Privacy Policy and Personal Data Protection

Date of Issuance: 08/03/2020

Date of Effectivity: 08/03/2020

Lush Era Limited (hereinafter referred to as "Lush Era") develops and operates a medical collaboration network platform, the Dr.HereOnline Platform (hereinafter referred to as "DHO") (Lush Era and DHO are collectively referred to as "We"). In consideration of your (hereinafter referred to as the "User") privacy and in compliance with relevant regulations under the Personal Data Protection Law, we are obligated to outline how Lush Era processes and safeguards your personal data provided to Lush Era through the use of the Website, DHO, and related applications and services, as set forth in this Privacy Policy and Personal Data Protection. Your use of our website, platform apps, and services constitutes your acceptance of the terms of this policy. This policy also forms an integral part of the Terms of Use for the Lush Era Website.

1. Consent to the Collection and Use of Personal Data

1) Purpose of Collection

The objective of collecting your personal data is to offer you services through our apps, DHO, and other medical/healthcare/nursing services (if any), wherein we are required to collect, process (including, but not limited to: recording, inputting, storing, editing, amending, copying, retrieving, deleting, exporting, linking, or internally transferring) or utilize your medical records and associated data in accordance with relevant provisions established under the Personal Data Protection Law.

2) Scope of Personal Data

1. (1) Member Account: Upon registration and login, you authorize experts or medical institutions to search or access data imported by a medical institution, comprising member information you supplied, such as: your name, gender, e-mail, phone number, country/region, and other optional personal identification information (including, but not limited to, Date of Birth, Identification Card No., Passport No., Mailing Address, Language, Education, Occupation, and other contact methods).
2. (2) Personal Health Information: You may voluntarily provide and store personal health information, including, but not limited to: gender, date of birth, blood type, marital status, childbirth, smoking habits, alcohol consumption, betel nut chewing habits, coffee drinking habits, daily working hours, daily sleeping hours, personal medical history, medication history, history of using healthcare products, and family medical history.
3. (3) Information retained in the Intelligent Clinics, which maintain ongoing collaborations with DHO, encompasses (but is not limited to) the aforementioned basic healthcare information, examination data, and examination results.
4. (4) The health indices and data that you have entered manually, synchronized through health monitoring devices, or supplied by an authorized third party. All of the above may include examination information and other related data in the records that you elected to upload for online consultation.

3) Methods of Collecting Personal Data

In addition to the information you provide directly, we may also collect your personal data through other means, as follows:

1. (1) Traffic Data: We automatically collect information that users provide on the website, which includes, but is not limited to: (a) IP address; (b) domain; (c) type of web browser; (d) operating system.
2. (2) Cookies: Cookies are a technology employed by website servers to communicate with client-end browsers. They may store random strings on the member's mobile phone/computer, which the user's browser provides to the website each time the user accesses it. Cookies serve to identify a user as a unique visitor to the website and store passwords, sparing users the effort and time of re-entering passwords during login. Furthermore, we may use Cookies and other means to save and retrieve data from your web browser. If you deem retaining Cookies on your mobile phone/computer unnecessary, you may configure your browser to "reject Cookies" prior to visiting the website. However, please note that if Cookies are disallowed, you may be unable to utilize certain services and specific features on your mobile phone/computer.
3. (3) Handheld Device Data: When you download, upload, install, and use DHO on a handheld device or other wireless communication devices, we automatically collect your information, which includes, but is not limited to, mobile phone service providers, device model numbers, operating systems, browser types, and geographic locations. Positioning services can be enabled or disabled via mobile devices at any time.

4) Duration, Scope, and Recipients of Personal Data Use

1. (1) Duration of Use: Usage continues until either the purpose for collection no longer exists, or the retention period mandated by applicable laws and regulations or contract terms is reached.
2. (2) Scope of Use: This encompasses, but is not limited to, Taiwan, Vietnam, the British Virgin Islands, and locations where all users and partner companies reside.
3. (3) Recipients of Use: Lush Era Limited and its affiliates, DHO, 實用科技(股)公司, medical experts whom you have approved and authorized, Smart Clinics and their members, information systems companies authorized by Smart Clinics for member data transfer, and other third-party institutions to which we delegate responsibilities, as well as legally competent authorities or financial supervisory authorities delegated by us.

5) Use of Personal Data

The utilization of personal data, whether through automated means or otherwise, includes but is not limited to written or electronic forms and potential international transfer scenarios.

1. (1) Service Provision: Based on your provided personal health data, dietary preferences, exercise habits, and other information, we offer you our customized app service of Smart Clinics, online consultation service by medical experts, real-time care service, broadcasting service, Ms. Caring, medical/care/health management service (if any), referral service, reminder & tracking service, and other user experiences, as well as push related service messages.
2. (2) Messaging Notifications: We will inform you of the latest app/product releases, system updates, and upcoming activities. If you participate in raffles or similar promotional events, we may also use the information you provided for engagement in related activities.
3. (3) Usage Analysis: We may periodically collect or publish information in an anonymous or aggregated form for industry analysis, research, traffic statistics, and so on. We may also share this information with third parties for marketing purposes; however, we will not disclose your identity through the information.

