1. Scope
This Privacy Policy applies to all official services operated by Universe Bella, including but not limited to:
- The official website universebella.com and all of its sub-pages (Blog, Wishing Tree, Cosmic Guide, Energy Music, Shop, and so on)
- Membership subscription services to be launched in the future
- Customer service communications conducted through our official email [email protected]
This policy does not apply to third-party websites linked from this site (such as YouTube, Google Forms, PayPal, etc.); those websites have their own privacy policies.
2. What Personal Data We Collect
2.1 Data You Provide Directly
- Email address: when you subscribe to our newsletter through Google Forms, leave a wish on the Wishing Tree, or contact customer service
- Name or nickname: when you voluntarily fill it in on a form
- Payment information (future membership services): when you subscribe as a member, payment information (credit card number, PayPal account) will be processed directly by payment providers such as PayPal. This site does not store your full credit card information.
- Communication content: the messages you exchange with us by email
2.2 Data Collected Automatically
- Browsing records: the pages you view, time spent, and referring website (via Google Analytics 4)
- Device information: browser type, operating system, screen resolution, and language settings
- Network information: IP address (used for statistical analysis, not for personal identification) and geographic location (at the country/city level)
- Cookies and similar technologies: see Section 5 for details
3. Purpose and Use
We collect your personal data for the following purposes:
- Providing services: sending the newsletter, processing Wishing Tree wishes, responding to customer service inquiries, and providing membership services
- Improving your experience: analyzing browsing behavior to optimize the website's content, features, and design
- Content personalization: recommending relevant articles, music, or practices based on your interactions
- Payment processing: when you subscribe as a member, passing your payment information to payment providers such as PayPal for processing
- Legal compliance: fulfilling our obligations under applicable laws and regulations, including Taiwan's Personal Data Protection Act, Malaysia's PDPA, Hong Kong's PDPO, Singapore's PDPA, and the EU's GDPR
What we will not do: sell your personal data to third-party advertisers, use it for marketing unrelated to our brand services, or send commercial advertising without your consent.
4. Third-Party Services and Sharing
To operate and provide our services, we use the following third-party tools. These tools independently collect certain data and process it in accordance with their own respective privacy policies:
4.1 Analytics and Tracking
- Google Analytics 4 (GA4): analyzes website traffic and user behavior. See the Google Privacy Policy
- Cloudflare Zaraz: loads the above third-party analytics tags (such as GA4) at Cloudflare's edge nodes to reduce the performance burden on your browser
4.2 Forms and Subscriptions
- Google Forms: used for newsletter subscriptions and the Wishing Tree wish form. Data is stored on Google's cloud and protected by the Google Privacy Policy
4.3 Audio and Video Content
- YouTube embeds: YouTube videos embedded in the Blog and other pages allow Google to collect cookies and viewing data. Please refer to the Google Privacy Policy
4.4 Website Infrastructure
- Hostinger: our web hosting provider, with servers located in Europe
- Cloudflare: content delivery network (CDN) and security protection, with edge nodes worldwide
4.5 Payment and Membership (Future Services)
- PayPal: processes subscription payments. Payment information is collected and processed directly by PayPal
- Firebase (Google): future member authentication and data storage
Except as described above, we will not share your personal data with any other third party, unless:
- We have obtained your explicit consent in advance
- It is required by law, a court order, or a government authority
- It is necessary to protect the rights, property, and safety of Universe Bella, other users, or the public
6. Cross-Border Transfers
Because the third-party services we use (Google, Cloudflare, Hostinger, PayPal, etc.) are distributed worldwide, your personal data may be transferred to servers outside Taiwan, including but not limited to:
- The United States (the primary data centers of Google, Cloudflare, PayPal, and Firebase)
- Europe (where Hostinger's servers are located)
- Singapore (Asia-Pacific regional server nodes)
We choose service providers that meet international information security standards (for example, those certified under ISO 27001 or that have signed EU Standard Contractual Clauses) to ensure your data is appropriately protected during cross-border transfers.
7. Data Retention
- Newsletter subscription data: retained until you unsubscribe; deleted within 90 days after you unsubscribe
- Member account data: retained while your membership remains valid; deleted within 6 months after the membership is closed (except where retention is required by law)
- Payment records: retained for at least 5 years as required by tax law
- Customer service correspondence: retained for 2 years to support follow-up service
- Analytics data (GA4): retained for 14 months in accordance with Google's policy
8. Your Rights
Under Article 3 of Taiwan's Personal Data Protection Act and the relevant provisions of the PDPA / GDPR in various jurisdictions, you have the following rights with respect to your own personal data:
- Right of access: you may inquire which of your personal data we have collected
- Right to a copy: you may request a copy of your personal data
- Right to rectification: you may request the correction of inaccurate or incomplete data
- Right to restrict processing: you may request that we stop collecting, processing, or using your data
- Right to erasure (right to be forgotten): you may request that we delete your personal data
- Right to object to marketing: you may unsubscribe from the newsletter at any time, or request that we stop marketing communications
- Right to complain: if you believe our handling of your data is in breach of the rules, you may file a complaint with the competent authority
To exercise the rights above, please contact us at [email protected]. We will respond within 30 days of receiving your request.
9. Information Security Measures
We take reasonable technical and organizational measures to protect your personal data:
- Sitewide HTTPS/SSL encrypted transmission
- DDoS protection and a WAF firewall provided through Cloudflare
- Payment information is not stored on this site; it is processed by PCI-DSS compliant payment providers
- Member passwords are protected with one-way hash encryption (future membership system)
- Regular backups and vulnerability scanning
- Strict limits on internal access permissions
Despite our best efforts to protect your data, no transmission over the Internet can be guaranteed to be 100% secure. If you become aware of any security concerns, please contact us immediately.
10. Minors
This site does not actively collect personal data from children under the age of 14. If you are under 14, please use this site's services only with the consent of a parent or legal guardian. If we discover that we have inadvertently collected personal data from a child under 14, we will delete it as soon as possible.
11. Policy Revisions
We may revise this Privacy Policy from time to time. In the event of a significant revision, we will:
- Post a notice in a prominent location on the website's home page and on this page
- Notify users who have subscribed to the newsletter or registered as members by email
- Indicate the new "Last updated" date at the top of this page
Your continued use of this site's services constitutes your agreement to the revised policy.
12. Contact Us
If you have any questions, suggestions, or requests to exercise your rights regarding this Privacy Policy, please contact us by:
- Email: [email protected]
- Website: universebella.com
- YouTube: @Universe_Bella
We will respond within 7 business days of receiving your inquiry.