Privacy Policy

This policy applies to personal data you provide when using the AstroChi website (including subdomains), purchasing courses, and interacting with us. For third‑party services linked from the Platform (PayPal, YouTube, Facebook, Instagram, etc.), their respective privacy policies govern; we have no control over those services.

We collect personal data in the following situations:

(a) Registration: name, email, password (stored hashed).

(b) Purchase: last 5 digits of payer account for bank transfers, or payment information processed by PayPal (we never see or store your card number); invoice delivery information.

(c) Service usage: sign‑in records, IP address, device and browser information, course viewing progress and timestamps.

(d) Customer support: content you provide via email or social DM.

We collect personal data to: (a) provide and manage the course service; (b) process payment and issue invoices; (c) verify member identity; (d) improve service quality and diagnose technical issues; (e) send service notifications and, with your consent, marketing messages (you can unsubscribe at any time); (f) comply with legal obligations.

We retain personal data for the period necessary to fulfill collection purposes and as required by tax, consumer protection, and other applicable laws — at minimum 5 years for transaction records.

If you terminate your account, we will delete or anonymize personal data that is not within legally required retention periods within a reasonable timeframe.

We do not sell, rent, or trade your personal data. We share necessary data only in these situations:

(a) PayPal for international payment processing;

(b) Cloud service providers (hosting, email delivery) for platform infrastructure;

(c) Where required by law or competent authorities.

We use essential cookies to maintain sign‑in state, remember language preference, and provide core site functionality. We do not use third‑party advertising or tracking cookies.

You may disable cookies in your browser settings, but some features (sign‑in, locale memory) will not work properly.

Under Taiwan's Personal Data Protection Act, Article 3, you have the right to: query, request access, request a copy, request correction, request that we stop collecting/processing/using, and request deletion of personal data we hold about you.

To exercise these rights, please email us. We will respond within 30 days.

We protect your personal data with HTTPS encryption in transit, password hashing, and other reasonable safeguards. However, no internet transmission is 100% secure; you understand and accept reasonable risk.

If you are under 18, please obtain consent from your legal guardian before using the service. We do not knowingly collect personal data from minors; if we learn that a registrant is under 18 without guardian consent, we will delete their data.

We may revise this policy at any time. Revisions will be posted on the Platform; material changes will be communicated by email or in‑site notice.

For questions about this policy or to exercise your data rights, please reach us via our Facebook / Instagram direct message or email.