We Value Your Privacy: MiQu Technology Co., Ltd. (hereinafter referred to as "the Company") understands the importance of protecting your personal data and privacy. We collect, process, and use personal data in compliance with the Personal Data Protection Act of the Republic of China and other relevant regulations. To ensure your peace of mind while using the services and information provided by the Company's website (hereinafter referred to as "the Website"), this Privacy Policy explains what personal data we collect, how we use it, and your rights. Please read the following carefully. Scope of Application: This Privacy Policy applies to the collection, processing, use, and protection of personal data involved when you use the Website's services. This policy does not apply to third-party websites outside the Website, nor does it apply to personnel not employed or managed by the Company. When you link to other websites through the Website, the handling of your personal data on those websites will be governed by their privacy policies, and the Company assumes no responsibility for this. 1. Purpose and Types of Personal Data Collection The Company collects your personal data within a specific scope of purpose as required to provide services. Generally, we may request your personal data for the following purposes: member registration and identity verification, providing products or services, processing orders or transactions, responding to your inquiries or requests, providing updates or promotional offers (with your consent or as permitted by law), improving the quality of website services, and fulfilling legal or contractual obligations. The types of personal data collected depend on the nature of the services you use and may include, but are not limited to: name, contact information (such as email, phone, address), account login information, payment transaction details, communication content with us, and your activity records on the Website (e.g., visited pages, click records). During general browsing, the server automatically records information such as your device's IP address, usage time, browser type, and browsing click data. This information is used internally to optimize services and is never disclosed externally. The Company only collects personal data necessary to achieve specific purposes. Unless otherwise required by law or specified in this policy, you may choose not to provide certain non-essential personal data, but this may prevent you from using certain specific service features. 2. How Personal Data is Used The Company will use your personal data legally and reasonably within the scope of the purposes for which it was collected. We primarily use your personal data in the following ways:

• Providing and Maintaining Services: Verifying your identity, processing member functions or transactions (e.g., shopping, payments), providing the services you request, and fulfilling contractual obligations with you.
• Customer Contact and Notifications: Using your contact information to respond to your inquiries or notify you of significant changes to the services (e.g., updates to terms or policies, service interruptions, security alerts).
• Optimizing Service Experience: Analyzing your usage of the Website to improve our services and interface. To provide content tailored to your needs, we may analyze your browsing behavior on the Website (such data is presented in aggregate form and does not directly identify individuals) to understand which features are popular and use this as a reference for feature optimization.
• Marketing and Promotions (Optional): With your consent or as permitted by law, we may use your contact information to send you updates, promotional offers, and information about the Company's products or services. You may opt out of such marketing messages at any time by following the instructions in our notifications or contacting us.
• Fulfilling Legal Obligations: When required by law or requested by competent authorities through legal procedures, we will use or provide your personal data (e.g., for judicial investigations or government requests) to comply with legal obligations or public interest needs.

The Company will never use your personal data for purposes beyond the specific purposes for which it was collected, nor will it sell or exchange your personal data to third parties for marketing purposes. If there is a need to change the original purpose of collection or usage, we will obtain your consent or handle it in accordance with legal requirements. 3. Data Storage Location and Retention Period Data Storage Location: The personal data you provide will be stored on secure servers or databases of the Company and/or our entrusted service providers. We primarily use servers located in Taiwan or regions with legal protections equivalent to Taiwan to store data, ensuring your personal data is protected under the Personal Data Protection Act. Regardless of where the data is stored, the Company takes appropriate protective measures to maintain its security and ensure compliance with this Privacy Policy. Retention Period: We will retain your data for the period necessary to achieve the specific purposes for which it was collected. Unless otherwise required by law or requested by competent authorities, once the purpose of collection is fulfilled and the retention period expires, the Company will delete or destroy your personal data or retain it in an anonymized form for statistical analysis. For example, member account data will be retained during the account's active period; once you cancel your account, all other data will be deleted or anonymized, except for transaction records or other data that must be retained by law. Please note that for necessary situations such as audits, dispute resolution, or preventing illegal activities, we may temporarily retain some data beyond the original purpose of collection, but only within the necessary scope and period, ensuring that such data is not used for purposes other than the original intent. 4. Data Security and Protection Measures The Company adopts various appropriate security technologies and procedures to protect your personal data from unauthorized access, disclosure, alteration, or destruction. Our website servers are equipped with firewalls, antivirus software, and other necessary information security equipment, and we implement strict access control measures. Only authorized employees or outsourced personnel who are bound by confidentiality obligations can access your personal data. Relevant personnel have signed confidentiality agreements, and violations of confidentiality obligations will be pursued in accordance with the law. If it is necessary to entrust third-party vendors to process personal data (e.g., sending newsletters or processing payments), the Company will strictly require the entrusted vendors to comply with confidentiality obligations and take necessary measures to supervise their processing. If the entrusted party fails to fulfill confidentiality responsibilities, the Company will immediately terminate the entrustment and pursue legal responsibility to ensure the security of your personal data. 5. User Rights Under Article 3 of the Personal Data Protection Act, you have the following rights regarding your personal data, which cannot be waived or restricted by special agreements:

