iii) 閣下之地址;
(iv) 閣下之出生日期;
(v) 閣下之電郵地址;
(vi) 有關閣下以往接受美容療程的記錄及歷史(包括指導及諮詢)及其他與閣下皮膚狀況相關的資料;
(vii) 有關閣下之會員積分資料;及
(viii) cookies 及類似技術所收集的資料(在其涉及收集閣下的個人資料的範圍內)。

我們收集閣下之過往接受美容療程的記錄、皮膚狀況等敏感個人資料,旨在為閣下提供護膚建議,並推薦最適合的產品與服務。這類資料有助於我們提供更精準、有效的指導。若閣下選擇不提供相關資料,可能會影響服務的效果與體驗。

3.2. 如閣下向我們購物或參加我們所舉辦的項目或活動,除了上述的資料外,我們亦可能向你收集以下的個人資料:

(i) 閣下之信用卡資訊、帳單資訊或交易記錄;
(ii) 閣下之運送資訊,以便將產品和服務交付予閣下;以及
(iii) 調查和活動意見。

我們收集閣下之信用卡資訊、帳單資料或交易記錄,旨在完成付款程序、處理訂單、核實交易、發出收據及提供相關客戶服務,屬履行閣下要求及完成交易所必需。若未能提供該等資料,可能無法完成購買流程或參與相關活動。

3.3. 我們會收集哪些於第 3.1 和 3.2 段所提及之個人資料的類型將取決於閣下與我們之間的交易性質。我們可能於以下情況收集你的個人資料:

(i) 當閣下登記成為我們的會員時;
(ii) 當閣下登記任何銷售,宣傳或推廣活動或優惠時;
(iii) 當閣下向我們訂購產品或服務或使用我們提供的產品或服務時;
(iv) 當閣下與我們通信時;或
(v) 當閣下使用屬於 ISRHK 網站,或 ISRHK 擁有之任何其他網站或社交平台,或在合辦之推廣活動或項目中由我們聯屬公司或合作夥伴營運之網站時。

3.4. 閣下同意是按自己意願向 ISRHK 提供你的個人資料。如閣下未滿 18 歲,於向我們提供任何你的個人資料前,請事先取得家長或監護人的同意。

4. 個人資料之利用

4.1. 本公司將按照以下目的使用所獲取的個人資料:

