Privacy policy

1. Who we are

This Privacy Policy explains how 彩月有限公司 (FRENCH CORNER LTD.), operating the HABIBI Macaron brand ("HABIBI", "we", "us"), collects, processes and uses your personal data. It applies to habibimacaron.com, our online store, our social media pages, our LINE Official Account and our physical stores in Taiwan.

We act as the collector of your personal data under Taiwan's Personal Data Protection Act (個人資料保護法, "PDPA"). This policy serves as the notice required by Article 8 of the PDPA.

Item

Details

Company

彩月有限公司

Unified Business No.

24929154

Registered address

新竹縣湖口鄉波羅村八德路1段51號1樓

Contact email

[email protected]

Phone

035692220

2. Personal data we collect

We collect only the data needed for the purposes in Section 3. Categories follow the PDPA classification (C001, C002, C011, C102, etc.).

Category

Examples

Source

Identification (C001)

Name, phone number, email address, delivery address

You, when you order, register or contact us

Recipient details (C001)

Gift recipient's name, phone and address

You, when you send an order as a gift

Order and transaction data (C102)

Products purchased, order amount, order number, invoice details

Our online store

Payment data (C002)

Payment method and transaction status. Full card numbers are processed by our payment provider, not stored by us

Payment provider

Account data (C001)

Login email, encrypted password, order history

Your website account, if you create one

Communications (C011)

Messages sent to us by email, website form, LINE, Facebook or Instagram

You

Technical and usage data (C011)

IP address, device and browser type, pages viewed, clicks, referring site, cookie identifiers

Cookies and tags (Section 4)

Social media data (C011)

Public profile name and user ID when you interact with our LINE Official Account or social pages

LINE, Meta

We do not knowingly collect sensitive personal data (medical, genetic, sexual life, health examination or criminal records). Please tell us about food allergies only as needed for your order.

3. Why we use your data

We use your personal data only for the purposes below, within the scope of our registered business. Codes refer to the PDPA specific-purpose classification.

Purpose

PDPA code

Processing and delivering orders, issuing e-invoices, handling returns

148 Online shopping and e-commerce; 069 Contracts

Customer service and answering your questions

090 Consumer and customer management

Sending news, promotions and offers, with your consent

040 Marketing

Measuring and improving our website and advertising

157 Survey, statistics and research analysis

Preventing fraud and meeting legal and tax obligations

181 Other business within our registered scope

Period of use: for as long as the purpose exists, or as required by law or contract (see Section 6).

Area of use: Taiwan, and the countries where our service providers process data (see Section 6).

Recipients: HABIBI, and the service providers listed in Section 5, only as needed for the purpose.

Method of use: automated and manual processing, in electronic or written form.

If you do not provide your data: we may be unable to process your order, deliver it or reply to you. Browsing the site does not require you to give your name or contact details.

4. Cookies and tracking technologies

Our website uses cookies and similar technologies (tags, pixels). Essential cookies keep the site and your cart working. Analytics and advertising cookies are set by the third parties below.

Service

Provider

What it does

Learn more / opt out

Google Analytics 4

Google LLC

Measures site traffic and how visitors use our pages

Privacy policy · Opt-out add-on

Google Ads (conversion tracking, remarketing, enhanced conversions)

Google LLC

Measures which ads lead to purchases and shows our ads to past visitors

Ad settings

Meta Pixel

Meta Platforms, Inc.

Measures Facebook and Instagram ad results and builds ad audiences

Ad preferences

LINE Tag

LY Corporation

Measures LINE ad results and builds ad audiences

LINE privacy policy

Enhanced conversions. When you complete an order, we may send your email address and phone number to Google in hashed (one-way encrypted) form. Google uses it only to match the purchase to an ad you saw, then discards it. It is not used to identify you to us.

Your choices. You can block or delete cookies in your browser settings, and manage personalised ads through the links above. Blocking cookies may affect some site features, such as your cart.

5. Who we share your data with

We do not sell your personal data. We share it only with the service providers who help us run our business, and only the data each one needs. They may use it only on our behalf, except where they act under their own privacy policy as noted.

Recipient

Purpose

Data shared

ECPay / bank

Processing payments

Order amount, payment details

黑猫宅急便

Delivering orders

Recipient name, phone, address

E-invoice provider

Issuing government uniform e-invoices

Name, email, invoice carrier

Website hosting and email provider

Running the website and sending order emails

All website data, stored on their servers

Google LLC

Analytics, advertising and ad measurement (own privacy policy)

Technical data, hashed email and phone

Meta Platforms, Inc.

Facebook and Instagram advertising and messaging (own privacy policy)

Technical data, messages you send us

LY Corporation (LINE)

LINE Official Account messaging and LINE ads (own privacy policy)

LINE user ID, messages you send us

We may also disclose personal data when required by law, a court order or a competent authority, or to protect the rights and safety of our customers or HABIBI.

6. International transfers, retention and security

International transfers. Google, Meta and LINE may process data on servers outside Taiwan, including in the United States and Japan. These transfers follow the providers' own data protection safeguards and comply with any restrictions set by Taiwan's competent authorities under Article 21 of the PDPA.

How long we keep data.

  • Order, invoice and accounting records: for the period required by Taiwanese law, including the Business Entity Accounting Act and tax regulations.
  • Account data: until you delete your account, then 12 months.
  • Marketing contact details: until you unsubscribe.
  • Customer service messages: 12 months.
  • Analytics and advertising data: according to the retention settings of each provider.

When the purpose ends or the period expires, we delete the data or make it anonymous, unless the law requires us to keep it.

Security. We use reasonable technical and organisational measures to protect your data, including encrypted (HTTPS) connections, restricted staff access and secure service providers. If a data breach occurs, we will notify affected customers promptly, as required by Article 12 of the PDPA.

7. Your rights

Under Article 3 of the PDPA, you have the right to:

  1. Ask whether we hold your data, and review it.
  2. Request a copy of your data.
  3. Correct or complete your data.
  4. Ask us to stop collecting, processing or using your data.
  5. Ask us to delete your data.

To exercise a right, email [email protected] with your name and the email or phone used for your orders. We may verify your identity first. We will reply within the time limits of Articles 13 and 14 of the PDPA and may charge a reasonable fee for copies, as the law allows.

Some requests may be limited where we must keep data by law (for example invoices) or to complete an order in progress. You can also file a complaint with the competent authority in Taiwan.

8. Marketing, minors, changes and contact

Marketing messages. We send newsletters, promotions or LINE messages only if you have agreed, or as permitted by law for existing customers. You can opt out at any time by clicking "unsubscribe" in an email, blocking our LINE Official Account, or contacting us. Order and service messages are not marketing and will still be sent.

Minors. Our services are intended for adults. If you are under 18, please use the site with a parent or guardian's consent. If we learn we have collected data from a minor without such consent, we will delete it.

Changes to this policy. We may update this policy when our services or the law change. The new version will be posted on this page with its effective date. For significant changes, we will also notify you by email or on the website.

Contact us. For any question about this policy or your personal data:

  • Email: [email protected]
  • Phone: 035692220
  • Address: 彩月有限公司, 新竹縣湖口鄉波羅村八德路1段51號1樓

Effective date: 2026/01/01