Privacy Policy
Effective Date: January 15, 2025
At Nextsenselogic, we understand that your data security matters. This isn't just another legal document — it's our commitment to being transparent about how we handle your information when you work with us or visit our website.
We're an IT infrastructure security company based in Taiwan, and we take data protection seriously. This policy explains what we collect, why we need it, and how we keep it safe. We've written this in plain language because we believe you deserve to understand exactly what happens with your information.
Information We Collect
Contact and Business Information
When you reach out to us or become a client, we collect basic business contact details. This includes your name, email address, phone number, company name, and job title. We need this to communicate with you about our services and your security infrastructure needs.
Technical Information
When you visit our website, we automatically gather certain technical data. Your IP address, browser type, device information, and how you navigate our site help us improve the user experience and identify potential security issues. This is standard practice for any professional website.
Service-Related Data
If you become a client, we collect information about your IT infrastructure that's relevant to the security services we provide. This might include network configurations, system logs, security audit results, and incident reports. We only collect what's necessary to protect your systems effectively.
We don't collect sensitive personal information unless it's directly relevant to a security service you've specifically requested.
How We Use Your Information
We use the information we collect for specific, practical purposes:
- Responding to your inquiries and providing quotes for our services
- Delivering the security services you've contracted us to perform
- Sending you relevant updates about security threats that might affect your infrastructure
- Improving our website and making it more useful for visitors
- Maintaining records of our business relationship and communications
- Complying with legal obligations under Taiwan's Personal Data Protection Act
We don't use your data for marketing purposes unless you've specifically opted in. You won't suddenly find yourself on random mailing lists because you contacted us about a security consultation.
Legal Basis for Processing (Taiwan Context)
Under Taiwan's Personal Data Protection Act, we process your information based on:
| Processing Activity | Legal Basis |
|---|---|
| Service delivery and client communications | Contract fulfillment |
| Website analytics and improvements | Legitimate business interest |
| Marketing communications | Your explicit consent |
| Security incident response | Legal obligation |
| Record keeping and accounting | Legal obligation |
Data Sharing and Disclosure
When We Share Information
We keep your information within our organization whenever possible. However, there are some situations where we need to share data:
- With cloud service providers who host our systems (they're bound by strict confidentiality agreements)
- With professional advisors like lawyers or accountants when necessary for business operations
- With government authorities if required by Taiwan law or court order
- With your explicit permission for specific purposes you've approved
We never sell your data to third parties. That's not our business model, and it never will be.
International Data Transfers
Your data is primarily stored on servers located in Taiwan. If we need to transfer data internationally for technical reasons, we ensure appropriate safeguards are in place to protect your information according to Taiwan's data protection standards.
Your Rights
Under Taiwan's Personal Data Protection Act, you have several rights regarding your personal information. Here's what you can do:
Access Your Data
Request a copy of the personal information we hold about you. We'll provide this within 30 days of your request.
Correction Rights
Ask us to correct any inaccurate or incomplete information. We want our records to be accurate too.
Deletion Requests
Request deletion of your data when it's no longer necessary for the purposes we collected it, subject to legal retention requirements.
Processing Restrictions
Ask us to stop processing your data in certain situations, though this might affect our ability to provide services.
Withdraw Consent
If we're processing your data based on consent, you can withdraw it at any time. This won't affect processing that occurred before withdrawal.
Object to Processing
Object to processing based on legitimate interests. We'll stop unless we have compelling reasons to continue.
To exercise any of these rights, send an email to [email protected] with your request. We'll respond within 15 business days and won't charge you for reasonable requests.
Data Security Measures
As a security company, we practice what we preach. Here's how we protect your information:
Technical Safeguards
- Industry-standard encryption for data in transit and at rest
- Regular security audits and vulnerability assessments
- Multi-factor authentication for system access
- Firewall protection and intrusion detection systems
- Regular software updates and security patches
Organizational Measures
- Strict access controls — employees only access data they need for their work
- Confidentiality agreements for all staff members
- Regular security training for our team
- Documented security policies and procedures
- Incident response plans for potential data breaches
No system is completely immune to threats, but we maintain multiple layers of protection and continuously update our security measures to address emerging risks.
Data Retention
We don't keep your data longer than necessary. Here's our general approach:
- Client data: Retained for the duration of our business relationship plus seven years for legal and accounting purposes
- Inquiry data: Deleted after two years if no business relationship develops
- Website analytics: Aggregated data retained indefinitely; individual session data deleted after 18 months
- Marketing consent records: Maintained until you withdraw consent, then deleted within 90 days
- Security logs: Retained for one year unless required for ongoing investigations
Taiwan's tax and business regulations require us to maintain certain records for seven years. We can't delete data that falls under these legal requirements, but we secure it appropriately and limit access.
Cookies and Website Technology
Our website uses cookies to improve your experience. These are small text files stored on your device that help us understand how people use our site.
Types of Cookies We Use
- Essential cookies: Necessary for the website to function properly
- Analytics cookies: Help us understand visitor behavior and improve the site
- Preference cookies: Remember your settings for future visits
You can control cookies through your browser settings. Blocking certain cookies might affect how the website works for you, but essential functionality will remain available.
Children's Privacy
Our services are designed for businesses, not children. We don't knowingly collect information from anyone under 18 years old. If we discover we've inadvertently collected such data, we'll delete it promptly.
Changes to This Policy
We review and update this privacy policy periodically to reflect changes in our practices, technology, or legal requirements. When we make significant changes, we'll notify active clients by email and update the effective date at the top of this page.
For minor updates that don't materially affect your rights, we'll simply update the policy on our website. We recommend checking back occasionally if you're interested in how we're managing privacy practices.
Third-Party Links
Our website might contain links to external sites that could be useful for our clients. We're not responsible for the privacy practices of these third-party sites. When you click on an external link, you're subject to that site's privacy policy, not ours.