(i) 向閣下提供服務
這包括:
a. 處理閣下的會員申請;
b. 核實閣下是否符合資格加入 ISRHK 所提供的 @cosme 會員計劃成為會員或能否參與任何由我們舉辦的銷售,宣傳,推廣活動或項目;
c. 核實閣下身份;
d. 使用需要登錄或身份驗證的部分服務;
e. 從本公司發送或發佈消息或內容;
f. 處理我們服務中涉及的商品訂單接收、配送、退貨、退款等訂單處理業務;
g. 會員管理系統,或其他任何由我們單獨舉辦或與我們的聯屬公司或夥伴合辦的銷售,宣傳,推廣之活動或項目的管理,運作及維修保養;及
h. 進行與我們付費服務相關的計費處理或支付等操作。
(ii) 調查、分析我們服務的使用情況等
分析本公司獲取的個人資料,以瞭解閣下的興趣、偏好等,並用於改進我們的服務及探討新服務等。這包括:
a. 創建與閣下使用本服務使用相關的統計信息或模型,以改進我們的服務;
b. 分析閣下的屬性信息、我們的服務的使用情況、本公司或合作夥伴投放的廣告的流覽量或點擊量等;
c. 在根據閣下在我們的服務中發佈的投稿等輸入信息生成文章等內容的服務中,開發及改進用於生成新資訊或內容(文章、圖像等)的模型;
d. 掌握我們的服務及合作夥伴提供的商品、服務的使用情況,以提升我們的服務及合作夥伴提供的商品、服務品質,並提供更符合用戶興趣及需求的商品、服務。
(iii) 在符合載於第 5 段(直接促銷)規定的前提下,向閣下提供與我們的服務相關或適合閣下的資訊
這包括:
a. 通過電子郵件雜誌、直郵(DM)(包括各種社交媒體平台發送的)及各種通知等方式提供與我們服務相關的信息;
b. 基於閣下的性別、購買記錄、屬性信息、終端信息、位置信息、行為記錄等,通過電子郵件雜誌、直郵(DM)(包括各種社交媒體平台發送的)及各種通知等方式,提供適合用戶的資訊,例如,如第 5 段所載,廣告、內容及商品推薦或文章(包括合作夥伴提供的商品、服務相關信息);
c. 與我們的聯屬公司或夥伴合辦銷售,宣傳及推廣項目,包括向你發出相關的銷售,宣傳及推廣物品及活動資訊;及
d. 將用戶在我們服務中發佈的投稿等信息輸入到自動生成文章等的服務中(生成式人工智能),生成新的內容(文章、圖像等),並發佈該生成內容。
(iv) 為閣下提供客戶服務,並回應閣下諮詢、回饋或索賠
這包括:
a. 在收到閣下諮詢時,通過對比閣下所提供的資料和閣下的註冊資料,以確認閣下身份;
b. 在收到用戶關於使用本服務時遇到的問題的諮詢時,對相關問題進行調查、考慮應對措施並實施;及
c. 為支持閣下使用我們的服務等目的,根據輸入內容生成適當的文字或圖像等。
(v) 為了向閣下配送禮品等獎品、發送感謝禮物、授予積分、或發放任何其他優惠等
這包括:
a. 在閣下通過本服務購買商品時,根據購買金額授予積分;及
b. 於我們任何銷售,宣傳及推廣活動或項目中向閣下提供獎賞,生日推廣,贈券或服務。
(vi) 提升伺服器便利性、伺服器管理、調查不正當使用、確保閣下安全使用我們的服務
這包括:
a. 發現違反服務條款的用戶並通知該用戶;
b. 監控、確認舉報內容或違法投稿等,分析舉報內容或違法投稿等以開發不正當使用防止工具;
c. 調查、檢測、預防利用我們的服務進行欺詐、非法訪問等不正當行為;
d. 當用戶在本服務中購買商品時,為防止不正當購買,分析用戶相關資訊(本服務使用記錄、支付信息等),並將該分析結果提供給第三方。
(vii) 根據第 8 段規定,為提供本服務中部分服務,向合作夥伴提供閣下之數據
本公司在閣下訪問本服務網站時,包括 ISRHK 網站,會以訪問日誌的形式將相關資訊記錄至本公司伺服器。訪問日誌中記錄的內容包括訪問時間、IP 位址、所使用瀏覽器類型、Cookie 信息等。
(viii) 向閣下提供 ISRHK 所提供的 @cosme 會員計劃及/或我們的網站中的識辨方法
本公司將為你分配唯一的用戶 ID。你的 ID 用於會員註冊、投稿、回答等歷史記錄管理,並在 @cosme 中的用戶頁面等部分頁面的 URL(如有)中公開。
(ix) 按適用法律要求作出相應披露

4.2. 除上述情況外,當本公司從本公司以外的第三方取得你的個人資料時,若該個人資料的使用目的另有規定,則遵循該規定或私隱條款(如適用)進行使用。

4.3. 此外,本公司可能將從其他第三方獲取的用戶興趣愛好、Cookies 或廣告識別字、瀏覽歷史、購買歷史、位置資訊等資訊,與本公司已持有的個人資料進行關聯並使用。在此情況下,我們將僅在此私隱聲明中所述的使用目的範圍內進行使用。

5. 直接促銷

5.1. 我們有意使用閣下的姓名和聯絡資料向你發送有關 ISRHK,我們的聯屬公司或我們的夥伴在合辦推廣活動或項目中提供有關以下類別的產品及服務的銷售,宣傳及推廣物品:超市商品,電器商品,美容院,健康護理產品,時裝,首飾,服裝,皮具商品,鞋物,手錶,珠寶,健康護理,髮型,美容及化妝,食物及飲品,娛樂,交通,旅遊及酒店,購物商場,信用卡,通信,銀行,健身中心,書籍和個人護理。ISRHK 必須事前取得閣下同意才會進行前述用途。除非我們取得你的同意,我們絕不會使用你的個人資料作直接促銷。

