# Privacy Policy
## Please Read This Privacy Policy Carefully
The GeckoDesign® Online Store (https://geckodesign.cyberbiz.co/) is operated and managed by **Gecko Enterprise Co., Ltd.**
GeckoDesign® highly values the privacy rights of its members and complies with the requirements of the Personal Data Protection Act and other applicable privacy regulations. To protect your personal information and privacy rights, we have established this Privacy Policy. Please review the following provisions carefully.
---
## 1. Personal Information Security
Protecting the privacy of our members is one of GeckoDesign®'s core operating principles. Without your prior consent, we will never disclose your personal information to any third party unrelated to the services provided by this Website.
Members are responsible for safeguarding their account credentials, passwords, and personal information. You should not disclose any personal information, particularly your account password, to any other person.
After using any services provided by the GeckoDesign® Website, please remember to log out of your account. If you are using a shared computer or a public computer, you should also close all browser windows after completing your session to prevent unauthorized access to your personal information.
---
## 2. Collection, Processing, and Use of Personal Data
Any personal information collected through GeckoDesign® websites shall be used solely by GeckoDesign® for the purposes and within the scope originally specified at the time of collection.
Unless otherwise disclosed in advance or required by applicable laws and regulations, GeckoDesign® will not provide your personal information to any third party, nor will it use such information for purposes other than those originally stated.
GeckoDesign® is committed to handling all personal information responsibly and in accordance with applicable data protection laws to ensure the security, confidentiality, and integrity of your personal data.
## 3. Purpose of Collection
The purposes for collecting personal data include marketing activities, consumer and customer management, customer services, online shopping, e-commerce services, surveys, statistical analysis, and research purposes (corresponding to the statutory purpose categories No. 040, 090, 148, and 157 under applicable laws and regulations).
GeckoDesign® collects personal data through the membership registration process, purchase transactions, participation in promotional activities, and other interactions conducted through the Website.
---
## 4. Categories of Personal Data Collected
The Company may collect the following categories of personal information through the Website:
### 1. Personal Identification Information
Information used to identify an individual, including but not limited to:
* Full name
* Residential or mailing address
* Telephone number
* Email address
* Other contact information
### 2. Financial Information
Information related to payment and financial transactions, including but not limited to:
* Credit card information
* Bank account information
* Payment transaction details
### 3. Government-Issued Identification Information
Information contained in government-issued identification documents, including but not limited to:
* National Identification Number
* Passport Number (for foreign nationals)
### 4. Personal Profile Information
Information describing an individual, including but not limited to:
* Gender
* Nationality
* Date of birth
### 5. Family Information
Information relating to an individual's family status, including but not limited to:
* Marital status
* Information regarding children or dependents
---
## 5. Period, Region, Recipients, and Methods of Use
### Period of Use
Personal data may be collected, processed, and used throughout the operational period of the Company or as otherwise permitted by applicable laws and regulations.
### Geographic Scope
Personal data collected by the Company will primarily be processed and utilized within Taiwan (Republic of China).
### Recipients and Methods of Use
In addition to being used for membership management, customer relationship management, customer service, and related administrative functions, personal data may also be used for the following purposes:
#### 1. Product Delivery and Fulfillment
When products are shipped to customers, relevant personal information may be provided to logistics companies, courier services, postal service providers, or other delivery partners solely for the purpose of fulfilling product deliveries.
#### 2. Financial Transactions and Payment Authorization
Financial information provided by customers may be submitted to financial institutions, payment processors, banks, or authorized payment service providers for transaction processing, payment authorization, credit card verification, fund transfers, and related financial activities.
#### 3. Marketing Communications
The Company may use customers' mailing addresses, email addresses, and telephone numbers to provide promotional materials, marketing communications, product information, special offers, and advertisements relating to the Company's products and services or those of its authorized business partners.
## 5. Period, Geographic Scope, Recipients, and Methods of Use
### a. Period of Use
Personal data will be retained and used until the member requests termination of use, or until GeckoDesign® discontinues the provision of related services, unless otherwise required by applicable laws and regulations.
