Privacy Policy

1. Information We Collect

We collect information you provide directly to us, such as when you create an account, make a purchase, or contact us. This includes:

• Account Information: Email address, name, profile picture (from social login providers)
• Purchase Information: Shipping address, payment information, order history
• Communication Data: Messages, support requests, and feedback
• Marketing Preferences: Your consent for promotional communications (optional)

2. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve our services
• Process transactions and send order confirmations
• Send you technical notices, updates, security alerts
• Respond to your comments, questions, and provide customer service
• Send promotional communications (only with your consent)
• Monitor and analyze trends, usage, and activities
• Detect, investigate, and prevent fraudulent transactions

3. Social Login Data Collection

When you sign up using social login providers (Google, Facebook, LINE), we collect:

• Required Data: Email address, basic profile information (name, profile picture)
• OpenID Connect Compliance: We explicitly request permission for email access
• Consent Tracking: We store your consent preferences and timestamps
• Limited Scope: We only request the minimum necessary permissions

4. Data Sharing and Disclosure

We do not sell, trade, or otherwise transfer your personal information to outside parties except:

• Service Providers: Third parties who assist us in operating our platform (payment processors, shipping)
• Legal Requirements: When required by law or to protect our rights
• Business Transfers: In connection with a merger, acquisition, or asset sale
• With Your Consent: When you explicitly agree to share information

5. Data Security

We implement appropriate technical and organizational security measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. This includes:

• Encryption of data in transit and at rest
• Secure authentication through Firebase Auth
• Regular security audits and updates
• Access controls and monitoring

6. Your Rights and Choices

You have the following rights regarding your personal information:

• Access: Request a copy of your personal information
• Update: Correct or update your information through your account settings
• Delete: Request deletion of your account and associated data
• Marketing Opt-out: Unsubscribe from promotional communications at any time
• Data Portability: Request your data in a machine-readable format

7. Consent Management

We provide granular consent options:

• Required Consent: Data processing for account creation and service provision
• Optional Consent: Marketing communications and promotional emails
• Withdrawal: You can withdraw consent at any time through your account settings
• Record Keeping: We maintain records of your consent preferences and timestamps

8. Cookies and Tracking

We use cookies and similar tracking technologies to enhance your experience. These include:

• Essential cookies for authentication and security
• Analytics cookies to understand usage patterns
• Preference cookies to remember your settings

9. Data Retention

We retain your personal information for as long as necessary to provide our services and fulfill the purposes outlined in this policy. Specifically:

• Account data: Until you delete your account
• Transaction records: 7 years for legal and tax purposes
• Marketing consents: Until withdrawn
• Analytics data: Aggregated and anonymized after 2 years

10. Children's Privacy

Our service is not intended for children under 13. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and become aware that your child has provided us with personal information, please contact us.

11. International Data Transfers

Your information may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place to protect your data in accordance with applicable data protection laws.

12. Changes to This Policy

We may update this privacy policy from time to time. We will notify you of any changes by posting the new policy on this page and updating the "Last Updated" date. Your continued use of our service after changes constitutes acceptance of the updated policy.