5.2. 你可透過以下方法隨時選擇拒絕接收相關通信或退出接收相關通信:

(i) 在申請成為會員時於申請表格剔上適合方格;
(ii) 成為會員後,如有任何意願轉變時,可在我們的應用程式上選擇刪除帳號,再於應用程式中的「聯絡我們」的頁面申請取消訂閱;
(iii) 根據以下郵遞或電郵方法向我們發出退出資訊:
郵寄地址
尖沙咀廣東道 28 號力寶太陽廣場 1210-11 室(Room 1210-11, Lippo Sun Plaza, 28 Canton Road, Tsim Sha Tsui)
電郵地址
support@cosme-hk.zendesk.com
(iv) 致電我們的熱線:3468 3072

6. Cookies 之使用

6.1. 當閣下瀏覽 ISRHK 網站時,我們可能使用 Cookies 及類似的技術收集閣下的個人資料。Cookies 是在閣下的硬碟驅動器或瀏覽器上儲存資訊的檔案,意味著我們可以識辨你曾登入瀏覽該等網站。

6.2. 閣下可以調整瀏覽器的設定從而拒絕接受 Cookies 但亦可能因此而無法使用或瀏覽該等 ISRHK 網站之全部內容和功能。

7. 第三者服務的連結

7.1. 為了享受由我們或我們夥伴於合辦推廣活動或項目中提供的產品及服務,閣下有可能不時需要登入第三者之網站。

7.2. ISRHK 不對此等服務的內容或資料獲取的做法負責。此等網站的私隱政策可能與 ISRHK 的私隱聲明不一樣。ISRHK 建議閣下在向該等第三者提供資料前仔細閱讀並瞭解其私隱處理做法。

8. 向第三者轉移個人資料

8.1. 閣下資料可能會轉移到的人士

本公司將在提供我們的服務所需的範圍內(包括上述第 4.1 (vii) 段所述範圍),將用戶的個人資料提供給合作夥伴(包括位於香港以外的第三方),包括:

(i) 向 ISRHK 提供行政,電訊,資訊科技系統,付款,印刷或其他與我們業務運作有關(包括向閣下提供產品及服務)的第三方供應者(包括於合辦推廣活動或項目中我們的夥伴)及其代理及承辦商(請參閱第 9 段有關第三方委託的內容);
(ii) 任何處理 ISRHK 會員計畫會員服務供應事宜的聯屬公司;
(iii) 根據適用法律,行政政策或規則要求 ISRHK 必須向其作出披露之任何人士,包括但不限於我們的專業顧問,執法機構,保險公司,政府及監管機構。

8.2. 可能會被轉移的個人資料類別

我們可能會將以下類別的個人資料轉移予第 8.1 段所列的第三方:

(i) 姓名、地址、出生日期、職業、進行皮膚診斷等時拍攝的圖像資料等
(ii) 電話號碼、傳真號碼、電子郵寄地址
(iii) 用戶 ID、社交媒體帳戶名稱
(iv) 與我們的購買記錄等
(v) 與閣下使用我們服務相關的行為記錄(參與活動、到店記錄等)
(vi) 我們服務的瀏覽、使用記錄(包括評論等投稿內容)

