Privacy Policy

1. Introduction

Cedrus Legal is committed to protecting the privacy and confidentiality of personal information entrusted to us by clients and website visitors. This Privacy Policy explains how we collect, use, store, and protect your personal data in accordance with Taiwan's Personal Data Protection Act and applicable data protection regulations.

By engaging our services or using our website, you acknowledge that you have read and understood this Privacy Policy. If you have questions about our data practices, please contact us at [email protected].

2. Information We Collect

We collect personal information necessary to provide professional immigration services and maintain our client relationships:

Information You Provide Directly

• Contact information: name, email address, phone number, mailing address
• Identification documents: passport details, national identification numbers
• Professional information: employment history, educational qualifications, business details
• Family information: spouse and dependent details when relevant to immigration applications
• Financial information: bank statements, investment documentation as required for specific visa categories
• Health information: medical examination results when required by immigration authorities
• Correspondence: emails, messages, and other communications with our firm

Information Collected Automatically

• Website usage data: IP address, browser type, device information, pages visited
• Cookies and similar technologies: session information, preferences, analytics data
• Communication metadata: timestamps, delivery status of emails and messages

3. How We Use Your Information

We process personal information for the following purposes:

• Service Delivery: Preparing and submitting immigration applications, communicating with immigration authorities, coordinating with third-party service providers
• Client Communication: Responding to inquiries, providing updates on application status, sending appointment reminders
• Legal Compliance: Meeting professional obligations under Taiwan Bar Association rules, complying with immigration reporting requirements, maintaining required records
• Business Operations: Processing payments, maintaining client files, managing appointments and scheduling
• Website Improvement: Analyzing usage patterns, improving user experience, ensuring website security
• Marketing: Sending newsletters and updates about immigration law changes (only with your consent, which you may withdraw at any time)

4. Legal Basis for Processing

We process personal data based on the following legal grounds:

• Contract Performance: Processing necessary to fulfill our service agreement with you
• Legal Obligation: Compliance with professional licensing requirements and immigration regulations
• Legitimate Interests: Maintaining client relationships, improving services, protecting against fraud
• Consent: Marketing communications and optional services (you may withdraw consent at any time)

5. Data Sharing and Disclosure

We share personal information only in the following circumstances:

With Immigration Authorities

We submit your information to Taiwan immigration offices and related government agencies as necessary for processing your applications. This disclosure is required for service delivery and occurs only with your explicit authorization.

With Service Providers

We engage vetted third parties to support our services:

• Certified translators for document translation
• Notary services for document authentication
• Courier services for document delivery
• IT service providers for secure data storage and email services

All service providers are contractually bound to protect your information and use it only for specified purposes.

Legal Requirements

We may disclose information when required by law, court order, or government regulation, or when necessary to protect our legal rights or the safety of others.

6. Data Security

We implement comprehensive security measures to protect your personal information:

• Encryption: Data transmitted to and from our systems uses SSL/TLS encryption
• Access Controls: Personal information is accessible only to authorized staff who need it for their duties
• Secure Storage: Digital files are stored on encrypted servers with restricted access
• Physical Security: Paper documents are stored in locked cabinets within secure office premises
• Regular Audits: We conduct periodic security reviews and update protection measures as needed
• Staff Training: All team members receive training on data protection practices and confidentiality obligations

While we employ industry-standard security practices, no system is completely secure. We cannot guarantee absolute security but continuously work to protect your information from unauthorized access, alteration, or destruction.

7. Data Retention

We retain personal information for the following periods:

• Active Client Files: Duration of engagement plus seven years (as required by professional practice standards)
• Consultation Records: Three years from consultation date
• Financial Records: Seven years from transaction date (as required by Taiwan tax regulations)
• Marketing Communications: Until you unsubscribe or request deletion
• Website Analytics: Anonymized after 26 months

After retention periods expire, we securely delete or anonymize personal information unless longer retention is required by law or necessary for legal proceedings.

8. Your Rights

Under Taiwan's Personal Data Protection Act and applicable regulations, you have the following rights:

• Right of Access: Request copies of personal information we hold about you
• Right to Rectification: Request correction of inaccurate or incomplete information
• Right to Erasure: Request deletion of your personal data in certain circumstances
• Right to Restrict Processing: Request limitation on how we use your information
• Right to Data Portability: Receive your data in a structured, commonly used format
• Right to Object: Object to processing based on legitimate interests or for marketing purposes
• Right to Withdraw Consent: Withdraw consent for processing that requires it

To exercise these rights, contact us at [email protected]. We will respond to requests within 30 days and may need to verify your identity before processing certain requests. Note that some rights are subject to limitations, such as when retention is required by law or necessary for legal proceedings.

9. Cookies and Tracking Technologies

Our website uses cookies and similar technologies:

• Essential Cookies: Required for website functionality, session management, and security
• Analytics Cookies: Help us understand how visitors use our website (Google Analytics)
• Preference Cookies: Remember your settings and choices

You can manage cookie preferences through your browser settings. For detailed information about our cookie practices, please see our Cookie Policy.

10. Third-Party Links

Our website may contain links to external websites operated by third parties. We are not responsible for the privacy practices or content of these external sites. We recommend reviewing the privacy policies of any third-party websites you visit.

11. Children's Privacy

Our services are intended for adults aged 18 and over. We do not knowingly collect personal information from children under 18 without parental consent. If we become aware that we have inadvertently collected such information, we will promptly delete it.

12. International Data Transfers

While we primarily operate within Taiwan, some service providers may process data in other jurisdictions. When we transfer personal information internationally, we ensure appropriate safeguards are in place, such as standard contractual clauses or adequacy decisions.

13. Changes to This Policy

We may update this Privacy Policy periodically to reflect changes in our practices, legal requirements, or business operations. We will post any changes on this page and update the "Last Updated" date. For material changes, we may provide additional notice such as email notification to active clients. Continued use of our services after changes become effective constitutes acceptance of the updated policy.

14. Contact Information

For questions about this Privacy Policy or our data practices, please contact:

15. Supervisory Authority

If you believe we have not adequately addressed your privacy concerns, you have the right to lodge a complaint with Taiwan's National Development Council or other relevant supervisory authority responsible for data protection matters.