Personal Data Protection Policy

1. General Information

Best World International Limited and its affiliates (collectively, “Best World”, “we”, “us” or “our”), are committed to respecting your rights under applicable personal data protection laws and regulations in all regions where we conduct our business. This Personal Data Protection Policy (“Policy”) outlines how Best World collects, uses and discloses your personal data for the purposes communicated to you herein or as permitted or required by law and regulation in the relevant jurisdictions. We aim to ensure your continued trust and confidence as our valued customer through transparency in our data handling practices. In the event of any inconsistencies between the English version and any other language version of these Terms, the English language version shall prevail.

By accessing our websites, using our services or providing us with your personal data (including via our websites), you acknowledge that you have read and understood this policy and agree and consent to the collection, use and disclosure of your personal data as described herein and in accordance with the specific requirements of the applicable laws in your jurisdiction. This policy supplements and does not supersede or replace any consents you may have previously provided to us, unless otherwise required by local law. We reserve the right to amend or update this policy periodically and any revisions will take effect upon the posting of the updated policy on our websites. Please refer to the effective date indicated at the end of this policy. We encourage you to review this policy each time you visit our websites to ensure you remain informed of any changes.

2. Collection of Personal Data

We collect personal data from you through various interactions, including but not limited to:

when you browse and/or use any of our services on our websites;
when you accept cookies and similar technologies on your devices, in accordance with our Use of Cookies (see Section 7);
when you register for a DR’s Secret account on our websites;
when you participate in our promotions, quizzes or other events;
when you interact with us via telephone calls, SMS messages, instant messaging applications, chatbots, face-to-face meetings, social media platforms and electronic mail;
when you are contacted by, and respond to, our Skin Buddy, marketing representatives and/or customer service officers; and
when you submit your personal data to us for any other reasons.

The types of personal data we collect from you, may include: name, contact information (e.g., phone number or email address), shipping address (which may be shared with your assigned Skin Buddy, for order fulfilment and support purposes), real-time geographic location data (where you have enabled such features), online usage data, information about your device (e.g., IP address, device identifiers, operating system), and any other data you have provided to us in any form submitted to us or via any other form of interaction.

If you provide personal data relating to a third-party to us, you represent and warrant that you have obtained the legally required consent from the third-party for the collection, use and disclosure of their personal data to us for the respective purposes outlined in this policy and in accordance with applicable local data protection laws. You shall inform the third-party of the terms of this policy.

You are responsible for ensuring that all personal data submitted to us is accurate, complete and up-to-date. You must inform us of any changes to your personal data.

3. Purpose for Collection, Use and Disclosure of Personal Data

We collect, use and disclose your personal data for various purposes, including but not limited to:

to provide you with access to and facilitate your use of our services;
to process your DR’s Secret account registration and maintain your DR’s Secret account;
to process your transactions, including order fulfilment and shipping;
to communicate with you regarding our products, services, promotions, events and other information that may be of interest to you, subject to your communication preferences and applicable consent requirements.
to respond to your inquiries, feedback or complaints and provide customer support;
where necessary, to carry out investigations or respond to legal proceedings or requests from regulatory authorities;
to comply with applicable laws, regulations, legal processes and industry standards in the jurisdictions where we operate; and
for any other purposes for which we have obtained your consent or that are permitted or required by law.

Your personal data may be disclosed to our third-party service providers (both within and outside your region of residence), including but not limited to logistics providers who assist us in carrying out the aforementioned purposes. Such third parties are contractually obligated to protect your personal data in accordance with applicable laws and our data security standards.

4. Use of Cookies and Similar Technologies

We use cookies, web beacons and other similar technologies on our websites to enhance your access to and use of our services, personalise your online experience, analyse website traffic and for targeted advertising purposes (subject to your consent where required). By browsing or using the services on our websites, you consent to our use of these technologies to collect information on your online usage data and to improve your online experience. Disabling certain cookies may impact the functionality of some services and may prevent the completion of transactions.

