1. Commitment to Privacy Protection   The Company is committed to complying with the provisions of the Personal Data (Privacy) Ordinance and, where possible, adhering to internationally recognized standards of personal data protection. To fulfill this commitment, we ensure that our staff strictly follow security and confidentiality protocols.

2. Definition of “Personal Data”   In this policy, the term “personal data” carries the meaning as defined under the Ordinance.

Company Policy

3. The Company ensures that all personal data collected, stored, transmitted, and/or used is handled in accordance with the responsibilities and requirements set out in the Ordinance. If an individual legally requests access to and/or correction of their personal data held by the Company, we will provide and/or correct such data within the time and manner prescribed by the Ordinance.

Collection of Personal Data

4. The Company may request customers to provide the following personal data (including updates from time to time) for the purpose of marketing, providing, registering, and managing products and services. Failure to provide such data may result in the inability to fulfill customer service requests.

5. Customers who are not registered YM members of the Company may browse the Company’s website as general visitors but may not be able to access all services and features available to registered members, including online ordering. To become a registered YM member, customers must provide personal data to access services such as receiving updates via email, responding to inquiries or feedback, and participating in Company events.

6. Non-YM members may purchase products from the Company. The Company will collect only the necessary personal data to fulfill the order (e.g., name, contact information, and payment/credit card details), but such customers will not be eligible for discounts/services/promotions.

7. References to “personal data” in this document include (but are not limited to):  
(a) Name, birth month and date, gender  
(b) Address, mailing address, phone number, fax number, email address, and identifiers for communication and social apps/software  
(c) Geographic location, website browsing behavior, and purchasing behavior  
(d) Payment details, including credit card and bank information with cardholder name  
(e) Identity verification data, including ID type and number, and documents with photo and name  
(f) Health status and medical history

8. In certain cases, customers may be asked to provide additional data to help improve products and services and/or provide tailored information. Customers may choose not to provide such data, but if the services are customized or require specific data, failure to provide it may prevent the Company from delivering the services. Such data may include (but is not limited to):   (a) Marital status   (b) Salary level and employment information   (c) Education level and occupation   (d) Information on previously used products and services   (e) Family information

9. Calls made to or received from the Company’s order/service/hotline or inquiry lines may be recorded for purposes including order tracking, quality control, and staff performance evaluation, management, and development. Unless otherwise stated during the call, such recordings are not considered personal data under the Ordinance, and callers have no statutory, contractual, or tortious rights to such data. The Company will ensure that recordings are not accessed unintentionally or without authorization.

Use of Personal Data

10. Customer personal data may be used for:  
- Identity verification  
- Providing products and services (including delivery and appointment services)  
- Processing shopping cart transactions  
- Following up on service applications, event participation, and order fulfillment (including membership verification and security checks)  
- Marketing and promotion (including by the Company, affiliates, and partners)  
- Improving products and services  
- Responding to inquiries  
- Verifying, executing, and processing payments  
- Managing account operations and collecting outstanding payments (including using collection agencies)  
- Maintaining, managing, and improving the membership system   - Analyzing and verifying customer data  
- Analyzing trends, usage, and purchasing behavior (based on individual or aggregated data) to better understand customer needs and improve services  
- Legal disclosures as required or permitted  
- Other uses agreed upon between the customer and the Company, including those stated in membership applications, order forms, or service appointment forms