Privacy & Cookie Policy

 

Preface

Hong Ya International Enterprise Co., Ltd. ("the Company" or "Hong Ya Hamburger") places great importance on protecting your personal data and privacy. This Policy explains how the Company's official website (https://www.hongya88.com.tw/, "this Website") collects, processes, and uses your personal data, and sets out a detailed inventory of the cookies and related tracking technologies used on this Website, their purposes, and the choices available to you. If you have any questions about this Policy, please contact us via our customer service hotline 0800-068-118 (Taiwan) or through the contact channels on this Website.

1. Company and Website Information

2. Scope of This Policy

2.1. Before using the services of this Website, please read and confirm your agreement to this Policy in full. If you do not agree to all or part of this Policy, please do not continue to use the services of this Website.

2.2. This Policy applies only to this Website. It does not apply to any linked third-party websites, nor to any third parties not engaged or supervised by the Company.

2.3. This Policy may be revised from time to time in response to changes in law, requirements of the competent authority, or changes to our services. Any revised version will be posted on this page; please check back periodically for the latest version.

3. Purposes and Categories of Personal Data Collected

In the course of your use of the Website's services (such as franchise inquiries, event registration, membership/form submissions, customer service contact, and newsletter subscription), the Company may collect the following categories of personal data, limited to what is necessary for the specified purposes:

• Identification data: name, gender, date of birth
• Contact data: phone number, email address, mailing address
• Transaction and consumption data: order records, purchase records, franchise inquiry information
• Online behavioral data: IP address, browser type, access time, browsing and click records, cookie identifiers

4. Methods of Collection and Legal Basis

4.1. Direct collection: data you actively provide to the Company through website forms, event registrations, or customer service email.

4.2. Indirect collection: when you browse this Website, this Website and the third-party services listed in Section 6 automatically record connection and behavioral information, which the Company uses to improve website services and track advertising performance.

4.3. Before collecting your personal data, the Company will notify you of the purpose and use of the collection in a reasonable manner. Except as otherwise provided by law, collection is conditioned on obtaining your consent.

5. Scope and Duration of Use

Purposes of use

• Providing, processing, and maintaining the Website's services (including franchise inquiries, event registration, and customer service responses)
• Marketing communications and promotional notices (within the scope of your consent)
• Website traffic analysis, user behavior research, and service optimization
• Advertising performance tracking, remarketing, and ad-delivery optimization
• Use required by applicable law or requested by the competent authority

Duration of use

In principle, no longer than 5 years (for data subject to longer statutory retention requirements under other applicable laws — such as franchise contract documents or financial/accounting records — those requirements will apply instead), or until the purpose of collection has been fulfilled or you exercise your right to deletion, whichever occurs first. Cookie retention periods are set by each service provider's default policy, typically ranging from 30 days to 2 years; please refer to each provider's own privacy policy for details.

6. Overview of Cookies and Tracking Technologies

A cookie is a small text file that a website or application stores on your device through your browser as you browse, used to record your browsing preferences, identify your device, and support traffic analysis or advertising performance tracking. A cookie does not, by itself, typically identify your real-world identity. This Website and the third-party services it integrates with use cookies and similar tracking technologies (such as pixel tags and SDKs) as follows:

6.1 Services that set cookies in your browser

6.2 Services that do not set cookies but involve data sharing or outsourced processing

6.3 Cross-Border Transfer Disclosure

The service providers listed in Sections 6.1 and 6.2 operate servers located mostly outside Taiwan (including the United States, Japan, and Israel). Pursuant to Article 8 of Taiwan's Personal Data Protection Act, which requires that data subjects be informed of the "period, region, recipients, and manner of use" at the time personal data is collected, the Company hereby notifies you that your personal data may be transferred to and processed in the above countries or regions as a result of using these services, and that the personal data protection standards of those countries or regions may differ from those of Taiwan. Separately, under Article 21 of the same Act, Taiwan's competent authority may restrict international transfers of personal data by non-government entities in certain circumstances (e.g., major national interest, international treaties, inadequate protection in the receiving country, or transfers designed to circumvent the Act). The Company will monitor relevant guidance from the competent authority and will, to a reasonable extent, require its outsourced vendors to implement appropriate data protection measures.

7. Consent Mechanism and Cookie Settings Management

1. On your first visit, this Website will display a cookie consent banner covering four categories — "Strictly Necessary Cookies," "Analytics/Performance Cookies," "Advertising/Marketing Cookies," and "Functional Cookies" — and will explain the purpose of each.

