Privacy Policy

Last Updated: July 2, 2026

‍

GOGOLOOK Co., Ltd. (the "Company") values your privacy and the protection of your personal data. This Privacy Policy (this "Policy") explains how the Company collects, processes, uses, and protects your personal data when you browse or use the Company's official website (the "Website") or contact the Company through the Website.

‍

This Policy primarily applies to personal data that can identify a natural person. If a corporation, organization, or other entity contacts the Company through the Website, information about that entity itself generally does not constitute personal data; however, where such information includes a contact person's name, title, email address, telephone number, or other data that can directly or indirectly identify a specific natural person, such data will still be handled in accordance with this Policy and applicable personal data protection laws.

‍

Please read this Policy carefully before using the Website. If you do not agree with the contents of this Policy, please stop using the Website or avoid providing personal data through the Website.

‍

This Policy applies only to the Company's official website and does not apply to the Company's other products, apps, services, event websites, partner project websites, or third-party websites. If such services have their own privacy policy or personal data notice, those shall govern.

‍

1. Data Collector

The collector of personal data on this Website is:

‍

GOGOLOOK Co., Ltd.

‍

Contact Email: LD@gogolook.com

‍

Contact Address: 6F, No. 319, Sec. 2, Dunhua S. Rd., Da'an Dist., Taipei City, Taiwan

‍

If you have any questions about this Policy, personal data protection matters, or the exercise of your personal data rights, you may contact the Company using the contact information above.

‍

2. Personal Data the Website May Collect

The Company may collect the following data, to the extent necessary, depending on your interactions with the Website:

‍

(1) Data you provide voluntarily: When you contact the Company through the Website's contact form, inquiry form, business cooperation inquiries, media contact, investor relations contact, complaints and reports, or other interactive features, the Company may collect your name, company name, job title, email address, phone number, country or region, the content of your inquiry, and other information you voluntarily provide.

‍

(2) Website browsing and technical data: When you browse or use the Website, the Company or its service providers may automatically collect your IP address, device information, browser type, operating system, language settings, access time, pages viewed, referring website, click records, cookie identifiers, and other website usage records.

‍

(3) Subscription or marketing preference data: If the Website offers newsletters, event notifications, or other subscription features, and you subscribe or consent to receive related messages, the Company may collect your email address, subscription status, preference settings, and related interaction records.

‍

(4) Security and system logs: To maintain the normal operation and information security of the Website, the Company may collect necessary system logs, abnormal connection records, error logs, security incident investigation records, and other data related to website security protection.

‍

3. Purposes of Collecting Personal Data

The Company collects, processes, and uses your personal data for the following purposes:

‍

(1) Maintaining, managing, and improving the content, functionality, and user experience of the Website;

‍

(2) Responding to your inquiries, requests, feedback, business cooperation inquiries, or other communications;

‍

(3) Handling business contacts, media contacts, investor relations contacts, complaint and report processing, cooperation evaluation, or other business dealings;

‍

(4) Maintaining the information security of the Website and related systems, and detecting, preventing, and handling abnormal use, unauthorized access, malicious attacks, or other security incidents;

‍

(5) Providing Company news, event notifications, newsletters, marketing, or promotional information within the scope of your voluntary subscription or consent;

‍

(6) Complying with legal requirements or requests from competent authorities, judicial authorities, or other authorities with lawful authority, and handling disputes, legal claims, and preservation of rights;

‍

(7) Other purposes reasonably related to the foregoing that are necessary for the operation of the Website or the Company's lawful business activities.

‍

In accordance with the specific purposes and special categories of personal data under the Personal Data Protection Act of the Republic of China (Taiwan), the Company's processing may involve the following specific purposes, including but not limited to: 040 Marketing; 090 Consumer/Customer Management and Services; 135 Information (Communications) Services; 136 Information (Communications) and Database Management; 137 Information and Communication Security and Management; 157 Investigation, Statistics, and Research Analysis; and 181 Other business activities consistent with the Company's registered business items or organizational charter.

‍

If the Website does not actually use marketing, advertising tracking, or remarketing features, the Company will not collect or use your personal data for such purposes.

