Data collector and contact
本草草本實驗室; business address: No. 229, Zhongpo South Road, Xinyi District, Taipei City.
Customer service hours: Monday–Friday 09:00–18:00 (Taiwan time). Please send data requests to service@recurrence-herb-lab.com.
Data we may collect
Membership and contact data: name, email address, phone number and login identification information.
Order and delivery data: recipient address, purchased items, payment status and shipping status.
Preferences and interaction data: favourites, shopping cart, language, delivery region and newsletter consent records.
Technical data: essential cookies, device and browser information, region inferred from IP address and security logs.
This website will not ask you to provide passwords, one-time verification codes or full credit card details through customer service messages.
Purposes of use
Data is used to provide membership features, process orders and delivery, respond to customer service inquiries, maintain website security, record marketing consent and send newsletters after obtaining consent. Where necessary, it is also used to meet accounting, tax, consumer protection and other legal obligations.
Service providers and cross-border processing
Supabase is used for membership, order and private customs-clearance data. Payments are processed by a Canadian Stripe account and its payment services. Necessary recipient and customs information is provided for SF Express deliveries. These providers process data only as needed to provide their functions. Data may be processed across borders in Taiwan, the destination and countries or regions where cloud providers operate. The website does not store full credit card numbers.
SF Express customs identity documents for China
Recurrence Herb Lab collects the recipient’s name and images of both sides of their identity document solely for SF Express shipping to China, customs clearance and necessary follow-up. Photos are stored in secure private cloud server storage and may be processed across borders; when necessary, they are provided only to SF Express and customs clearance authorities, never for marketing.
Data is retained for customs clearance, necessary business purposes and applicable statutory periods; once the purpose ends, use is stopped or data is deleted under applicable rules. You may request access, correction, cessation of use or deletion at service@recurrence-herb-lab.com.
If necessary customs information is withheld or withdrawn, delivery to China cannot be arranged (Hong Kong and Macau do not require identity document uploads).
Before uploading, verify your email and confirm the purpose and the recipient’s authorization. Identity documents are not stored in public image areas, transaction data or ordinary order emails; access and management in the admin area are logged.
Use may be stopped when no necessary processing purpose remains; after a data request is verified, photos are deleted within the applicable scope.
Cookies and local storage
We use essential cookies or browser storage to retain your login status, language, delivery region and shopping cart. Disabling them may prevent some membership or shopping features from working properly.
Analytics and your choices
When analytics is enabled and you allow it, we use Google Analytics to analyse public page visits, products and shopping interactions. Analytics data does not include names, email addresses, addresses, verification codes or customs identity documents.
You can allow or disable Google Analytics through “Privacy & Analytics Settings” on this page. Google Analytics will not be enabled unless you select the option, and leaving it unchecked will not affect login or shopping. Marketing email subscriptions and Google Analytics preferences are managed separately.
When daily activity aggregation is enabled on the website, it counts actions by UTC date, predefined event, and public page path, independently of Google Analytics preferences. The aggregate data table does not store visitor identifiers, IP addresses, browser information, member data, or session data, nor is it linked to order or recipient data. It does not represent unique visitor counts or individual browsing histories.
Aggregate reports can be queried for up to the most recent 90 UTC dates. This is the report query range and does not mean that older data is automatically deleted. Aggregate data beyond this range must undergo administrator review and cleanup.
The website is hosted on Railway. HTTP request logs may contain source IP addresses, browser information, request identifiers, request timestamps, and request paths. These hosting logs are separate from the daily aggregate data table and are not included in aggregate reports. The query period for hosting logs is not the same as the permanent deletion period.
Retention, security and your choices
Data is retained according to service needs, dispute resolution and statutory periods, with reasonable access controls and security measures. You may request access, correction, cessation of marketing or deletion where applicable. Some order records may need to be retained to meet legal requirements.
For related requests, contact us through service@recurrence-herb-lab.com. To protect accounts, we may verify the requester's identity before processing a request.