8.3. 個人資料轉移的目的

我們會根據上文第 4.1 段所述的目的,將你的個人資料轉移予指定的第三方。

8.4. 數據轉移的手段與方法

我們可能會透過多種方式將你的個人資料分享予指定的第三方,包括實體轉移紙本檔案,或通過其他電子通訊方式,例如互聯網。

9. 個人資料的處理委託

9.1. 我們可能會將閣下之個人資料的全部或部分處理委託給第三方,其中可能包括位於香港以外的第三方。

9.2. 我們將與該等第三方就個人資料的處理簽訂必要的合同,並根據適用法律的要求,通過協議或其他方式對受託方進行監督。

10. 集團內部轉移及個人資料的共同使用

本公司可能會將第 10.1 段所列的個人資料類型,轉移予第 10.2 段所列的相關方,以作共同使用你的個人資料之目的。

10.1. 轉移及共同使用的個人資料類別

(i) 姓名、地址、出生日期、職業
(ii) 電話號碼、傳真號碼、電子郵寄地址
(iii) 用戶 ID、社交媒體帳戶名稱
(iv) 與我們服務相關的購買記錄、禮品申請及中獎記錄
(v) 與你使用我們服務相關的行為記錄(參與活動、到店記錄等)
(vi) 在社交媒體上使用我們服務的瀏覽和使用記錄(關注記錄、點贊記錄、評論投稿記錄等)

10.2. 個人資料的共同使用者

以下網站中記載的本公司聯屬公司(包括位於海外的公司): https://www.istyle.co.jp/privacy/group/

10.3. 共同利用的目的

與第 4.1 段所列之使用目的相同。

10.4. 負責管理及處理個人資料的機構名稱

公司名稱
istyle Retail (Hong Kong) Co., Limited
地址
尖沙咀廣東道 28 號力寶太陽廣場 1210-11 室 (Room 1210-11, Lippo Sun Plaza, 28 Canton Road, Tsim Sha Tsui, Kowloon, Hong Kong)
負責人
Yuki Yamamoto(主席及行政總裁)

11. 有關其他國家的個人資料保護法

本公司及本公司受託服務提供者在提供服務時,若需在其他司法管轄區處理個人資料,將持續關注該等司法管轄區個人資料保護法律,並採取必要的數據安全管理措施。

12. 你的權利

12.1. 閣下有權隨時對我們對你所持的個人資料要求查閱,複印副本,要求更正,或要求我們停止收集,處理和使用你的個人資料,或要求我們刪除對你所持有的個人資料。

12.2. 如閣下對本私隱聲明有任何疑問或你希望行使本段落的任何權利時,你可透過以下聯絡方法以郵遞或電郵形式作出要求:

聯絡人的姓名或職位
Yuki Yamamoto(主席及行政總裁)
郵寄地址
尖沙咀廣東道 28 號力寶太陽廣場 1210-11 室(Room 1210-11, Lippo Sun Plaza, 28 Canton Road, Tsim Sha Tsui)
電郵地址
support@cosme-hk.zendesk.com

12.3. 除了上述郵寄及電郵方法外,你亦可致電我們的熱線 3468 3072。

12.4. 我們保留向閣下收取合理的費用以遵從閣下的查閱要求。

13. 資料儲存期限和刪除

如你希望我們刪除你的個人資料,可通過停止使用我們的服務的方式實現個人資料的刪除。你停止使用我們的服務後,你的個人資料將在為達成本私隱聲明所述目的(包括但不限於身份驗證)或為遵守適用法律的範圍內,於一定期限內保存,然後予以刪除。

14. 資訊安全措施

14.1. 我們將盡一切合理的努力確保我們持有的所有個人資料均被儲存於穩妥及安全的地方,同時只有本私隱聲明所述我們的獲授權員工或獲授權第三者服務上或夥伴才能查閱。

14.2. ISRHK 將使用不同的安全技術及程序保護任何個人資料免受任何未經授權或意外的的查閱,使用,喪失,刪除或披露。ISRHK 將採取所有必要可行的措施確保任何個人資料不會受到任何第三者的非法截取侵入。可是,閣下必須知道沒有一種系統是不能被侵入並且沒有一種資料於互聯網或其他通信網絡上傳遞時能保證完全穩妥。因此,我們不能保證閣下於網上或其他通信網絡傳遞的資料或我們於網上或其他通信網絡所取得的資料的安全性。

15. 本聲明的更新

本私隱聲明的條款可能會因應我們認為有必要而被不時修正,更新,修訂,改變及修改,最新的版本將於 ISRHK 網站上載。ISRHK 保留權利可隨時更改及更新 ISRHK 網站內容,並有權單方面修改本私隱聲明而不另作通知(但因應法律規定而須閣下同意之條款或修訂除外)。

