Privacy Notice

Information We May Collect

When you place an order, ask about products, join LINE, or contact customer service, you may provide your name, phone number, email, shipping information, invoice information, order details, and payment or delivery status.

When you join as a member, you provide an email address and a password (the password is processed in encrypted form; the site does not store it in plain text). If you sign in with Google, we receive your email address and account display name from Google, never your Google password. Your name, phone number and default shipping details are saved only if you choose to fill them in at the member center. The member center also records which offers you have claimed and whether they have been used.

The website may also use analytics tools such as GA4 to collect page views, device type, referral source and interaction records, so we can see how pages are viewed and used and adjust them. If you arrive from a Google ad, the ad click ID that Google adds to the URL is recorded as well, to count orders that came from ads. When an order is placed, the purchase amount and items are reported to GA4 together with the identifier of that visit. Only if you turn on "Source measurement" are hashed values of your email and mobile number sent to Meta and Google together with the order amount and item codes, to count purchases that came from ads. Names, addresses, and unhashed email addresses or phone numbers are never sent.

To understand visits and purchases that come from Facebook and Instagram ads, the site's public pages use an invisible pixel image to report page views, product views, add to cart, checkout start and completed orders to Meta. The report contains the page URL (without the query string), item codes, quantity, amount and currency; a completed order also includes the order number, used only to avoid counting it twice. If you arrive from a Meta ad, the click ID that Meta adds to the URL is kept in that browser tab until you close it. Only after you turn on "Source measurement" is the _fbp cookie written (for up to 90 days), and only then are hashed values of your email and mobile number sent to Meta and Google with the order amount and item codes when you complete an order. Without your consent this cookie is not written and no hashed email or phone number is sent. Names, addresses, and unhashed email addresses or phone numbers are never sent. You can withdraw by unticking the setting and deleting _fbp. Member, account and admin pages do not report.

In the built-in browsers of apps such as Facebook, Instagram and LINE, the checkout and sign-in page URLs carry your cart contents (items, options, quantities and prices) after the "#" sign, so your cart is still there if you reopen the page in your phone's browser. If you have turned on "Source measurement", the same "#" section also carries the ad click ID, the verified ad source and the Google Analytics identifier. This part stays in your browser and is not sent to our server. It contains no custom embroidery text, and no name, address, or unhashed email or phone number.

The checkout page also records checkout steps anonymously, such as the items, quantities and amounts in the cart, the delivery method chosen, which field needed correcting, the error code the system returned, device type and time spent, only to find and fix checkout problems. The record links one checkout through a random number kept in that browser tab. It does not contain the name, phone number, email, address or invoice details you enter, and it uses no cookies. It records only whether you are signed in, not which member you are, is not linked to orders or Google Analytics, and is deleted after 180 days. If you turn off "Source measurement" in that tab, checkout steps are not recorded either.

How The Information Is Used

Retention and Service Providers

Information is retained only within the scope needed for business purposes. Order, tax, logistics, payment, and customer service records may be kept when required by law or operations. Information outside the needed scope will be organized or deleted over time.

When necessary, information may be provided to payment, logistics, invoice, website maintenance, or customer service providers so they can complete the service you requested. We do not sell personal information.

Birthday and Referral Offers: What Information Is Needed?

When the birthday gift is available, you may choose to give your own birth month. You do not need to enter the year, the day, or any information about your child. The month is used only to check eligibility for the birthday gift and to issue the coupon, and you can remove it from the member center at any time. Leaving it blank or removing it does not affect regular shopping; coupon and transaction records already created are kept to check offers against orders.

When a referral program is available, a referral is recorded on an account only after the friend signs in and confirms it. We check first purchase, payment, delivery and return or refund status as the basis for the thank-you gift. A referrer sees only their own referral count and gift status, never the friend's name, items or order amount.

Offer and New Product Emails: How to Receive and Stop Them

• Sender: HiBOU 喜福生活苑 (see the Chinese privacy page for the full company name).
• What and how often: offers, new arrivals and product-use tips, sent irregularly and usually no more than 4 emails a month.
• Which of your data: only the email address you gave when joining.
• How long: until you unsubscribe; if you ask us to delete your member data, it is deleted as well. To show that you consented or unsubscribed, we keep the time of consent or cancellation and the version of the text shown at that time.
• Email service: emails are sent by an email service provider on our behalf, and we do not sell your email address. Before sending starts, we will name the service and its location here.
• How to stop: every email has an "Unsubscribe" link at the bottom; one click stops it, no sign-in needed. You can also turn it off in the member center, or tell us by email (service@hibou.tw) or LINE (@816qeamr). Unsubscribing is free.
• After you stop: no more offer or new product emails. Order, payment, shipping, verification, password reset and customer service emails are still sent, because they are not marketing.

Tell Us Where You Found HiBOU

When "Source measurement" is available, the home page, the outing pairings page, the wind cover product page and the checkout page offer a setting that is not pre-ticked. Its text reads: "Help HiBOU measure which ad or source this purchase started from, to improve the website and ads." It is your choice, and it does not affect shopping or member offers.

Once it is on, we record the source of this visit, the ad click ID, the Google Analytics identifier, and a Meta browser identifier (the _fbp cookie, for up to 90 days). When you complete an order, the order amount and item codes are sent to Meta and Google together with hashed values of your email and mobile number, to count purchases that came from ads. Names, addresses, and unhashed email addresses or phone numbers are never sent. The source record in the tab is kept for up to 24 hours, and visits before your consent are not recorded retroactively. Because a browser identifier can link visits, this data is not fully anonymous.

You can untick the setting to stop further source measurement in that tab and delete the _fbp cookie. If the checkout page already holds an order, the site also withdraws that order's hashed contact details and identifiers that have not yet been sent; if this fails, a retry reminder is shown. This does not cancel the order, and it does not delete necessary transaction records or analytics events already sent. If you need help with data already stored, please contact us using the details below.

Ad Measurement and Your Choices

OpenAI ad measurement is off by default. When it becomes available, the site asks for your choice first. Only after you allow it are the necessary events sent: product views, add to cart, checkout start, successful contact form submissions and paid orders, to understand interactions and purchases that came from ads. Events may include amount, currency, an event ID and an ad source ID, and cookies and browser storage are used to remember your consent and the source.

This integration does not actively provide your name, email, phone number or form contents, and it is enabled only after automatic advanced matching is confirmed to be off. The network connection itself still lets the service provider receive connection information such as your IP address.

Ad measurement consent lasts up to 90 days; after that it stays off until you choose again. You can withdraw at any time by pressing "Not now / Turn off" in the page's "Ad measurement settings". Declining or withdrawing does not affect browsing or shopping. After withdrawal, later ad interaction and purchase events stop, though the measurement service may still send technical diagnostics such as the consent status. Data already sent is not deleted automatically by this action; if you have a data request, please contact us using the details below.

Your Data Rights and Contact

If you want to inquire about, correct, stop use of, or delete personal information, please contact HiBOU by email or LINE. We will first confirm your identity and the relevant data scope, then assist according to the actual situation. You can also stop offer and new product emails at any time, as described above.

Translated from the Chinese privacy page last updated on October 31, 2026, which is the official version. It is organized according to the disclosure spirit of Taiwan's Personal Data Protection Act and is not legal advice.