▣ JINK

▸ Legal · Privacy policy

▣ Privacy policy

Effective date：2026-10-16

盡可能有限公司 (Taiwan tax ID 60469290, "we") operates the JINK website (jink.live). As required by Article 8 of Taiwan's Personal Data Protection Act (PDPA), this policy explains what personal data we collect, why, who processes it for us, how long we keep it, and how you can exercise your rights.

The Traditional Chinese version prevails; this English version is a courtesy translation. Our sales terms are in the Terms of service.

▸ Seller information

Legal entity
盡可能有限公司
Tax ID (統一編號)
60469290
Registered address
13F.-4, No. 189, Sec. 2, Keelung Rd., Xinyi Dist., Taipei City, Taiwan
Email
contact@jink.live

1.What we collect and why

Specified purposes (PDPA purpose codes): 069 contractual and quasi-contractual matters; 090 consumer and customer management and service; 091 consumer protection; 040 marketing (only with your consent); 136 information and database management; 157 survey, statistics and research analysis; 181 other business within our registered scope.

Account

Data
Email, name, phone, avatar URL; password (stored only as an irreversible bcrypt hash); the Google account link and tokens if you sign in with Google; your login session
Purpose
Creating and signing in to your account, showing your orders and favourites

Orders and delivery

Data
Recipient name, phone, address or convenience-store branch and ID, items and quantities, amounts, your order notes; for guest checkout, the email you provide
Purpose
Creating and fulfilling orders, shipping, order lookup and after-sales service

Payment

Data
Payment method, amount, ECPay transaction number and payment status. Card number, expiry and CVC are collected and stored by ECPay and never pass through the Site
Purpose
Taking payment, reconciliation and refunds

Invoices

Data
Invoice type, company name and tax ID (company invoice), donation code and charity (donated invoice), invoice number and date
Purpose
Issuing, voiding and crediting government uniform invoices as tax law requires

Returns and refunds

Data
Return reason, condition notes and photos you send, refund method and refund account details
Purpose
Processing returns, refunds and invoice credits

Favourites and cart

Data
Products you favourite. While you are signed out, the cart lives only in your own browser (localStorage) and does not reach our server until checkout
Purpose
Remembering your selections

Newsletter

Data
The email you subscribe with, the time you consented, where you subscribed, and whether you have unsubscribed
Purpose
Sending product and event news (only if you subscribe)

Email records

Data
Recipient address, subject, type, delivery status and time. Emails our staff send by hand (support replies, re-send notices) also record opens and link clicks, including IP, browser information and device type
Purpose
Confirming notifications arrived and answering support queries

Referrals and rewards

Data
Referral relationships, discount-code redemptions, points and reward movements
Purpose
Running the referral and rewards programme and preventing abuse

Technical logs

Data
Server and reverse-proxy access logs, including IP, browser information and request paths
Purpose
Security, debugging and abuse prevention

You may decline to provide this data, but the related function then cannot work (without a delivery address we cannot ship; without an email you cannot receive order notifications). We do not collect special categories of data such as medical, genetic, sexual, health-examination or criminal records, and we do not use your data for automated decision-making or profiling.

2.Cookies and tracking

  • Necessary cookies: keeping you signed in, cross-site request forgery (CSRF) protection, and the back-office login session. Blocking them prevents signing in and checking out.
  • Browser storage: your cart and some interface preferences live in your own browser (localStorage). We cannot read them, and clearing your browsing data removes them.
  • The Site currently loads no Google Analytics or other third-party analytics, and no advertising trackers (such as the Meta pixel or Google Ads tags). If we ever enable them, we will update this page first and obtain any consent the law requires.

3.Processors and international transfers

We pass on only what is necessary for the service, and these processors act on our instructions. Some are outside Taiwan, so your data is transferred there:

ECPay

Purpose (location)
Online payment, convenience-store and courier logistics (Taiwan)
Data involved
Payment details, recipient name and phone, store or delivery address

Amazon Web Services (SES)

Purpose (location)
Sending order, shipping and support email (Tokyo, Japan)
Data involved
Recipient email, message content and delivery results

Akamai (Linode)

Purpose (location)
Hosting, database and uploaded-file storage (Tokyo, Japan)
Data involved
All data the Site stores

Cloudflare

Purpose (location)
DNS, network protection and CDN (United States)
Data involved
Connection data (IP, request contents in transit)

Google

Purpose (location)
Sign-in with Google (United States)
Data involved
The email, name and avatar Google provides at sign-in

OpenAI

Purpose (location)
Translating product and article text into English from the back office (United States)
Data involved
Only product and article text — no customer personal data

We do not sell personal data and do not hand it to third parties for their own marketing. We disclose it only to the extent required by a court order, a lawful request from the authorities, or other legal obligation.

4.How long we keep data

Account and address book

Retention
Until you ask us to delete it

Order, payment, invoice and return records

Retention
As accounting and tax law require: vouchers at least 5 years, ledgers and statements at least 10 years. After you delete your account these records remain, but are no longer linked to it

Email delivery and open records

Retention
As a rule, no longer than 2 years

Newsletter subscription

Retention
After you unsubscribe we keep the address with its opt-out state so your choice keeps being honoured and nothing is sent to it; email us to have the record itself deleted too

Server access logs

Retention
About 14 days, per the server log rotation

Verification and password-reset links

Retention
Only while valid; they expire and are removed afterwards

Data past its retention period, or whose purpose has ended, is deleted or de-identified. We review and clear out what is no longer needed.

5.Your rights

Under Article 3 of the PDPA, you may:

  • ask what personal data we hold and to review it;
  • ask for a copy;
  • ask us to complete or correct it;
  • ask us to stop collecting, processing or using it;
  • ask us to delete it.

How: sign in and edit your name, phone and addresses under Account. For anything else, email contact@jink.live. To confirm it is you, we may ask you to write from your registered address or quote an order number.

As Article 13 of the PDPA requires, we answer access and copy requests within 15 days, and correction, restriction and deletion requests within 30 days. Each may be extended once, with reasons given to you.

Marketing opt-out: every newsletter has an unsubscribe link in its footer that takes effect immediately, with no sign-in needed; you can also email contact@jink.live and we will do it. Transactional notices (orders, payment, shipping, returns) still reach you after you unsubscribe.

Transaction and invoice records we must keep by law cannot be deleted within their retention period; we will say so and restrict them to that legal purpose only.

6.How we protect data

  • HTTPS across the whole site.
  • Passwords are stored only as bcrypt hashes — we cannot see yours; verification and reset links expire.
  • Card details never pass through the Site; ECPay handles them in its own environment.
  • The back office has a separate login and role-based permissions, and actions are logged.
  • Sign-in, registration and email endpoints are rate-limited against credential stuffing and abuse.

If a breach occurs that could affect you, Article 12 of the PDPA requires us to notify you appropriately once the facts are clear, and to explain what we have done about it.

7.Minors

If you are under 18, please register or order only after your legal guardian has read this policy and agreed to it.

8.Updates to this policy

When this policy changes we update the effective date on this page. Significant changes to purposes, processors or your rights are announced on the Site or sent by email.

9.Contact us

For privacy questions and requests, email contact@jink.live or write to 盡可能有限公司, 13F.-4, No. 189, Sec. 2, Keelung Rd., Xinyi Dist., Taipei City, Taiwan.

盡可能有限公司 (tax ID 60469290) · 13F.-4, No. 189, Sec. 2, Keelung Rd., Xinyi Dist., Taipei City, Taiwan · contact@jink.live