• Inquiry or Request for Access: You have the right to inquire whether the Company holds your personal data and request access or obtain a copy. However, if accessing your data incurs costs, the Company may charge necessary fees in accordance with the law.
• Request for a Copy: You may request the Company to provide a copy of your personal data. We will provide readable copies within the scope of technical feasibility.
• Request for Supplement or Correction: If you find that your personal data is incorrect or incomplete, you have the right to request correction or supplementation. To ensure security, we may need to verify your identity before processing your request.
• Request to Stop Collection, Processing, or Use: In specific circumstances (e.g., if you believe our collection or use of your personal data exceeds the original purpose or lacks legal basis), you may request us to stop collecting, processing, or using your personal data. However, this may result in our inability to continue providing certain services to you.
• Request for Deletion: You may request the Company to delete your personal data, such as when the purpose of collection no longer exists or you withdraw your consent. However, if the data is necessary for the Company to fulfill legal obligations or must be retained by law, it may not be immediately deleted.

You may exercise the above rights at any time through the contact methods provided by the Company (see Section 8 of this policy). To protect your personal data, we may require you to provide appropriate identity verification information when processing your requests. If your request involves the personal data of others, we will not be able to comply unless you have obtained the legal authorization of the concerned party. Please note that if you refuse to provide certain necessary personal data or request its deletion, it may result in our inability to provide the services you originally requested. Additionally, we may need to retain records of your requests and how they were handled in accordance with the law. 6. Sharing and Disclosure of Personal Data The Company strictly keeps your personal data confidential and will not provide, rent, sell, or exchange it to any third party (including individuals, groups, private enterprises, or public authorities) except in the following circumstances:

• With Your Written Consent: With your explicit consent, we may share your personal data with specific parties as instructed by you.
• Legal Requirements: When required by law or requested by judicial or government authorities through legal procedures, we must comply with legal obligations to provide your personal data. For example, when public safety considerations require judicial authorities to formally request specific data through legal procedures.
• To Prevent Danger to Life, Body, Freedom, or Property: To protect you or others from imminent danger to life, safety, or property, we may provide your personal data in necessary circumstances.
• Public Interest Statistics or Academic Research: When conducting statistics or academic research in the public interest with public authorities or academic institutions, we may provide appropriately processed data that cannot identify you for analysis. Data processed for de-identification cannot be restored or used to identify specific individuals.
• Enforcing Website Terms or Protecting Others' Rights: When your behavior on the Website violates the terms of service or may harm other users of the Website or infringe on others' rights, the Company may disclose your personal data to identify, contact, or take legal action. This includes investigating, preventing, or combating illegal activities.
• Beneficial to Your Interests: In certain emergency situations, we may share your data to protect your interests.
• Entrusted Processing: If the Website entrusts third-party vendors to assist in collecting, processing, or using your personal data, we will fulfill our supervisory responsibilities to ensure that the entrusted parties comply with privacy protection obligations. For example, providing data to vendors assisting with product delivery or customer support, but such vendors are limited to using your personal data only for the purposes of fulfilling the entrustment and may not use it for other purposes.

In addition, the Company will not provide your personal data to third parties for use. If there are other situations where your personal data needs to be shared with third parties due to business needs, we will clearly inform you of the identity, purpose, and relevant information of the third party and obtain your prior consent. 7. Protection of Minors' Privacy The Company's services are generally only available to individuals aged 20 or older (or the age of majority in their jurisdiction) with full legal capacity. We do not knowingly collect personal data from children or adolescents under the age of 20. If you are under 20 years old, please use the Website with the consent and supervision of your parent or legal guardian and avoid providing your personal data to us without their consent. If the Company discovers that personal data from minors has been collected without parental or guardian consent, we will promptly delete the relevant data in accordance with applicable laws or seek feasible ways to obtain guardian consent. Parents or guardians who discover that their minor children have provided personal data to the Company should contact us promptly so that we can take appropriate measures. 8. Revisions to the Privacy Policy This Privacy Policy will be updated from time to time in response to legal revisions, technological updates, or other operational needs. The Company reserves the right to modify this policy at any time. When we make significant changes to this policy, we will announce the new policy on the Website and indicate the effective date or notify you through the contact information you provide. The new policy will automatically take effect upon publication or notification. Please regularly review the Privacy Policy page to stay informed about the latest privacy protection measures. If you continue to use the Website's services after the changes take effect, it will be deemed that you have agreed to the updated policy. 9. Contact Information If you have any questions or comments about this Privacy Policy or wish to exercise your rights related to personal data (e.g., requesting to inquire, correct, or delete data), please contact the Company through the following channels:

• Contact Us Page: You can submit your requests or questions through the "Contact Us" online form on the Website. Our staff will respond promptly upon receipt.
• Email: You can also send your requests via email to the Company's customer service mailbox ([email protected]) (example email). Please provide sufficient information in your email to verify your identity and process your request.
• Written Mail: If you wish to submit your request in writing, please mail it to the Company's operational address (Address: XXX Road, XXX District, Taipei City, Taiwan, Customer Service Department, MiQu Technology Co., Ltd.). Please indicate "Personal Data Request" on the envelope.

The Company will do its utmost to protect your personal data privacy and respond to your needs promptly.