Privacy Policy and Personal Information Collection Statement

(the "Privacy Statement")

1. Introduction

1.1. istyle Retail (Hong Kong) Co., Limited ("ISRHK"), our parent company, istyle Inc. and subsidiary and/or affiliated companies within the istyle Inc. group of companies (the "Affiliates"), are well aware of the importance of the proper handling of personal data and, have established the following personal data collection and privacy statement (this "Privacy Statement").

1.2. Any references to "we," "our," or "us" in this Privacy Statement refer to ISRHK and its Affiliates. Any references to "you," "your," or "yours" in this Privacy Statement refer to the customers of ISRHK and its Affiliates. Please read this Privacy Statement carefully to understand how we will handle your personal data.

2. Applicability

2.1. This Privacy Statement applies to customers of ISRHK, members of the @cosme membership program provided by ISRHK, and any other individuals whose personal data is collected, used, or stored by us through various methods.

2.2. By logging in or using the ISRHK website (www.cosmestore.hk, also known as the @cosme STORE), the @Cosme media site (https://hk.cosme.net/) and related applications or ISRHK's social media platforms or services, including without limitation Facebook, Instagram, YouTube and other pages (collectively, "ISRHK Websites"), you acknowledge that you have read and understood this Privacy Statement. If you do not wish to be bound by the terms of this Privacy Statement, please do not use the ISRHK Websites and exit the ISRHK Websites immediately.

2.3. We require the personal data you provide to enable us to provide services to you as a customer and to operate the @cosme membership program provided by ISRHK. ISRHK may also use such personal data from time to time to provide members with any other programs or offers, or for promotional activities conducted in collaboration with our partners. If you fail to provide us with your personal data, ISRHK may be unable to provide you with our products and services (including registering you as a member).

2.4. This Privacy Statement is also available in Chinese. In the event of any discrepancy or inconsistency between the English and Chinese versions of this Privacy Statement, the English version shall prevail.

3. Collection of Personal Data

3.1. In order for you to enjoy our various products and services (including registering as a member of the @cosme membership program provided by ISRHK, registering to participate in any of our activities, participating in our interactive services, or contacting us in any manner), you are required to provide us with certain personal data at the time of collection. We may also request additional information from you if we believe it will help us provide you with specific products and services that may interest you. The personal data we may collect from you includes:

(i) your name;
(ii) your phone number;
(iii) your address;
(iv) your date of birth;
(v) your email address;
(vi) records and history of any beauty treatments you have received (including guidance and consultations) and other information related to your skin condition;
(vii) information about your membership points; and
(viii) data collected by cookies and similar technologies (to the extent that it involves the collection of your personal data).

As stated in (vi) above, we collect sensitive personal data, including your history of cosmetic treatments and skin condition, for the purpose of providing skincare consultation and recommending the most suitable products and services. This information is essential for ensuring the accuracy and effectiveness of our guidance. Please note that failure to provide such information may limit our ability to offer appropriate services or optimize the results.

3.2. If you make a purchase from us or participate in any projects or activities organized by us, in addition to the above information, we may also collect the following personal data from you:

(i) your credit card information, billing information or transaction records;
(ii) your shipping information for delivery of the products and services to you; and
(iii) survey and activity comments.

We collect payment information, including credit card details, billing data, and transaction records, to process payments, fulfill orders, verify transactions, issue receipts, and provide related customer support. This information is essential for the execution of your requests and the completion of transactions. Please note that failure to provide this information may prevent you from finalizing your purchase or accessing related services.

3.3. The types of personal data mentioned in Paragraphs 3.1 and 3.2 that we collect from you will depend on the nature of your transaction with us. We may collect your personal data in the following situations:

(i) when you register as a member with us;
(ii) when you register for any sales, promotional or marketing activities or offers;
(iii) when you order products or services from us or use products or services provided by us;
(iv) when you communicate with us; or
(v) when you use the ISRHK Websites, or any other websites or social media platforms owned by ISRHK, or other websites operated by our Affiliates or partners in co-organized promotional activities or projects.

