1. Information We Collect

When you use our services, we collect different types of information to provide you with a better learning experience and maintain our platform effectively.

Personal Identification Data

We collect basic information when you register or contact us:

• Full name and preferred display name
• Email address for account access and communications
• Phone number (optional, for important account notifications)
• Professional background and educational history when relevant to course placement
• Payment information processed through secure third-party providers

Usage and Technical Information

Our platform automatically collects certain data to improve functionality:

• IP address and general location data (city/region level, not precise geolocation)
• Browser type, device information, and operating system
• Pages visited, time spent on different sections, and navigation patterns
• Course progress, assessment scores, and learning milestones
• Technical logs for troubleshooting and security monitoring

Communications and Feedback

We keep records of your interactions with us, including support requests, course feedback, and any correspondence you initiate through our platform.

2. How We Use Your Information

Your data serves specific purposes that directly benefit your experience with StartOnForward. We don't use your information for unrelated activities.

3. Data Sharing and Third Parties

We don't sell your personal information. Period. However, running an educational platform requires working with trusted service providers.

Service Providers We Work With

• Payment processors for secure transaction handling (they never share full payment details with us)
• Cloud hosting services that store course materials and user data with encryption
• Email service providers for sending course updates and notifications
• Analytics tools to understand how students interact with our platform
• Customer support software to manage and resolve your inquiries efficiently

All third parties sign data processing agreements and must follow strict security standards. They can only use your data for the specific services they provide to us.

Legal Requirements

We may disclose information when required by Taiwan law, court orders, or government requests. This might happen in cases involving fraud investigation, intellectual property disputes, or other legal proceedings.

4. Your Privacy Rights

Under Taiwan's Personal Data Protection Act, you have significant control over your personal information.

How to Exercise Your Rights

Send your request to [email protected] with "Privacy Rights Request" in the subject line. We'll respond within 15 business days and verify your identity before processing sensitive requests. There's no fee for most requests, though we might charge reasonable costs for excessive or repeated requests.

5. Data Security Measures

Protecting your information is a serious responsibility. We've implemented multiple layers of security:

• Industry-standard encryption for data transmission and storage
• Regular security audits and vulnerability assessments
• Access controls limiting employee access to personal data on a need-to-know basis
• Secure backup systems with encryption and geographic redundancy
• Multi-factor authentication options for account protection
• Automated monitoring systems to detect and respond to security threats

6. Data Retention

We keep your information only as long as necessary for legitimate educational and legal purposes.

Retention Periods

• Active account data: Retained while your account remains active plus 2 years after last activity
• Course completion records and certificates: Maintained for 7 years for verification purposes
• Financial transaction records: Kept for 5 years as required by Taiwan tax regulations
• Marketing communications data: Deleted within 30 days of unsubscribe request
• Support correspondence: Retained for 3 years for quality assurance
• Technical logs: Automatically deleted after 90 days unless needed for security investigation

After retention periods expire, we securely delete or anonymize your data so it can no longer identify you.

7. International Data Transfers

Our primary servers are located in Taiwan, but some service providers operate from other countries. When we transfer data internationally, we ensure adequate protection through:

• Standard contractual clauses approved by Taiwan's data protection authorities
• Verification that recipient countries provide adequate data protection
• Binding corporate rules for service providers with international operations
• Encryption during transit and storage regardless of location

8. Cookies and Tracking

Like most websites, we use cookies and similar technologies. Here's what that means:

Essential Cookies

These keep the platform functional and remember your login status. You can't fully disable these without losing access to course features.

Analytics Cookies

Help us understand which course materials are most helpful and where students encounter difficulties. This data is aggregated and doesn't identify you personally.

Preference Cookies

Remember your settings like language preference, video quality, and notification preferences.

You can manage cookie preferences through your browser settings. Keep in mind that blocking certain cookies might affect platform functionality.

9. Children's Privacy

Our courses are designed for adults and professionals. We don't knowingly collect information from anyone under 16 years old. If you're a parent who discovers your child has provided us with personal information, contact us immediately and we'll delete it promptly.

10. Changes to This Policy

We review and update this policy periodically to reflect new practices, technologies, or legal requirements. When we make significant changes, we'll notify you via email and display a prominent notice on the platform for at least 30 days.

Continuing to use our services after notification means you accept the updated policy. If you disagree with changes, you can close your account before they take effect.

11. Taiwan-Specific Provisions

As a company operating in Taiwan, we comply fully with the Personal Data Protection Act (PDPA). This includes:

• Obtaining explicit consent for data collection and specific uses
• Providing clear notification about data collection purposes
• Maintaining appropriate security measures as defined by Taiwan regulations
• Respecting your rights to access, correct, and delete personal data
• Reporting any data breaches to authorities and affected individuals as required

You have the right to file complaints with Taiwan's National Development Council if you believe we've violated your privacy rights.