Information We Collect

When you work with us or visit our website, we collect different types of information. Some you give us directly. Some we gather automatically. Here's what we're talking about:

Information You Provide Directly

• Contact details like your name, email address, phone number, and business address when you reach out to us
• Company information including business name, industry sector, and project details when you request our services
• Project data and documentation you share during risk assessment engagements
• Payment information when you engage our services, though we don't store complete credit card numbers on our servers
• Communication records from emails, calls, and meetings we have together

Information We Collect Automatically

When you visit our website, our systems automatically gather some technical information:

• IP address and general location data
• Browser type, device information, and operating system
• Pages you visit and how long you stay on them
• Referring website that brought you to us

How We Use Your Information

We're not in the business of collecting data for its own sake. Everything we gather serves a specific purpose related to helping you minimize project risks.

1. To provide our core risk assessment services—analyzing your projects, identifying potential issues, and developing mitigation strategies
2. To communicate with you about your projects, answer questions, and provide updates
3. To process payments and maintain accurate financial records
4. To improve our services based on feedback and usage patterns
5. To comply with legal obligations under Taiwan law and international standards
6. To send occasional updates about our services if you've opted in—and you can opt out anytime

Data Protection and Security

Protecting your information isn't just good practice—it's essential to what we do. Our clients trust us with sensitive project data, and we take that responsibility seriously.

Security Measures We Implement

• SSL encryption for all data transmitted between your browser and our servers
• Encrypted storage for sensitive client documents and project information
• Regular security audits and vulnerability assessments
• Restricted access controls—only team members working on your project can access your data
• Secure backup systems with redundancy to prevent data loss
• Regular staff training on data protection best practices

But let's be honest—no system is 100% secure. We do everything reasonably possible to protect your information, but we can't guarantee absolute security. If we ever experience a data breach that affects your information, we'll notify you promptly as required by Taiwan's Personal Data Protection Act.

Your Rights Regarding Your Data

Under Taiwan's Personal Data Protection Act, you have specific rights about your personal information. We respect these rights and make it straightforward to exercise them.

To exercise any of these rights, just send us an email at help@procoremax.com. We'll respond within 30 days, usually much sooner. There's no fee unless your request is clearly unreasonable or repetitive.

Data Retention and Deletion

We don't keep your information forever. Our retention periods balance practical business needs with your privacy rights.

How Long We Keep Different Types of Data

• Active client project data: Duration of engagement plus 3 years for reference and potential follow-up work
• Financial records: 7 years as required by Taiwan tax law
• Contact information for prospects: 2 years from last contact unless you request earlier deletion
• Website analytics data: 26 months in aggregated, anonymized form
• Email correspondence: 5 years for business continuity, then archived or deleted

When we delete data, we actually delete it—not just mark it as deleted. Our deletion process removes information from active systems, backups, and archives within 90 days of the scheduled deletion date.

Sharing Your Information

We share your information only when necessary and never for marketing purposes by third parties. Here's who might see your data and why:

Service Providers

We work with carefully selected vendors who help us run our business. These might include cloud hosting providers, payment processors, and communication tools. All service providers sign data protection agreements and can only use your information for the specific services they provide to us.

Legal Requirements

Sometimes we're legally required to share information—like responding to valid court orders, complying with tax authorities, or cooperating with law enforcement when required by Taiwan law. We'll notify you about such requests unless legally prohibited.

Business Transfers

If ProCoreMax is acquired or merges with another company, your information would transfer to the new entity. We'd notify you beforehand and ensure the new owners honor this privacy policy.

International Data Transfers

While we're based in Taiwan, some of our service providers operate servers in other countries. This means your data might be processed outside Taiwan.

When we transfer data internationally, we ensure appropriate safeguards are in place—like standard contractual clauses approved by data protection authorities. We only work with providers in countries that maintain adequate data protection standards.

Cookies and Tracking

Our website uses cookies—small text files stored on your device. We use them to remember your preferences and understand how people use our site.

Types of Cookies We Use

• Essential cookies that make the website function properly
• Analytics cookies that help us understand visitor behavior (anonymized)
• Preference cookies that remember your settings

You can disable cookies through your browser settings, though some website features might not work as smoothly. We don't use advertising cookies or share cookie data with advertising networks.

Children's Privacy

Our services are designed for businesses and professionals. We don't knowingly collect information from anyone under 18 years old. If we discover we've accidentally collected such information, we'll delete it immediately.

Changes to This Policy

We update this policy occasionally to reflect changes in our practices or legal requirements. When we make significant changes, we'll notify active clients by email and post the updated policy with a new "Last Updated" date.

We encourage you to review this policy periodically. Continued use of our services after changes means you accept the updated policy.