Article 6: Handling of personal data
1. The Company shall only use members' personal data for the following purposes.
(1) Membership administration
(
2) Selling or providing products, rights, digital content, services or financial products (hereafter referred to as "products and other services") offered by the Company or a third party(3) Conducting promotions, giveaways or questionnaires
(4) Simplifying membership registration and other processes in relation to the usage of member-only services on behalf of the Company, its parent company or any of its subsidiaries (hereafter referred to as "the Group")
(5) Notifying members of important matters in relation to the running of online services (including via email)
(6) Advertising, promoting or soliciting sales of products and other services offered by the Company or a third party (including via email)(7) Sending out email newsletters
(

Packaging and shipping products
(9) Billing and invoicing
(10) Providing services as part of point, coupon, mileage or other incentive schemes (hereafter referred to as "incentive scheme(s)")
(11) Publishing information posted by members
(12) Dealing with inquiries and providing after-sales services
(13) Conducting research and analysis on marketing data and developing new services
(14) Compiling statistics and other data for provision to partner companies specified by the Group or the Company (hereafter referred to as "partner companies")
2. The Group may also use information on members, including their member ID, name, gender, email address, telephone number, post/zip code, address, employer and department, nicknames, user name, date of birth, credit card details, purchase history, incentive scheme balance and incentive scheme usage history, in order to fulfill any of the above purposes.3. In accordance with its privacy policy, the Company shall adequately protect personal data and shall ensure that no personal data is provided to a third party in such a format that could enable the identification of individuals.
The Company shall nonetheless be entitled to provide personal data in any of the following circumstances.
(1) If the member has given their consent
(2) If the disclosure of data is required by law or as part of a criminal investigation or other legal proceedings or if a legitimate information request is received from a consumer center, bar association or other public institution
(3) If forwarding a member's order details to a partner company
(4) If disclosing data to a partner company in the event that a member has purchased or is attempting to purchase a product or other service from the relevant partner company
(5) If necessary in order to ship products or provide services
(6) If disclosing data to a financial or billing service provider
(7) If disclosing data to a partner company for the purpose of providing services as part of an incentive scheme run by the Company or the relevant partner company
(

If outsourcing all or part of the Company's operations to a third party
(9) If disclosing data to a party assuming control of business operations due to a merger, business transfer or other such arrangement
(10) If required in accordance with the Personal Information Protection Law or other applicable legislation
Sorry if I'm paranoid, but that sounds like anything to anyone whenever they want to.