Privacy Policy
HUIDUN ("the Platform", "we") respects your privacy. This policy explains how we collect, process, use and protect your personal data when you use services provided through the Platform — including brand membership services (brand join links, the member card page, LINE login), HUIDUN Alliance member interoperability, and this website. By using the Platform you confirm you have read and agree to this policy.
1. Data controller and scope
The Platform is operated by HUIDUN (a SUHUL Group company). Each brand or merchant that joins the Platform (a "Brand") shares responsibility with us for the data collected for its own membership service; the Brand's own membership terms apply alongside this policy.
2. Data we collect
| Category | Details and source |
|---|---|
| Account identifiers | Your LINE user ID and display name obtained via LINE login, and the email address you authorise LINE to share (if any). |
| Contact and verification | The mobile number you provide during phone verification. We store a hash for matching and display only the last three digits so staff can confirm your identity. |
| Membership profile | Nationality, birthday (optional), tier, points balance, member ID. |
| Transactions | Stays, purchases, points movements and voucher usage at Brand locations; transaction data reported by merchants' POS systems. |
| Technical data | Device and browser information, IP address, cookies (see section 7), usage and error logs. |
3. Purposes and legal bases
- Providing membership services: creating and identifying your membership, accruing and redeeming points, calculating tiers, delivering vouchers and benefits (performance of contract).
- On-site service and support: allowing Brand staff to verify your identity and handle enquiries or complaints (contract, legitimate interest).
- Marketing: sending offers and event news only to the extent you have opted in; you can switch this off any time on your member page (consent).
- Security and fraud prevention: detecting abnormal logins, fraud or points abuse and keeping the system stable (legitimate interest, legal obligation).
- Compliance: retaining and disclosing data where required by regulators or law (legal obligation).
4. HUIDUN Alliance (cross-brand data sharing)
When you explicitly choose to join the HUIDUN Alliance (or your Brand provides membership under an alliance model and informs you at sign-up), your basic membership data (name, member ID, tier, points balance) and your transaction history at Alliance merchants become visible to other Alliance merchants for identity verification, points calculation and cross-merchant offers. Alliance merchants may use this data only for those purposes and may not repurpose it or pass it to third parties outside the Alliance. Members who have not joined the Alliance have their data used only by their own Brand. You may leave the Alliance at any time via customer service; your data is then removed from Alliance visibility.
5. Who we share data with
- Brands: the operator of the brand you joined, as necessary to deliver that membership service.
- Alliance merchants: only if you have joined the HUIDUN Alliance, within the scope of section 4.
- Service providers: processors that help us run the Platform, including cloud infrastructure (Cloudflare), LINE login and messaging (LINE Corporation), SMS verification providers and email delivery services. They may process data only on our instructions.
- Legal requirements: where required by court order, regulators or applicable law.
We do not sell your personal data.
6. Retention
Membership data is kept while your membership is active. After termination we delete or de-identify data within a reasonable period, except where retention is legally required (for example transaction and accounting records are kept for 5–7 years under tax rules). You may request deletion at any time (section 8).
7. Cookies and similar technologies
- Essential: a session cookie that keeps you logged in; a cookie recording your language choice on this website (
hd_lang). - Analytics: Platform application pages use Google Analytics for anonymous, aggregated usage statistics to improve the service; it is not used to identify individuals.
You can manage or disable cookies in your browser; disabling essential cookies will affect login and service use.
8. Your rights
Under Taiwan's Personal Data Protection Act you may: request access to or a copy of your data; request correction or supplementation; request that we stop collecting, processing or using it; and request deletion. Submit requests through your Brand's official channels or our contact page; we will respond within the statutory period. Marketing notifications can be switched off directly on your member page without a request.
9. Security
We apply reasonable technical and organisational measures, including encryption in transit (HTTPS), hashed storage of sensitive data, role-based access control, tenant data isolation and audit logging. No transmission over the internet is completely secure; in the event of a personal data breach we will notify affected individuals and authorities as required by law.
10. Minors
The Platform is intended for adults. If you are under the legal age, please use the service only with the consent of a legal guardian.
11. Changes to this policy
We may revise this policy for legal or service reasons. Revisions are published on this page with an updated effective date, and material changes are communicated by reasonable means. Continued use after a change constitutes acceptance.
12. Contact
For questions about this policy or your personal data, please reach us via the Contact page. This policy is governed by the laws of the Republic of China (Taiwan). In case of discrepancy, the Traditional Chinese version prevails.