‍

4. Period, Region, Recipients, and Manner of Use of Personal Data

(1) Retention period: The Company will retain and use your personal data during the period the collection purpose remains valid, the period necessary for conducting business, the retention period required by law or contract, or the period necessary for the Company to handle inquiries, business communications, information security maintenance, dispute resolution, legal claims, or preservation of rights. If the specific purpose no longer exists or the retention period has expired and there is no further need for retention, the Company will delete, or cease processing or using, your personal data in accordance with law. This does not apply where retention is necessary pursuant to law, requirements of competent authorities, judicial proceedings, dispute resolution, exercise of rights, or information system defense.

‍

(2) Region of use: The Company may use your personal data within the Republic of China (Taiwan). Due to the needs of website hosting, remote services, information security protection, data analytics, customer service management, email delivery, or other outsourced services, your personal data may also be processed or used at the locations of relevant service providers.

‍

(3) Recipients: The Company may, to the extent necessary, provide or disclose your personal data to the following recipients:

‍

(i) Personnel within the Company's business, legal, compliance, information security, customer service, marketing, investor relations, media relations, or other departments who need to process such data for their duties.

‍

(ii) Third-party service providers engaged by the Company to provide website hosting, cloud services, information security protection, data analytics, customer service systems, email delivery, form management, technical support, or other necessary services.

‍

(iii) Competent authorities, judicial authorities, administrative authorities, investigative authorities, or other authorities with the lawful right to request data.

‍

(iv) Attorneys, consultants, accountants, auditors, or other professionals as necessary for handling disputes, legal proceedings, assertion or defense of rights, or preservation of rights.

‍

(v) If your inquiry or request involves the Company's affiliates, specific services, or business partners, the Company may, within the scope necessary for the original collection purpose, forward it to the relevant contact for handling. Except as otherwise required by law, necessary to fulfill your request, or with your separate consent, the Company will not provide your personal data to its affiliates for their own marketing or other unrelated purposes.

‍

Except as set forth in this Policy, otherwise provided by law, lawfully requested by a competent authority or judicial authority, or with your separate consent, the Company will not arbitrarily provide your personal data to third parties.

‍

(4) Manner of use: The Company will collect, record, store, organize, retrieve, use, transmit, statistically analyze, delete, or otherwise process and use your personal data by automated or non-automated means, within the scope of the aforementioned purposes and as necessary.

‍

5. Cookies and Similar Technologies

To ensure the normal operation of the Website, improve user experience, analyze website traffic, and maintain website security, the Website may use cookies or other similar technologies. The types of cookies the Website may use include:

‍

(1) Necessary cookies: Used to maintain the Website and its functions, page browsing, security verification, and system operation. Disabling these cookies may cause some functions of the Website to not work properly.

‍

(2) Analytics cookies: Used to understand how users browse the Website, including traffic source analysis, popular pages, browsing time, and website performance, to help the Company improve website content and user experience.

‍

(3) Functional cookies: Used to remember your preference settings, such as language, region, or other website display preferences.

‍

(4) Marketing or advertising cookies: If the Website uses advertising or remarketing tools, related cookies may be used to measure advertising effectiveness or provide information more relevant to your interests. If the Website does not actually use such tools, the Company will not set or use related cookies for this purpose.

‍

Except for necessary cookies, you may use the cookie management tool provided by the Website to accept or reject specific types of cookies. You may also manage, block, or delete cookies through your browser settings. However, disabling certain cookies may affect some functions or display of the Website.

‍

6. Third-Party Services and Website Links

(1) The Website may use tools or services from third-party service providers, such as website hosting, cloud services, traffic analytics, form management, information security protection, email delivery, or other technical services. Such service providers may process your personal data to the extent necessary.

‍

(2) The Company will require its data processors, through contracts or other appropriate means, to process personal data in accordance with the Company's instructions and to comply with confidentiality, information security, and personal data protection obligations.

‍

(3) The Website may also contain links to third-party websites, social media platforms, or other external links. Clicking on such links will take you to a third-party website or service, and this Policy does not apply to their handling of personal data. The Company recommends that you review the privacy policy of such third-party websites or services before providing any personal data.

‍

7. International Data Transfer

(1) Due to the needs of Website operations, cloud hosting, information security protection, data analytics, customer service management, email delivery, or other outsourced services, the Company may transfer your personal data outside the Republic of China (Taiwan), or have overseas service providers process your personal data to the extent necessary.

‍

(2) The Company will, in accordance with applicable personal data protection laws and internal management procedures, require relevant service providers to adopt appropriate security measures to protect your personal data.

