Privacy Policy

BuyFirst Privacy Policy
Updated and Effective Date: May 26, 2025

BenMark International Co., Ltd. (hereinafter referred to as "we" or "us"), the operator of BuyFirst, respects your privacy concerns and values our relationship with you.

When you access the store (the “Store”) established by us and authorized through our SaaS provider SHOPLINE (hereinafter referred to as “SHOPLINE”), we may collect, process, and use your personal data (including that of your employees and/or representatives, or persons acting on your behalf). If you visit or make purchases through the Store, we may also collect and use your personal data. We fully recognize the importance of personal data and are committed to maintaining the integrity and security of the Store. This Privacy Policy describes the types of personal data we collect, how we use such information, with whom we share it, and the choices available to you regarding our use of the information.

This Privacy Policy will help you understand the following:

• What We Collect
• Information You Provide
• How We Use Personal Data
• How We Use Cookies and Similar Tracking Technologies
• How We Process, Share, Transfer, and Disclose Personal Data
• Your Rights and Choices
• How We Protect Personal Data
• How We Update This Privacy Policy
• How to Contact Us

What We Collect
We may collect personal data about you from various sources. This includes information collected through our Store, extensions, or when you access and/or use our social media pages or platforms (or their associated stores or applications, such as Facebook or Instagram). When you visit the Store or our social media pages, we may also automatically collect certain information about your device or usage through technologies such as cookies, web server logs, and web beacons.

Categories of Information You Provide
The categories of personal data that the Store may collect from you include, but are not limited to:

1. Identification Information
• Personally identifiable information (e.g., name, address, phone number, email)
• Financial identification information (e.g., credit card details, bank account information)

2. Personal Characteristics

• Descriptive personal data (e.g., gender, date of birth, measurements)

3. Social Circumstances

• Recipient information (e.g., business or residential address)

Information You Provide
You may choose to provide us with personal data in various ways, such as when you register on our Store, make a purchase, or interact with us through social media (or its associated stores or extensions). The types of personal data you may provide to us (as applicable) include:

• Contact information (e.g., name, mailing address, email, mobile number, telecom provider)
• Age and date of birth
• Gender, preferred language
• Username and password
• Payment information (e.g., credit card number, expiration date, shipping and billing addresses)
• Purchase history
• Product and communication preferences
• User-generated content (e.g., photos, videos, comments, articles, survey responses)
• Information you provide when accessing our social media pages (e.g., name, profile picture, likes, location, friends list, and any information described on social media registration pages or geographic location data via our mobile app)
• Device identifiers, such as MAC address, IP address, or other online identifiers

Providing your personal data is voluntary. However, failure to provide such information may result in certain services or promotions being unavailable to you.

How We Use Cookies and Similar Technologies

1. To ensure the normal functioning of the website, provide you with an easier access experience, recommend content you may be interested in, and enhance your overall user experience, we store cookies, small data files, and similar technologies on your computer or mobile device. These technologies help us identify you, store your preferences, or save items in your shopping cart, among other uses.
2. We will not use cookies for any purposes other than those stated in this policy. You can delete all cookies stored on your computer as needed, and most web browsers offer features to block cookies.

How We Share, Transfer, and Disclose Your Personal Information

1. Sharing

We do not share your personal information with any third parties unless under the following circumstances:

• With your explicit consent: We may share your personal information with third parties after obtaining your clear authorization.
• In order to fulfill legal obligations: We may share your personal information as required by laws and regulations, for litigation and dispute resolution, or as required by administrative or judicial authorities in accordance with the law.
• With our affiliated companies: To provide you with consistent services and facilitate joint account usage, we may share your necessary personal information with our affiliated companies. However, we will only share necessary information and are subject to the purposes stated in this privacy policy. If we or our affiliates need to use your personal information for purposes beyond those stated in this policy, we will seek your authorization again.

2. Transfer

We will not transfer your personal information to any company, organization, or individual, except under the following circumstances:

• With your explicit consent;
• In the event of mergers, acquisitions, or bankruptcy liquidation involving the transfer of personal information, we will require the new company or organization holding your personal information to continue to be bound by this policy; otherwise, we will require them to seek your authorization again.