6) Scope of Personal Data Use

1. (1) Service Consultation: You can select the medical expert consultation service relevant to you via DHO and authorize your chosen medical expert to review your basic health reports and data in the examination report. You can also choose to add related feedback regarding the consultation service, upload health index lists, examination reports, or analytical results of your health condition. You may revoke the authorization granted to an expert to access your data at any time.
2. (2) Business Information: If you are a healthcare provider or healthcare provider organization, you may establish profile information about your healthcare services and consultations.
3. (3) Operational Data: To enhance the DHO platform user experience, Lush Era may employ cookies, server logs, and other similar mechanisms to enable specific functionality, improve services, and monitor service usage.

7) User Rights

You have the right to inquire or request a preview of your personal data in accordance with the "Personal Data Protection Law." You can request copies, updates, corrections, cessation of collection, processing, and use of data, as well as request deletion.

8) Links to Other Websites

The DHO website and apps contain links to third-party websites and apps. We neither own nor control these third-party websites and apps. We are not liable for or bear any responsibility for any actions that occur on these third-party websites and apps, and this Privacy Policy & Personal Data Protection Regulation does not apply to any of them. You should familiarize yourself with the privacy policies and personal data protection regulations of these third-party websites before visiting or providing personal data to them and take measures to protect your privacy and personal data.

2. Use of Information

You can decide at your discretion whether to share your personal health information with any third party. We are not responsible for personal data and privacy protection.

Payment Information: If you are a member, our secure third-party payment providers will have access to your payment method and billing address details when using DHO and making online payments. These third-party payment providers are bound by contractual obligations regarding security and confidentiality. We do not store your credit card details or any other online payment methods you may choose to use.

Contact Information: We will send you communications (email, mobile phone SMS, and other notifications) based on your notification settings, as part of the essential functioning of services that you may find useful. At the time of registration, you will be required to verify your email address or mobile phone number. Your contact information may also be used for customer support services, should you choose to receive them. Additionally, we may use your contact information to provide you with information about our products and services. If you decide at any time that you no longer wish to receive such information or communications from us, please follow the instructions provided to unsubscribe from any of our communication methods. Your contact information is not shared with any third-party service.

You are responsible for the confidentiality of your password and account information, and only you are allowed to use it without exception. You assume sole responsibility for all activities that occur in your account, and you agree to notify us immediately of any unauthorized use of your account by a third party. We are in no way responsible for any loss that you may incur as a result of any third party's unauthorized use of your user account and password.

3. Disclosure of Information

We may disclose any information to government or law enforcement officials if we believe doing so is required to comply with law enforcement and legal processes, to prevent or stop any illegal, unethical, or legally actionable activity, or to protect your, our, or others' rights and safety.

If Lush Era becomes involved in a merger, acquisition, or any form of sale of some or all of its assets, personal information will be transferred to the new entity for the continued performance of service.

We may disclose your personal information upon your request accompanied by your permission.

4. Transmission and Storage Security

All personal data is stored only on our servers on the highly secure Cloud Web Service platform. We take all necessary measures to provide secure transmission of your personal information before it is transferred across the Internet from your personal devices to our servers and to secure such personal information stored in our systems. However, you should be aware of the possible risks involved in transmitting information over the Internet, as no data transmission can be guaranteed 100% security and free of risk from others that could find a way to thwart our security systems. As a result, while we strive to protect your personal information, we cannot ensure or warrant the security and privacy of personal information you transmit to us, and you do so at your own risk.

5. Links to Other Websites

Our website may contain links to other websites. The fact that we link to a website is not an endorsement, authorization, or representation of our affiliation with that third party. We do not exercise control over third-party websites. These other websites may place their own cookies or other files on your computer, collect data, or solicit personally identifiable information from you. Other sites follow different rules regarding the use or disclosure of the personally identifiable information you submit to them. We encourage you to read the personal data protection and privacy policies or statements of the other websites you visit.

6. Changes to this Policy

This Privacy Policy and Personal Data Protection Regulation may change from time to time with additions or updates to our provided application services. We will not reduce any of your rights granted by this Policy without obtaining your explicit approval. In the event of any changes to our Privacy Policy, the updated version will be posted on the Dr.HereOnline website and will take effect from the moment of posting. In the case of significant changes to this Policy, we will provide clear notice, for example, any policy change for some services can be found on Ms. Caring Push.

7. Contact Us

If you have any questions or concerns about this Privacy Policy and Personal Data Protection Regulation, please email us at service@dochereonline.com.