3.4. You agree to provide your personal data to ISRHK voluntarily. If you are under 18 years of age, please obtain prior consent from your parent or guardian before providing us with any of your personal data.

4. Use of Personal Data

4.1. We will use the personal data we collect for the following purposes:

(i) To provide services to you
This includes the following:
a. processing your application for membership;
b. verifying your eligibility to join as member of the @cosme membership program provided by ISRHK or participate in any programs run by us in sales, marketing, promotional activities or events;
c. verifying your identity;
d. logging in and using certain services that require identity verification;
e. sending and posting messages and content from us;
f. receiving and fulfilling orders, shipping, returns, refunds, and other order-related tasks for products in relation to our services;
g. managing, operating and maintaining our membership management system or any programs run by us alone or jointly with our Affiliates or business partners in any sales, marketing, promotional activities or events; and
h. billing and payment processing in relation to our paid services.
(ii) To conduct surveys and analysis of your use of our services, etc.
To analyze the personal data we have obtained in order to understand your interests and preferences, improve our services, and consider new services, etc. This includes the following:
a. creating statistics and models related to your use of our services in order to improve our services;
b. analyzing your attribute information, usage of our services, and the number of views and clicks on advertisements distributed by us or our partners;
c. developing and improving models to generate new information and content (such as text and images) in services that generate text based on input information such as posts made by you on our services;
d. understanding the usage status of our services and the products and services provided by our partners, and improving the quality of our services and the products and services provided by our partners, as well as providing products and services that better suit the interests and needs of users.
(iii) To provide you with information related to our services and other information suitable for you subject to the requirements set out at Paragraph 5 (Direct Marketing)
This includes the following:
a. providing information such as email newsletters, direct mail (including via various social media platforms), and various announcements related to our services;
b. providing information tailored to users, such as advertisements, content, and recommendations for products or articles (including information about products and services provided by partners) as listed in Paragraph 5, based on your gender, purchase history, attribute information, device information, location information, and behaviour history, through email newsletters, direct mail (including via various social media platforms), and various announcements;
c. conducting joint sales, marketing or promotional events with our Affiliates or business partners, including sending sales, marketing and promotional materials, and event information; and
d. inputting information such as posts made by users on our services into a service that automatically generates text, etc. (generative AI), generating new content (text, images, etc.), and disseminating such generated content.
(iv) To provide you with customer service and respond to your inquiries, feedback or claims
This includes the following:
a. when receiving inquiries from you, verifying your identity by comparing the information provided to your registration information;
b. when receiving inquiries regarding issues arising from the use of our services, investigating and addressing such issues; and
c. generating appropriate text or images based on the content entered for the purposes of supporting your use of our services.
(v) To deliver gifts or other prizes, send rewards, grant points or issue any other benefits to you
This includes the following:
a. granting points to you based on the purchase amount when you purchase products through our services; and
b. providing you with rewards, birthday promotions, vouchers or services under any of our sales, marketing, promotional activities or events.
(vi) To improve server convenience, manage servers, investigate unauthorized use, and provide our services to you in a safe and secure manner
This includes the following:
a. identifying users who violate our terms of use and notifying them;
b. monitoring and confirming reports and illegal posts, analyzing such reports and illegal posts, and developing tools to prevent unauthorized use;
c. investigating, detecting, and preventing fraudulent activities such as fraud or unauthorized access that exploit our services;
d. analyzing information related to users (such as usage history of this service or payment information) when users purchase products through this service to prevent unauthorized purchases, and providing the analysis results and estimates to third parties.
(vii) To provide your personal data to partners in accordance with the provisions of Paragraph 8
When you access the webpages of our service, including the ISRHK Websites, we will record that information on our servers in the form of access logs. The content recorded in the access logs includes the date and time of access, IP address, type of browser used, cookie information, etc.
(viii) To provide you with a means of identification for the @cosme membership program provided by ISRHK and/or our websites
We will assign a unique user ID to you. Your ID is used for managing membership registration, posts, responses, and other history, and is disclosed in the URL (if any) of certain pages, such as the user's page on @cosme.
(ix) To make disclosures as required by applicable laws

4.2. Notwithstanding the above, when we receive your personal data from parties other than us, we will use such personal data in accordance with any separate terms and conditions and privacy policies (if applicable) regarding the purpose of use of such personal data.