‍

(3) The Website is not primarily intended for individuals within the European Union. However, if the Company is required by law to apply the EU General Data Protection Regulation or other regional data protection laws in a specific case, the Company will handle the matter in accordance with the actual circumstances and applicable law. This does not affect any rights you may lawfully assert.

‍

8. De-identified and Statistical Analysis Data

(1) The Company may statistically analyze or de-identify usage records, browsing data, or interaction data from the Website to improve website content, user experience, information security, and service quality.

‍

(2) If such data, after processing, can no longer identify a specific individual, it will no longer be considered personal data. If such data can still directly or indirectly identify a specific individual, the Company will continue to handle it in accordance with personal data protection laws and this Policy.

‍

9. Personal Data Security Measures

(1) The Company will adopt reasonable and appropriate technical and organizational security measures to protect your personal data and prevent unauthorized access, alteration, disclosure, damage, loss, or leakage of personal data.

‍

(2) Such measures may include, but are not limited to: access control, identity verification, system access logs, encryption or other data protection measures, security monitoring, employee training, outsourcing management, incident response procedures, and internal audit or review mechanisms.

‍

(3) However, no internet transmission or information system can guarantee absolute security. In the event of a personal data security incident, the Company will take necessary response, investigation, notification, or reporting measures in accordance with applicable laws and internal procedures.

‍

10. Your Personal Data Rights

With respect to your personal data held by the Company, you may exercise the following rights against the Company in accordance with the Personal Data Protection Act and applicable laws:

‍

(1) To inquire about or request access to your data.

‍

(2) To request a copy of your data.

‍

(3) To request supplementation or correction of your data.

‍

(4) To request the cessation of collection, processing, or use of your data.

‍

(5) To request deletion of your data.

‍

If you wish to exercise the above rights, you may contact the Company via the contact email set out in this Policy. To protect the security of your personal data, the Company may require you to provide necessary information to verify your identity before processing your request.

‍

The Company will process your request within the period prescribed by applicable law. For requests to inquire about, access, or obtain a copy of your data, the Company may charge necessary costs in accordance with law. However, where otherwise provided by law, or where your request may jeopardize national security, public interest, the performance of statutory duties by an agency, or the significant interests of the Company or a third party, the Company may restrict or refuse your request in accordance with law.

‍

11. Consequences of Not Providing Personal Data

You are free to choose whether to provide personal data. However, if you do not provide the necessary data, the Company may be unable to respond to your inquiries, process your requests, provide you with the information you need, or allow you to use certain functions of the Website. If you decline cookies or disable certain website technical functions, this may affect the normal display, functionality, or personalization settings of the Website.

‍

12. Opting Out of Marketing Messages

(1) If you have previously consented to or subscribed to receive the Company's newsletters, event notifications, marketing, or promotional information, you may unsubscribe at any time using the unsubscribe method provided in the message, or by notifying the Company via the contact email set out in this Policy to stop sending such messages.

‍

(2) Upon receiving your unsubscribe or opt-out request, the Company will process it within a reasonable period. However, the Company may still send you necessary notices for purposes such as responding to your inquiries, fulfilling legal obligations, handling transactions or service matters, security notifications, or other non-marketing purposes.

‍

13. Minors' Data

(1) The Website is not primarily intended for minors. If you are a minor, it is recommended that you browse or use the Website accompanied by your legal representative or guardian, and obtain the consent of your legal representative or guardian before providing any personal data.

‍

(2) If a legal representative or guardian believes that a minor has provided personal data through the Website and needs to inquire about, correct, cease the use of, or delete such data, they may contact the Company using the contact information set out in this Policy.

‍

14. ISO Certification and Information Security Management

The Company has obtained ISO/IEC 27001 Information Security Management System and ISO/IEC 27701 Privacy Information Management System certifications for certain management systems within its scope. The applicable scope of such certifications shall be as stated on the relevant certificates. The Company will continue to adopt appropriate technical and organizational security measures in accordance with its internal information security and personal data protection management procedures to maintain the security of the Website and related personal data.

‍

15. Amendments to this Policy

The Company may amend this Policy due to changes in laws and regulations, adjustments to website functions, internal management needs, technological developments, or other necessary reasons.

‍

Amendments to this Policy will be posted on the Website and will take effect from the date of posting or the effective date specified in this Policy. In the event of material changes, the Company will remind you of such updates through appropriate means. You are advised to review this Policy periodically to understand how the Company protects your personal data.