Privacy Policy
Last Updated: January 15, 2025
At Supremis Proflux, we understand that trusting someone with your business data isn't something you do lightly. This privacy policy explains how we collect, use, and protect your information when you work with us or visit our website.
We've written this in plain language because legal jargon doesn't help anyone understand what actually happens with their data. If something isn't clear, reach out—we'd rather answer your questions than leave you guessing.
Information We Collect
When you engage with Supremis Proflux, we collect different types of information depending on how you interact with us. Here's what we gather and why:
Information You Give Us Directly
This includes data you provide when filling out contact forms, signing service agreements, or communicating with our team:
- Name and job title
- Business email address and phone number
- Company name and industry information
- Project details and business challenges you're facing
- Payment and billing information for contracted services
Information We Collect Automatically
When you visit supremisproflux.com, our systems automatically log certain technical information:
- IP address and general location data
- Browser type and device information
- Pages visited and time spent on our site
- Referring website or search terms that brought you here
We use this to understand how people find and use our site. Nothing creepy—just basic analytics that help us improve your experience.
Information From Client Engagements
When we work together on agile implementation projects, we might access or process:
- Organizational structure and team composition data
- Project documentation and workflow information
- Communication records related to our consulting work
- Performance metrics and assessment results
How We Use Your Information
We're not in the business of selling data or bombarding you with marketing. Here's what we actually do with the information we collect:
Service Delivery: We use your information to deliver the agile consulting services you've hired us for. This includes project planning, team assessments, training delivery, and ongoing support.
Communication: We'll email or call you about projects, scheduling, deliverables, and billing. We might also send occasional updates about new offerings that relate to services you've used.
Improvement: We analyze project outcomes and client feedback to refine our methodologies and deliver better results for future clients.
We don't use your data for automated decision-making or profiling. Real people review your information and make judgments based on professional expertise.
Legal Basis for Processing (Taiwan Context)
Under Taiwan's Personal Data Protection Act, we process your data based on these legal grounds:
- Contractual Necessity: When you engage our services, we need certain information to fulfill our obligations to you.
- Legitimate Interest: We have a legitimate business interest in understanding how our website performs and improving our service offerings.
- Consent: For marketing communications beyond what's directly related to our service relationship, we'll ask for your explicit permission.
- Legal Obligation: We retain certain records to comply with Taiwanese tax, accounting, and business regulations.
How We Protect Your Data
Security isn't just a checkbox for us. We've implemented multiple layers of protection:
Technical Safeguards
- Encrypted data transmission using industry-standard TLS protocols
- Secure, password-protected systems with regular access audits
- Regular security updates and vulnerability assessments
- Restricted access—team members only see data relevant to their role
Organizational Measures
- All team members sign confidentiality agreements
- Regular training on data protection best practices
- Clear protocols for handling sensitive client information
- Documented procedures for data breach response
That said, no system is 100% impenetrable. We do everything reasonably possible to protect your data, but we can't guarantee absolute security. If we ever experience a breach affecting your information, we'll notify you promptly as required by Taiwan law.
Data Sharing and Disclosure
We don't sell your information. Period. But we do share data in specific, limited circumstances:
| Who We Share With | What We Share | Why |
|---|---|---|
| Service Providers | Contact details, project information | Tools we use for email, scheduling, and project management |
| Payment Processors | Billing information | To process invoices and payments securely |
| Legal Authorities | As required by law | When legally obligated under Taiwan regulations |
| Professional Advisors | Limited business information | Legal, accounting, or business consulting purposes |
All third-party service providers we work with are contractually obligated to protect your data and use it only for the purposes we specify.
Your Rights Regarding Your Data
Under Taiwan's Personal Data Protection Act, you have several rights. We've designed practical processes to honor them:
Access Your Data
You can request a copy of the personal information we hold about you. We'll provide it within 30 days in a commonly used format.
Correct Inaccuracies
If information we have is wrong or outdated, let us know. We'll update it promptly and notify anyone we've shared it with if necessary.
Request Deletion
You can ask us to delete your data, though we may need to retain certain records for legal or contractual reasons. We'll explain what we can and can't delete.
Object to Processing
If you believe we're processing your data inappropriately, you can object. We'll review your concerns and respond with our decision and reasoning.
Withdraw Consent
For processing based on consent (like marketing emails), you can withdraw permission anytime. This won't affect any processing done before withdrawal.
Data Portability
You can request your data in a structured, machine-readable format to transfer to another service provider if you choose.
How to Exercise Your Rights: Email us at support@supremisproflux.com with your request. We'll verify your identity and respond within the timeframes required by Taiwan law. There's no fee for reasonable requests, though we may charge for excessive or repetitive requests.
Data Retention
We don't keep your information forever. Here's our general approach to retention:
- Active Client Data: Retained for the duration of our service relationship plus up to 12 months after project completion
- Financial Records: Kept for 7 years as required by Taiwan tax regulations
- Website Analytics: Aggregated data retained indefinitely; individual visitor data deleted after 26 months
- Marketing Communications: Maintained until you unsubscribe or request deletion
- Inquiry Forms: Deleted after 18 months if no service relationship develops
When we delete data, we do so securely and completely. Backups are purged according to our regular backup rotation schedule.
International Data Transfers
Our operations are primarily based in Taiwan, but we occasionally use service providers located in other countries. Some of these may have different data protection standards than Taiwan.
When we transfer data internationally, we ensure appropriate safeguards are in place through:
- Contractual clauses requiring equivalent protection standards
- Verification that recipient countries have adequate data protection laws
- Technical measures like encryption during transmission and storage
We currently use cloud services that may store data in facilities outside Taiwan. These providers maintain security certifications and comply with international data protection standards.
Cookies and Tracking Technologies
Our website uses cookies—small text files stored on your device. We use them sparingly and only for legitimate purposes:
Essential Cookies
These keep the site functioning properly. They remember your session and preferences. You can't disable these without breaking the site experience.
Analytics Cookies
We use basic analytics to understand which pages people visit and how they navigate our site. This helps us improve content and user experience. The data is aggregated and anonymized.
We don't use advertising cookies or share your browsing data with ad networks. You can disable analytics cookies through your browser settings without affecting core site functionality.
Children's Privacy
Our services are designed for business professionals and organizations. We don't knowingly collect information from anyone under 18 years old. If you believe we've accidentally collected data from a minor, contact us immediately and we'll delete it.
Changes to This Policy
We review this privacy policy periodically and update it when our practices change or new regulations take effect. When we make significant changes, we'll notify active clients directly via email.
For others, we'll post updates here with a new "Last Updated" date at the top. We encourage you to review this page occasionally, especially before engaging our services.
Continued use of our website or services after changes take effect means you accept the updated policy.
Questions and Complaints
If something in this policy concerns you, or if you have questions about how we handle your data, we want to hear from you. Seriously—we'd rather address concerns directly than have you worry about your privacy.
You also have the right to file a complaint with Taiwan's competent data protection authority if you believe we've mishandled your information. However, we hope you'll give us the chance to address your concerns first.
Privacy Inquiries
For questions, requests, or concerns about this privacy policy or how we handle your data:
Our office address: No. 635, Section 3, Dongshan Rd, Dongshan Township, Yilan County, Taiwan 269