Privacy Policy
ISOPTIK Co., Ltd. ("we," "us," or "our") recognizes the importance of protecting your Personal Data (as defined below). This Privacy Policy ("Policy") explains how we collect, use, disclose, and/or cross-border transfer your personal data obtained from various sources, as well as your rights and practices regarding such data.
1. What is Personal Data?
“Personal Data” means any information relating to an individual which enables the identification of such individual, whether directly or indirectly, but excluding information of deceased persons in particular.
2. Personal Data We Collect
The personal data we collect depends on your relationship with us and the services or products you require. The personal data we may collect, use, disclose, and/or transfer includes, but is not limited to:
- Personal details: Title, first name, last name, gender, age, occupation, job title, workplace, education, nationality, date of birth, marital status, government-issued ID information (e.g., ID card number, passport number, tax ID, driver's license number, etc.), signature, voice recordings, phone recordings, photographs, CCTV footage, house registration, and other identifiers.
- Contact details: Address, phone number, fax number, location data, email address, LINE ID, Facebook account, Instagram ID, and other social media IDs.
- Technical details: Internet Protocol (IP) address, browser type and version, browsing behavior and patterns, cookies, Device ID, device model and type, access duration, and location.
Sensitive Data: We will not use sensitive personal data such as race, ethnicity, political opinions, cults, religious or philosophical beliefs, sexual behavior, criminal records, health data, disability, trade union information, genetic data, or biometric data, except where permitted by law or with your explicit consent.
Note: You must ensure that all personal data provided is complete, accurate, and truthful.
3. Methods of Collection
We may receive and collect your personal data through the following methods:
- Data you provide directly: When you contact us for inquiries, fill out online or paper forms, subscribe to newsletters, register for products/services/benefits, or provide feedback.
- Data collected automatically: Technical information regarding your device and browsing patterns collected via cookies and similar technologies (we will notify you before use).
4. Purposes and Legal Bases for Processing
We collect, use, and disclose personal data for the following purposes:
- Provision of Products and Services: To manage, enter into, and perform our obligations under contracts; process payments (verification, confirmation, cancellation); handle product warranties and related services.
- Registration and Identity Verification: To verify your identity for registration and service access.
- Business Improvement: To evaluate, analyze, and conduct research/surveys to develop our systems, product quality, and safety. This includes analyzing consumer trends, behaviors, and preferences to create aggregate/anonymous reports.
- Relationship Management: To communicate regarding products/services, process membership updates, provide assistance, and respond to inquiries.
- Marketing and Communication: To provide news, public relations, and promotions via website, email, phone, SMS, MMS, or social media.
- IT Management: For system operations, communication management, IT security audits, and internal compliance.
- Legal Compliance: To comply with laws, regulations, and government orders.
- Risk and Protection: For risk management, security (CCTV), and protecting our legal rights/interests (e.g., detecting fraud or preventing property loss).
Legal Bases for Processing:
- Legal Obligation.
- Legitimate Interests (ours or third parties).
- Vital Interests (preventing danger to life/body/health).
- Public Interest/Exercise of official authority.
- Consent (where required for specific activities).
5. Disclosure of Personal Data
We may disclose your data to third parties for the purposes stated in this policy. These parties include:
- Legal Authorities: Government agencies, courts, or law enforcement as required by law.
- Advisors: Lawyers, technical experts, and auditors assisting our business or legal claims.
6. Data Retention Period
We retain personal data for as long as necessary to fulfill the purposes outlined in this Policy or as required by law. Once the data is no longer necessary or the legal retention period expires, we will delete or destroy it without prior notice.
7. Privacy of Minors
Our products and services are not intended for individuals under 20 years of age, quasi-incompetent, or incompetent persons. If you fall into these categories, you must obtain consent from a legal guardian/parent before providing data.
8. Your Rights
You hold the following rights regarding your personal data:
- Right to Access: Request access to or copies of your data.
- Right to Rectification: Request corrections to inaccurate or incomplete data.
- Right to Erasure: Request deletion of data (subject to legal exceptions).
- Right to Restriction: Request suspension of data use during verification or legal disputes.
- Right to Object: Object to data processing for legitimate interests or direct marketing.
- Right to Portability: Request your data in a machine-readable format.
- Right to Withdraw Consent: Withdraw consent at any time (does not affect prior processing).
- Right to Complain: Lodge a complaint with the Personal Data Protection Committee.
9. Policy Changes
We may update this Policy periodically to reflect changes in our practices or the law. We will notify you of changes through our communication channels.