### b. Geographic Scope
Members' personal data will primarily be processed and utilized within Taiwan (Republic of China).
### c. Recipients and Methods of Use
In addition to being used for membership administration, customer management, account verification, and customer service purposes, members' personal data may also be used for identity verification, payment processing, logistics services, marketing communications, and other related business operations.
Examples include, but are not limited to, the following:
#### Member Services
When members access and use services provided by GeckoDesign®, relevant membership information may be automatically displayed within the Website to facilitate service delivery and account management.
### d. Transaction Fulfillment
When members reserve, bid on, purchase, redeem, participate in promotional campaigns, prize drawings, giveaways, or engage in any other transaction involving products or services, personal data may be used for:
* Product delivery and order fulfillment
* Service provision
* Payment processing and collection
* Customer support and inquiries
* Communication regarding orders and transactions
* After-sales services
* Other activities necessary for the completion and administration of transactions
### e. Advertising, Promotions, and Marketing
GeckoDesign® may provide members with newsletters, electronic publications, promotional materials, product updates, and service-related information via email, postal mail, telephone, or other communication channels.
Personalization, service optimization, and marketing analysis may be conducted based on:
* Customer profiles
* Purchase history
* Browsing behavior on GeckoDesign® websites
* Product preferences
* Advertising interaction records
Such information may be used for:
* Personalized content and recommendations
* Service usage analysis
* Development of new products and services
* Improvement of existing services
* Customer satisfaction surveys
* Promotional campaigns and events
* Communication regarding services and business-related matters
### f. Responding to Customer Inquiries
GeckoDesign® may use personal information to respond to inquiries submitted through email, postal mail, facsimile, telephone, online forms, customer service platforms, or any other direct or indirect communication channels.
### Ancillary Business Purposes
Personal information may also be used for purposes reasonably necessary and directly related to the purposes described above in order to provide and maintain GeckoDesign® services.
### Disclosure to Service Providers
When members reserve, purchase, bid on, apply for services, participate in promotional campaigns, prize giveaways, or engage in other transactions involving third-party service providers, GeckoDesign® may provide relevant personal information to such service providers to the extent necessary for completing the transaction.
Those service providers shall be responsible for managing the personal information received. GeckoDesign® requires service providers to process personal data in accordance with privacy protection principles and applicable laws. However, GeckoDesign® cannot guarantee that every service provider will fully comply with such obligations. For further information, members should contact the respective service providers directly.
### Other Uses
For specific services, personal information may occasionally be used for purposes beyond those described above. In such cases, the purpose and scope of use will be clearly disclosed on the relevant service page prior to collection or use.
---
## 6. Rights of Data Subjects
Individuals whose personal data has been collected by GeckoDesign® are entitled, under the Personal Data Protection Act and applicable laws, to exercise the following rights:
* The right to inquire about and review personal data.
* The right to request a copy of personal data.
* The right to request supplementation or correction of personal data.
* The right to request cessation of collection, processing, or use of personal data.
* The right to request deletion of personal data.
Members wishing to exercise any of the above rights may submit a request through GeckoDesign® Customer Service.
Please note that refusal to provide the personal information required for membership registration or service provision may result in the inability to access certain features, receive complete services, or use the Website and related services altogether.
## 7. Data Security
To protect the privacy and security of our members, GeckoDesign® member account information is protected by password authentication mechanisms.
GeckoDesign® employs reasonable technical, administrative, and security measures to safeguard all personal information against unauthorized access, disclosure, alteration, misuse, or destruction.
To ensure the security of online credit card transactions, GeckoDesign® utilizes the electronic payment processing system developed by **ECPay Co., Ltd.** During the entire online payment process, transaction data is protected through **128-bit SSL (Secure Sockets Layer) encryption technology**, providing a secure environment for online transactions.
---
## 8. Accessing and Correcting Personal Data
Members may exercise their rights regarding personal data, including:
* Accessing and reviewing their personal information;
* Requesting copies of personal information;
* Requesting supplementation or correction of inaccurate information;
* Requesting cessation of processing or use of personal information;
* Requesting deletion of personal information.
