Controller and contact
This Privacy Policy applies to LingYuanBuy's order-assistance service. For questions about processing, access, correction, deletion, or other rights, contact [email protected]. Please do not send unnecessary sensitive information.
Information we collect
We may collect your name, phone number, email address, LINE account or display name, product links, product names, specifications, quantities, images, notes, and delivery recipient, phone, address, or convenience-store pickup details. Service records may include order numbers, quotes, service fees, payment status, logistics events, and support history.
Sources of information
Information comes mainly from forms, uploads, support conversations, LINE login, or order links you provide. Hosting and security services may generate technical information such as IP address, device and browser details, timestamps, errors, and security-event records.
Purposes and legal bases
We use information to answer inquiries, review products and risks, prepare manual quotes, form and perform the service contract, process service-fee payments, assist with seller orders, support delivery and after-sales matters, recover orders, provide support, secure the service, prevent fraud, comply with law, and resolve disputes. Where GDPR applies, bases may include contract necessity, legal obligation, legitimate interests, or consent. Without required information, we may be unable to quote or complete the service.
Cookies, Local Storage, and Session Storage
The site may use necessary cookies or session mechanisms for login and security. Browser Local Storage may retain your language choice, saved order access links, or display preferences; it should not contain complete payment details or support secrets. You can clear this data in browser settings, but doing so may require you to choose a language again or recover an order with its secure link.
Recipients, providers, and international transfers
When necessary to provide the service, we may share information with Cloudflare and similar hosting, database, storage, and security providers; original sellers or carriers; and communication, email, login, or payment providers you choose. A payment provider applies only when a particular flow is enabled and clearly shown on its payment page; this policy does not state that NewebPay or ECPay is already active. Providers may process information across borders, with safeguards required by applicable law.
Retention and security
We retain information for service delivery, accounting, tax, dispute handling, legal obligations, and security needs. When it is no longer needed, we delete, anonymize, or restrict it. Orders and consent records may be retained under the retention schedule; secure links, sessions, and one-time verification data are handled for their purpose and validity period. We use access controls, least privilege, transport protection, hashing, and audit records, but no network transmission is absolutely secure.
Secure order links and access
/o/:token is a secure link for viewing a particular order. Do not share the link, token, or screenshots; contact support if you suspect disclosure. Access credentials are stored in hashed form, and viewing an order does not automatically place the token in public analytics or policy content.
Your rights and requests
Depending on applicable law, you may have rights to access, obtain a copy, correct, delete, restrict, object, port data, withdraw consent, or complain to a regulator. Contact support by email with the request and enough information to verify identity. Reasonable verification may be required to prevent disclosure to the wrong person.
Minors and automated decisions
A minor should use the service with help from a legal representative. We do not rely solely on automated decision-making for acceptance, quote, or payment decisions with legal or similarly significant effects; high-risk, restricted, or unclear requests receive human review.
Changes and incidents
If processing, providers, or legal requirements materially change, we will publish an updated version and date and obtain renewed consent where required. If a security incident may affect your rights, we will investigate, notify, remediate, and communicate as required by applicable law.
Effective date and contact
This version is effective 2026-07-21 and is identified as privacy-2026-07-21-v2. For a data-subject request, help clearing Local Storage, or questions about sharing, contact [email protected].