4.3. Additionally, we may link and use information such as users' preferences, cookies, advertising identifiers, browsing history, purchase history, and location information obtained from third parties other than us with personal data we already possess. In such cases, we will use such information within the scope of the purposes of use as described in this Privacy Statement.

5. Direct Marketing

5.1. We intend to use your name and contact details to send you sales, marketing and promotional materials and information regarding products and services offered by ISRHK and/or our Affiliates and/or our business partners in joint promotional activities or events in relation to the following categories: supermarket goods, electronic goods, beauty salons, health care products, fashion, accessories, clothing, leather goods, shoes, watch, jewelry, health care, hair, beauty and cosmetics, food and beverage, entertainment, transportation, travel and hotels, shopping malls, credit cards, telecommunications, banking, fitness centres, books and personal care. ISRHK must obtain consent from you before doing so. We will not use your personal data for direct marketing unless we have received your consent.

5.2. You may choose not to receive such communications, or opt out from receiving such communications at any time by the following means:

(i) ticking in the appropriate box in the application form when you are applying for membership;
(ii) where you have changed your mind after you become a member, by choosing to delete your account in our app, and then applying to unsubscribe via the "Contact Us" page within the app;
(iii) sending us an opt out message either by post or email and addressed to:
Postal address
Room 1210-11, Lippo Sun Plaza, 28 Canton Road, Tsim Sha Tsui
Email address
support@cosme-hk.zendesk.com
(iv) by calling our hotline at 3468 3072

6. Use of Cookies

6.1. When you visit the ISRHK Websites, we may use cookies and similar technologies to collect your personal data. Cookies are files that store information on your hard drive or browser, enabling us to recognize that you have visited the website.

6.2. You may adjust your browser settings to refuse cookies; however, this may prevent you from accessing or using all content and features of the ISRHK websites.

7. Links to Third Party Services

7.1. You may from time to time have to access third parties' websites in order to enjoy the goods and services provided by us or our business partners in joint promotional activities or events.

7.2. ISRHK shall not be responsible for the content of such services or how information is collected therefrom. The privacy statements of these websites may not be the same as ISRHK's and you are advised to read and understand their privacy statements before you submit any information to those third parties.

8. Transfer of Personal Data to Third Parties

8.1. To whom your data may be transferred

We will share personal data with partners (including third parties located outside Hong Kong) to the extent necessary to provide our services (as specified in Paragraph 4.1(vii) above), including:

(i) any third party service providers (including our business partners in joint promotional activities or events), their agents and contractors, who provide administrative, telecommunications, information technology system, payment, printing or other services to ISRHK in connection with the operation of our business including providing products and services to you (see Paragraph 9 on outsourcing to third parties);
(ii) any Affiliates which deal with the provision of membership services of the ISRHK Membership Program;
(iii) anyone that ISRHK has to make disclosure to in accordance with the requirements of applicable laws, administrative policies or regulations, including without limitation our professional advisers, law enforcement agencies, insurers, government and regulatory bodies.

8.2. What types of personal data may be transferred

We may transfer the following types of personal data to the third parties as outlined in Paragraph 8.1:

(i) Name, address, date of birth, occupation, image data captured during skin analysis, etc.
(ii) Phone number, fax number, email address
(iii) User ID, social media account name
(iv) Purchase history with us
(v) Behavioural history related to your use of our services (event participation, store visit history, etc.)
(vi) Viewing and usage history of our services (including posts such as reviews)

8.3. Purpose of personal data transfer

We will transfer your personal data to specified third parties for the purposes specified in Paragraph 4.1 above.