3. Public Disclosure

We will only publicly disclose your personal information under the following circumstances:

• With your explicit consent;
• Disclosure based on legal requirements: We may publicly disclose your personal information when legally required, such as in response to subpoenas or other legal procedures, lawsuits, or mandatory requirements from government authorities.

How We Protect Your Personal Information

1. We use industry-standard security measures to protect the personal information you provide against unauthorized access, disclosure, use, modification, damage, or loss. For example, we use encryption, anonymization, access control, and other technologies and organizational measures to ensure the security of your data.
2. We have established special management systems, procedures, and organizations to ensure information security. For example, we strictly limit the scope of employees accessing information, and require them to fulfill confidentiality obligations.
3. We will take reasonable and feasible steps to avoid collecting irrelevant personal information.
4. In the unfortunate event of a personal information security incident, we will promptly inform you in accordance with the requirements of laws and regulations. We will inform you of the basic situation and possible impact of the incident, the disposal measures we have taken or will take, suggestions for you to prevent and reduce risks, and remedial measures. We will inform you in a timely manner via email, letter, telephone, push notification, etc. When it is difficult to inform each individual subject of personal information, we will issue an announcement in a reasonable and effective way. Meanwhile, we will also report the handling of personal information security incidents to the regulatory authorities as required.

Your Rights

In accordance with relevant Chinese laws, regulations, standards, and prevailing practices in other countries and regions, we guarantee that you can exercise the following rights over your personal information:

1. Access to Your Personal Information
   You have the right to access your personal information, unless otherwise provided by laws and regulations.
2. Correction of Your Personal Information
   When you find that your personal information is incorrect or incomplete, you have the right to request corrections or supplements.
3. Deletion of Your Personal Information
   You may request us to delete your personal information under the following circumstances:

• If we process personal information in violation of laws and regulations;
• If we collect and use your personal information without your consent;
• If our processing of personal information seriously violates the agreement with you;
• If you no longer use our products or services, or you cancel your account;
• If we no longer provide you with products or services.

If we decide to respond to your deletion request, we will also notify the entities that have obtained your personal information from us and request them to delete it in a timely manner, unless otherwise required by laws and regulations or such entities have obtained your independent authorization.

4. Account Cancellation
   You may cancel your registered account with us at any time. Once your account is canceled, we will stop providing you with products or services and, unless otherwise stipulated by laws or regulations, delete your personal information.
5. Withdrawal of Consent
   You may change the scope of your authorization or withdraw your authorization at any time. After you withdraw your consent, we will no longer process the corresponding personal information. However, your decision to withdraw consent will not affect previous processing based on your authorization.

How We Handle Minors’ Personal Information

Our products, websites, and services are primarily intended for adults. Without the consent of their guardians, minors may not create their own user accounts. If we discover that we have collected personal information of a minor without verifiable parental consent, we will delete the relevant data as soon as possible.

How Your Personal Information is Stored and Transferred Globally

1. Our services are provided within China. As such, your personal information will be stored in China. Currently, we do not transfer your personal information overseas.
2. If we do need to transfer personal information overseas in the future, we will comply with relevant laws and regulations and inform you of the purpose of the data transfer, the recipient, security measures, and risks, and obtain your consent.

Changes and Updates to This Privacy Policy

We may update this privacy policy from time to time. Without your explicit consent, we will not reduce your rights under this policy. We will publish any changes to this policy on this page. For significant changes, we will provide more prominent notice (for example, pop-up notices or push messages).

Significant changes include but are not limited to:

• Major changes to our service model, such as the purpose of processing personal information, types of personal information processed, and how personal information is used;
• Major changes to your rights in the processing of personal information or how they are exercised;
• Changes in the entities responsible for handling personal information due to mergers, acquisitions, etc.

Contact Us

If you have any questions, comments, or suggestions regarding this privacy policy, you may contact us through the following means:

• Email: service@buyfirst.com.tw

We will review the issues involved as soon as possible and respond within 15 working days after verifying your identity.