🔒 Privacy Policy

1. Policy Overview

CyberTech Solutions ("we", "our", "the company") highly values your privacy rights. This privacy policy details how we collect, use, store, and protect the personal information you provide when using our website and services.

By using our website or services, you agree to the personal data processing methods described in this privacy policy. If you do not agree with any part of this policy, please do not use our services.

2. Personal Data Collection

2.1 Types of Data We Collect

We may collect the following types of personal data:

• Identity Data: Name, email address, phone number, company name
• Contact Data: Address, postal code, country/region
• Technical Data: IP address, browser type, operating system, access time
• Usage Data: Website browsing history, click data, dwell time
• Service Data: Project requirements, technical specifications, contract information
• Communication Data: Email and chat records between you and us

2.2 Data Collection Methods

We collect your personal data through the following methods:

• Data you provide directly to us (such as filling out forms, sending emails)
• Data automatically collected when you use our website (such as cookies and log files)
• Third-party legitimate sources (such as social media platforms, business partners)
• Publicly available sources (such as company registration data)

3. Personal Data Usage Purposes

3.1 Primary Usage Purposes

We use your personal data for the following legitimate purposes:

• Service Provision: Contract execution, technical services, customer support
• Business Operations: Processing inquiries, quotations, project management, billing
• Communication: Responding to inquiries, sending updates, technical notifications
• Website Improvement: Analyzing usage patterns, optimizing user experience, testing new features
• Marketing: Sending relevant service information, industry updates (with your consent)
• Legal Compliance: Complying with legal obligations, protecting legitimate interests, preventing fraud

3.2 Legal Basis

The legal basis for our processing of personal data includes:

• Contract Performance: To fulfill our service contract with you
• Legitimate Interests: To maintain our business operations and security
• Legal Obligations: To comply with applicable laws and regulations
• Consent: You have explicitly consented to specific processing purposes

4. Cookies and Tracking Technologies

4.1 Cookie Usage Explanation

We use cookies and similar technologies to improve your browsing experience:

• Essential Cookies: Required for basic website functionality, cannot be disabled
• Functional Cookies: Remember your preferences and choices
• Analytics Cookies: Understand website usage and performance
• Marketing Cookies: Provide personalized ads and content (requires consent)

4.2 Cookie Management

You can manage cookies through the following methods:

• Adjust browser settings to block or delete cookies
• Use the cookie consent tool on our website
• Contact us to request disabling specific cookies

5. Personal Data Sharing

5.1 Data Sharing Principles

We commit not to sell your personal data. We only share your data with third parties in the following circumstances:

5.2 Legitimate Sharing Situations

• Service Providers: Technical partners who help us provide services (such as cloud services, payment processing)
• Legal Requirements: In response to lawful requests from law enforcement or courts
• Business Transfers: In the event of mergers, acquisitions, or asset transfers
• Rights Protection: To protect our or others' legitimate interests and safety
• Your Consent: Other situations with your explicit consent

5.3 Third-Party Services

We may use the following third-party services, each with their own privacy policies:

• Google Analytics: Website analytics service
• Cloud Storage Services: AWS, Azure, Google Cloud
• Email Services: Gmail, Outlook
• Customer Relationship Management: CRM systems

6. Data Security Protection

6.1 Security Measures

We employ multi-layered security measures to protect your personal data:

• Encryption Technology: SSL/TLS encryption for transmission, AES-256 encryption for storage
• Access Control: Strict authentication and authorization mechanisms
• Network Security: Firewalls, intrusion detection systems, DDoS protection
• Regular Backups: Data backup and disaster recovery mechanisms
• Security Monitoring: 24/7 security monitoring and threat detection
• Staff Training: Regular cybersecurity education and best practice training

6.2 Data Breach Response

In the event of a data breach, we will:

• Assess the scope of impact within 72 hours of discovery
• Immediately take measures to prevent further breaches
• Report to relevant regulatory authorities as required by law
• Promptly notify affected users
• Provide detailed incident reports and improvement measures

7. Data Retention Period

7.1 Retention Principles

We only retain your personal data for the necessary period:

• Service Period: During service provision and contract validity
• Legal Obligations: Required retention period under applicable laws
• Business Needs: Required for maintaining business records and customer relationships
• Dispute Resolution: Period needed to handle potential legal disputes

7.2 Specific Retention Periods

• Contact Data: 3 years after last contact
• Contract Data: 5 years after contract termination
• Technical Data: 2 years after collection
• Marketing Data: Immediately deleted after unsubscription
• Accounting Data: 5 years as required by accounting laws

7.3 Data Destruction

Data exceeding the retention period will be securely destroyed, including:

• Using professional tools to thoroughly delete electronic files
• Physical documents processed with shredders or incineration
• Physical destruction of storage media
• Recording the destruction process for verification

8. Your Privacy Rights

8.1 Basic Rights

Under the Personal Data Protection Act, you have the following rights:

• Right to Access: Request to view your personal data
• Right to Rectification: Request correction of incorrect or incomplete data
• Right to Erasure: Request deletion of unnecessary personal data
• Right to Restrict Processing: Request to stop processing or using personal data
• Right to Data Portability: Request personal data in a portable format
• Right to Object: Object to data processing based on legitimate interests

8.2 How to Exercise Your Rights

You can exercise your rights through the following methods:

• Send email to: privacy@cybertech-solutions.com
• Call customer service: +886-093696-1025
• Mail written request to our business address
• Use the online application form on our website

8.3 Response Time

We will respond to your request within:

• 15 business days after identity verification
• Notify in advance if processing time needs extension
• Provide the first inquiry service free of charge
• May charge reasonable fees for unreasonable repeated requests

9. Children's Privacy Protection

We take children's privacy protection very seriously:

• Our services are primarily aimed at adults (18 years and older)
• We do not knowingly collect personal data from children under 13
• If we discover we have inadvertently collected children's data, we will delete it immediately
• Users aged 13-18 require parental or guardian consent
• Parents can contact us to inquire, modify, or delete their children's data

10. Cross-Border Data Transfers

10.1 Transfer Necessity

Based on service provision needs, your personal data may be transferred to:

• Our overseas technical partners
• International cloud service providers
• Cross-border project collaboration teams
• Overseas customers (if applicable)

10.2 Security Guarantees

For cross-border data transfers, we ensure:

• Transfer only to countries or regions with adequate privacy protection
• Sign data processing agreements with recipients
• Use Standard Contractual Clauses (SCC)
• Conduct regular data protection assessments
• Establish data subject rights remedy mechanisms

11. Privacy Policy Updates

We may periodically update this privacy policy to reflect:

• Changes in laws and regulations
• Adjustments in business practices
• Technological development needs
• User feedback and suggestions

11.1 Update Notifications

For significant updates, we will:

• Post prominent notices on the website
• Notify registered users via email
• Provide a 30-day transition period
• Explain specific changes

11.2 Continued Use

After policy updates, your continued use of our services indicates:

• You have read and understood the new policy
• You agree to process personal data according to the new policy
• If you disagree, you may stop using the service

13. Dispute Resolution

13.1 Complaint Channels

If you have concerns about our privacy practices, you can:

• Contact our Data Protection Officer directly
• File a complaint with Taiwan's Personal Data Protection Committee
• Seek legal remedies
• Resolve through mediation or arbitration mechanisms

13.2 Applicable Law

This privacy policy is governed by Taiwan law, and any disputes will be under Taiwan court jurisdiction.