Privacy Policy

1. Introduction

Whitepeak ("we," "our," or "us") is committed to protecting the privacy and security of personal data entrusted to us by our website visitors, clients, and prospective clients. This Privacy Policy explains how we collect, use, store, and protect your personal information when you interact with our website and services.

This policy applies to all personal data collected through our website at https://whitepen.club, our contact forms, email communications, and consulting engagements. We operate in accordance with Taiwan's Personal Data Protection Act (PDPA) and applicable international data protection standards.

If you have questions about this policy, please contact us at [email protected].

2. Data We Collect

We collect personal data in the following ways and categories:

Information you provide directly: When you submit our contact form, we collect your name, email address, phone number (if provided), and message content. During consulting engagements, we may collect additional information necessary for service delivery, such as your business role and organization name.

Information collected automatically: When you visit our website, we may collect technical data through cookies and analytics tools, including your IP address, browser type, pages visited, time spent on pages, and referring website. This information helps us understand how visitors use our site and improve our services.

Information from third parties: In limited cases, we may receive information about you from professional networks or referral sources, always in compliance with applicable data protection requirements.

3. How We Use Your Data

We use the personal data we collect for the following purposes:

Service delivery: To respond to your inquiries, schedule consultations, deliver our consulting services, and communicate with you about your engagement.

Website improvement: To analyze website usage patterns, improve site functionality, and enhance user experience through analytics data.

Communications: To send you information about our services that may be relevant to your inquiry, or to follow up on previous engagements. We will only send marketing communications with your consent, and you may opt out at any time.

Legal compliance: To comply with applicable laws and regulations, respond to legal requests, and protect our rights and the rights of others.

The legal basis for processing your personal data includes: your consent (for contact form submissions and cookies), performance of a contract (for consulting engagements), and our legitimate business interests (for website analytics and service improvement).

4. Data Sharing

We do not sell, rent, or trade your personal data. We may share your information only in the following circumstances:

Service providers: We may share data with trusted third-party service providers who assist with website hosting, analytics (Google Analytics), and communication tools. These providers are contractually obligated to protect your data and use it solely for the services they provide to us.

Legal requirements: We may disclose personal data when required by law, regulation, court order, or governmental request, or when necessary to protect our rights, property, or safety.

Business transfers: In the event of a merger, acquisition, or sale of assets, personal data may be transferred as part of the transaction, subject to the same privacy protections described in this policy.

5. Data Protection Measures

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These measures include encrypted data transmission (SSL/TLS) for all website interactions, access controls limiting data access to authorized personnel, regular review of security practices, and secure storage of client engagement materials with confidentiality protocols.

While we take reasonable precautions to safeguard your data, no method of electronic transmission or storage is completely secure. We encourage you to take steps to protect your own information when communicating online.

6. Data Retention

We retain personal data only for as long as necessary to fulfill the purposes for which it was collected. Contact form submissions are retained for up to 24 months after the last interaction. Client engagement data is retained for 5 years following the completion of services, in line with professional recordkeeping standards and legal requirements. Website analytics data is retained in anonymized form and is not linked to individual users after 26 months.

After the applicable retention period, personal data is securely deleted or anonymized.

7. Cookies

Our website uses cookies to enhance your browsing experience and collect analytics data. We categorize cookies as essential (required for basic site functionality), analytics (to understand usage patterns), marketing (for relevant advertising), and preference (to remember your settings).

You can manage your cookie preferences through our Cookie Policy page or through your browser settings. Essential cookies cannot be disabled as they are necessary for the website to function.

8. Your Rights

Under Taiwan's Personal Data Protection Act and applicable international standards, you have the following rights regarding your personal data:

Right of access: You may request a copy of the personal data we hold about you.

Right to correction: You may request that we correct any inaccurate or incomplete data.

Right to deletion: You may request that we delete your personal data, subject to legal retention requirements.

Right to restrict processing: You may request that we limit how we use your data in certain circumstances.

Right to withdraw consent: Where processing is based on consent, you may withdraw your consent at any time without affecting the lawfulness of processing performed prior to withdrawal.

To exercise any of these rights, please contact us at [email protected]. We will respond to your request within 30 days.

9. Third-Party Links

Our website may contain links to third-party websites or services. We are not responsible for the privacy practices or content of these external sites. We encourage you to review the privacy policies of any third-party sites you visit.

10. Children's Privacy

Our services are intended for adults aged 18 and over. We do not knowingly collect personal data from individuals under the age of 18. If we become aware that we have collected data from a minor, we will take steps to delete that information promptly.

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, or legal requirements. When we make material changes, we will update the "Last Updated" date at the top of this page. We encourage you to review this policy periodically.

12. Contact Information

Data Controller: Whitepeak

Address: 12F, No. 85, Sec. 1, Xintai 5th Road, Xizhi District, New Taipei City 221, Taiwan

Privacy Inquiries: [email protected]

For complaints regarding data handling, you may also contact the National Development Council of Taiwan, which oversees the enforcement of the Personal Data Protection Act.