If a member wishes to exercise any of the above rights, they may contact GeckoDesign® Customer Service. GeckoDesign® will process such requests promptly and in accordance with applicable laws and regulations.
---
## 9. Cookies
To enhance user convenience and improve service quality, the GeckoDesign® Website uses **cookies** and similar technologies.
A cookie is a small piece of data stored by a website server on a user's browser or device. Cookies help the Website recognize users, remember preferences, improve functionality, and provide a more personalized browsing experience.
GeckoDesign® uses cookies to:
* Facilitate user authentication and login functions;
* Remember user preferences and settings;
* Maintain shopping cart information;
* Improve website performance and user experience;
* Analyze website traffic and usage patterns.
If users choose to disable or reject cookies through their browser settings, certain Website features may not function properly, including the inability to log in successfully, maintain shopping cart contents, or access certain services.
The Company reserves the right to revise, modify, or update this Privacy Policy from time to time in response to changes in market conditions, business operations, legal requirements, or technological developments.
Any updated version of this Privacy Policy will be published on the Website and shall become effective upon publication unless otherwise stated.
If members have any questions regarding the GeckoDesign® Privacy Policy or matters relating to personal information and data protection, they may contact GeckoDesign® via email or through the contact methods provided on the Website.
To ensure the security and protection of personal data files maintained by the Company, GeckoDesign® has designated authorized personnel responsible for implementing and maintaining the following Personal Data Security Maintenance Plan in accordance with applicable laws and regulations.
Personal data stored within databases shall be protected through defined access scopes, user permissions, user identification codes, and password authentication mechanisms.
User IDs and passwords must remain confidential and may not be shared with unauthorized individuals.
Personal data files may not be accessed, processed, or used without proper authorization.
Personal data stored on personal computers or local hard drives shall be protected through boot passwords, screen-lock passwords, and other appropriate security measures.
Upon completion of data processing activities, users must log out of systems immediately and shall not leave personal information displayed on computer screens.
Passwords used to access personal data systems must be changed periodically to reduce the risk of unauthorized access and prolonged misuse.
When customers request personal information via telephone or other communication channels, identity verification procedures must be completed before any personal information is disclosed to ensure customer privacy and security.
Appropriate preventive, protective, and monitoring measures shall be implemented when collecting, processing, transmitting, or utilizing personal information through the Internet.
Anti-virus software, malware detection systems, and other cybersecurity measures shall be employed to maintain normal system operations and protect personal information.
Potential security risks associated with online transactions shall be regularly evaluated, and appropriate security control measures shall be implemented accordingly.
When personal information is processed electronically, all data input, output, modification, correction, and transmission activities should be verified against the original records.
Before personal information is disclosed or utilized, the accuracy and consistency of the data should be reviewed and validated.
In the event of discrepancies or uncertainties, the original records shall be consulted for verification.
Regular internal audits shall be conducted, and audit records shall be properly maintained and retained.
Computer equipment and systems used to process or store personal information shall undergo regular maintenance and inspection.
Computer equipment containing personal information shall not be relocated without proper authorization and business necessity.
Personal computers containing personal data shall not be directly used as publicly accessible terminals or public inquiry systems.
Personal information stored on discarded, recycled, replaced, donated, or resold hardware shall be permanently deleted or securely destroyed prior to disposal.
Employees responsible for processing personal information who change positions, transfer responsibilities, or leave the Company must formally hand over all storage media, documents, and related materials under their control.
Successors shall establish new access credentials and passwords as necessary to maintain security and accountability.
Upon employee termination, any passwords, credentials, or access rights previously available to the departing employee shall be immediately revoked, updated, or replaced.
All personnel shall comply with generally accepted information security practices, cybersecurity policies, and computer security management requirements.
GeckoDesign® is committed to maintaining appropriate administrative, technical, and physical safeguards to protect personal information and ensure compliance with applicable privacy and data protection laws.