8.4. Means and methods of data transfer

We may share your personal data to specified third parties by various means, including physical transfer of paper files, or other electronic communication methods, such as the Internet.

9. Outsourcing of Personal Data Processing

9.1. We may outsource the handling of all or part of your personal data, including to third parties located outside Hong Kong.

9.2. We will enter into necessary agreements with those third parties regarding the handling of personal data, and will use contractual or other means to supervise the outsourced parties as required by applicable laws.

10. Intra-group Transfer and Joint Use of Personal Data

We may transfer the personal data listed in Paragraph 10.1 below to the parties listed in Paragraph 10.2 for joint use of your personal data.

10.1. Types of Personal Data Subject to Transfer and Joint Use

(i) Name, address, date of birth, occupation
(ii) Phone number, fax number, email address
(iii) User ID, social media account name
(iv) Purchase history, gift application and winning history related to our services
(v) Behavioural history related to your use of our services (event participation, store visit history, etc.)
(vi) Viewing and usage history of our services on social media (follow history, like history, review posting history, etc.)

10.2. Joint users of personal data

Our Affiliates (including companies located overseas) as listed on the following website: https://www.istyle.co.jp/privacy/group/

10.3. Purpose of joint use

The same as the purposes of use listed in Paragraph 4.1.

10.4. Name of the entity responsible for managing and/or processing personal data

Company Name
istyle Retail (Hong Kong) Co., Limited
Address
Room 1210-11, Lippo Sun Plaza, 28 Canton Road, Tsim Sha Tsui
Responsible Person
Yuki Yamamoto (President and CEO)

11. Handling of Personal Data in Foreign Countries

We keep up to date with the personal data protection laws of foreign jurisdictions when handling and/or processing personal data in foreign jurisdictions in connection with the services provided by us and our outsourced service providers and implement appropriate data security measures.

12. Your Rights

12.1. You have the right to request access to, obtain copies of, request correction of, or request that we cease collecting, processing, or using your personal data at any time.

12.2. If you have any questions about this Privacy Statement or wish to exercise any of the rights set out in this paragraph, you may submit your request by mail or email using the following contact information:

Name or job title of contact person
Yuki Yamamoto, President and CEO
Mailing Address
Room 1210-11, Lippo Sun Plaza, 28 Canton Road, Tsim Sha Tsui
Email Address
support@cosme-hk.zendesk.com

12.3. In addition to the above mailing and email methods, you may also contact our hotline at 3468 3072.

12.4. We reserve the right to charge you a reasonable fee to comply with your access request.

13. Data Retention Period and Deletion of Personal Data

If you wish us to delete your personal data, you may do so by ceasing to use our services. After you cease to use our services, your personal data will be stored for a certain period of time as necessary for achieving the purposes as described in this Privacy Statement (including for identity verification purposes) or for compliance with applicable laws, before being deleted.

14. Security of Personal Data

14.1. We will use all reasonable efforts to ensure that all personal data held by us are stored in a secure and safe location, and that access to such data is restricted to our authorized employees or authorized third-party service providers or partners as described in this Privacy Statement.

14.2. ISRHK will use various security technologies and procedures to protect any personal data from unauthorized or accidental access, use, loss, erasure or disclosure. ISRHK will take all necessary and reasonable measures to ensure that any personal data is not subject to unauthorized interception or intrusion by any third party. However, you must be aware that no system is completely impenetrable, and no data transmitted over the Internet or other communication networks can be guaranteed to be completely secure. Therefore, we cannot guarantee the security of any data you transmit online or through other communication networks, or the security of any data we obtain online or through other communication networks.

15. Updates to Privacy Statement

The terms of this Privacy Statement may be amended, updated, revised, changed, or modified from time to time as we deem necessary. The latest version will be posted on the ISRHK Websites. ISRHK reserves the right to modify and update the content of the ISRHK Websites at any time and to unilaterally amend this Privacy Statement without prior notice (except for terms or amendment that require your consent in accordance with applicable laws).