2. Strictly necessary cookies are required for the basic operation of the Website (such as page navigation and security) and cannot be disabled. Analytics, advertising, and certain functional cookies (including Google Analytics 4, Microsoft Clarity, Meta Pixel, Google Ads, LINE Tag, Taboola Pixel, and YouTube embeds listed in Section 6.1) will only load and fire after you have actively given your consent.

3. This Website uses Google Tag Manager together with Google Consent Mode to control when the above tags fire: before you give consent, the relevant tags default to a "denied" state; once you click to accept, the system updates the state to "granted" in real time and records your selection and the time of consent.

4. You may reopen the consent banner and adjust your choices at any time via the "Cookie Settings" link in the footer of this Website.

5. You may also block or delete cookies through your browser settings, but doing so may cause some features of this Website (such as video playback, map lookup, or personalized advertising) to function improperly.

8. Joint Use and Outsourced Processing of Personal Data

Within the purposes described above, the Company may provide your personal data to the following parties:

• Franchise business partners with whom the Company has a business relationship (limited to franchise-inquiry-related data)
• Outsourced vendors providing website technical operations, cloud hosting, and digital advertising services (such as WENK MEDIA and Windsor.ai), each of which is subject to the same data protection obligations as the Company and may process data only on the Company's instructions
• The cookie and tracking technology providers listed in Section 6 (such as Google, Meta, Microsoft, LY Corporation, and Taboola)
• Judicial or administrative authorities as required by law

Except as described above or with your prior consent, the Company will not provide your personal data to any other third party, nor use it for any purpose beyond those set out in this Policy.

9. Security Measures for Personal Data

The Company maintains internal management rules, including a Personal Data Protection Regulation, and implements the following security measures:

1. Establishing a basic personal-data-protection policy, with clear responsibilities and a complaint-handling channel

2. Establishing standard operating procedures for each stage — collection, processing, use, and deletion

3. Establishing an organizational accountability structure and conducting regular employee training

4. Properly managing the physical areas and equipment where personal data is stored, to prevent unauthorized access

5. Implementing information-security safeguards (such as access controls, firewalls, and encrypted transmission) to prevent external intrusion and malware attacks

6. Continuously monitoring updates to personal data protection laws and adjusting management measures as needed

10. Your Rights and How to Exercise Them

10.1 Rights under the PDPA

With respect to personal data held by the Company, you may, under Article 3 of Taiwan's Personal Data Protection Act, request to inquire about or access your data, request a copy, request supplementation or correction, request cessation of collection, processing, or use, or request deletion. To exercise these rights, please contact us via our customer service hotline 0800-068-118 or through the contact channels on this Website. After verifying your identity, the Company will process your request within the timeframes set out in Article 13 of the PDPA: requests to inquire, access, or obtain a copy will be decided within 15 days (extendable by up to 15 additional days if necessary); requests for supplementation, correction, cessation of collection/processing/use, or deletion will be decided within 30 days (extendable by up to 30 additional days if necessary).

10.2 Opting out with third-party service providers

11. Protection of Minors' Personal Data

Certain activities or services on this Website may involve individuals under the age of 18 (for example, activities aimed at families with children). Where personal data of a minor is collected, the Company will obtain the consent of the minor's legal representative (parent or guardian) as required by law. If a parent discovers that their child has provided personal data to the Company without such consent, please contact us immediately via our customer service hotline, and the Company will promptly delete the data.

12. Revision and Effectiveness of This Policy

This Policy may be revised from time to time in response to changes in law, adjustments to Company policy, changes to tracking tools, or changes to our services. Any revised version will be posted on this Website and will take effect as of the date of posting, without separate individual notice. We recommend that you check this page periodically for the latest version.

Date of latest revision: July 27, 2026

13. Contact Us

If you have any questions about this Policy or about how your personal data is collected and used, or if you wish to exercise any of the rights described above, please contact us through the following channels:

• Customer service hotline: 886-4-2335-5555(Taiwan)
• Company name: Hong Ya International Enterprise Co., Ltd.
• Unified Business No.: 97220043
• Company address: 2F, No. 50, Lane 128, Xifu Rd., Wuri Dist., Taichung City, Taiwan
• Official website: https://www.hongya88.com.tw/