5. Third-Party Web Analytics

We may use third-party web analytics services, such as Google Analytics and/or Baidu Tongji, to help us analyse how visitors interact with our websites. These service providers use technologies like cookies, web server logs and web beacons to collect information (including IP addresses) which is then disclosed to them. They may also collect demographics and interest data to better understand user behaviour and the effectiveness of our marketing efforts. We do not combine this aggregated and anonymised data with personally identifiable information.

You can typically prevent these analytical tools from recognising you on subsequent visits by adjusting your browser settings to disable cookies.

To specifically disable Google Analytics, you can download the browser add-on provided by Google at: https://tools.google.com/dlpage/gaoptout?hl=en. Please refer to Google Privacy Policy for more information on their data handling practices.

To manage your data sharing preferences with Baidu, please visit their Baidu Privacy Settings page. You can find further details on Baidu’s data collection and protection practices in Baidu Privacy Policy

6. Third-Party Internet-Based Advertising

We may engage third-party advertising companies to deliver internet-based advertising (also known as “targeted advertising,” “remarketing” or “behavioural advertising”). These companies may collect information about your browsing activities on our websites, as well as on other websites, to personalise your experience and provide advertisements tailored to your interests and preferences. This may involve the use of cookies and similar technologies as described in the “Third-Party Web Analytics” section.

You can often opt out of the automated collection of information by Google and/or Baidu for personalised advertising purposes by visiting their respective ad personalisation settings pages: Google Ad Personalisation page and/or Baidu Ad Personalisation page. Please note that opting out may not completely stop you from seeing advertisements online but may make the advertisements you see less relevant to your interests.

7. Retention of Personal Data

Best World will retain your personal data only for as long as necessary to fulfil the purposes for which it was collected. For detailed information regarding the collection, use, and disclosure of your personal data, please refer to Section 3.

In accordance with our data protection policy, your personal data will be retained for a period of 10 years after your DR’s Secret account is terminated. This retention period is necessary to fulfill legal obligations and address any post-termination business requirements, such as handling customer service inquiries or disputes. If your account remains inactive for a continuous period of 10 years, your personal data will be removed from our system.

We do not store your credit card information. The credit card information you provide is only used for the current transaction order. Participating third-party payment service providers will execute the relevant transactions under industry-standard security mechanisms.

8. Protection of Personal Data

Best World is committed to safeguarding the security and confidentiality of your personal data. We implement reasonable and appropriate technical, physical and administrative security measures designed to protect your personal data against unauthorised access, collection, use, disclosure, alteration, loss or destruction. These measures include, but are not limited to:

The use of firewalls to protect our systems against unauthorised access from the Internet.
Secure Socket Layer (SSL) encryption to secure the transmission of your data over the Internet, particularly when you provide sensitive information.
Where applicable, the implementation of advanced antivirus and anti-malware solutions to actively monitor and protect our systems from malicious software and cyber threats.

In the event of a data breach, we will take steps to contain the breach and notify affected individuals and relevant regulatory authorities as required by applicable laws.

9. Your Rights and Contacting Us – Withdrawal of Consent, Access and Correction of Personal Data

You have certain rights regarding your personal data under applicable data protection laws, which may vary depending on your jurisdiction. These rights may include:

The right to withdraw your consent: You may withdraw your consent for the collection, use and/or disclosure of your personal data at any time by sending an email to our Data Protection Officer at the email address provided below or by contacting our Customer Service Officer at our retail outlets/lifestyle centres. Please note that withdrawing your consent may affect our ability to provide you with certain services. We will inform you of the likely consequences of withdrawing your consent.
The right to access your personal data: You may have the right to request access to the personal data we hold about you and to receive information about how we have used and disclosed your personal data.
The right to correction (rectification): You may have the right to request the correction of any inaccurate or incomplete personal data we hold about you.
Other rights: Depending on your jurisdiction, you may also have the right to erasure (deletion) of your personal data, the right to restrict processing, the right to data portability, and the right to object to the processing of your personal data.

If you would like to request to access/correct other personal data or if you have any feedback/complaint concerning our Personal Data Protection Policy, you may contact our Data Protection Officer at the email address below.

To assist us in processing your request efficiently, please provide us with your full name and mobile number.

Email: dpo@id.bwlgroup.com

This policy is effective as of 1 May 2026.