Who We Are

Mindflowenergy operates from our office in Nantou County, Taiwan, providing performance testing and optimization services to businesses across the region and beyond. When we say "we," "us," or "our" in this policy, we're talking about Mindflowenergy and the team that keeps things running.

Our registered address: No. 450, Minquan Rd, Shuili Township, Nantou County, Taiwan 553

What Information We Collect

We only collect information that helps us do our job better. Nothing more, nothing less.

Information You Give Us Directly

• Contact details: Your name, email address, phone number, and company information when you reach out or sign up for our services
• Project information: Details about your systems, performance requirements, and technical specifications needed for testing
• Payment data: Billing information processed through secure third-party payment processors (we don't store full credit card numbers)
• Communication records: Emails, messages, and notes from our conversations about your projects

Information We Collect Automatically

• Website usage data: IP addresses, browser types, pages visited, and how long you spend on our site
• Technical logs: Server logs, error reports, and performance metrics from testing sessions
• Device information: Operating system, screen resolution, and other technical details that help us provide better service

How We Use Your Information

Everything we collect serves a practical purpose. Here's what we actually do with your data:

Purpose	What This Means
Service Delivery	Running performance tests, analyzing results, and providing optimization recommendations
Communication	Responding to inquiries, sending project updates, and discussing technical requirements
Billing & Administration	Processing payments, sending invoices, and maintaining client records
Service Improvement	Understanding how clients use our services and finding ways to make them better
Legal Compliance	Meeting our obligations under Taiwan law and maintaining proper business records

We don't sell your information to third parties. We're not in the data-selling business—we're in the performance testing business.

Legal Basis for Processing (Taiwan Context)

Under Taiwan's Personal Data Protection Act, we process your data based on:

• Contractual necessity: We need certain information to deliver the services you've hired us for
• Legitimate business interests: Improving our services and maintaining client relationships
• Legal obligations: Complying with tax laws, business regulations, and other legal requirements
• Your consent: When you've explicitly agreed to specific uses of your data

Who We Share Data With

We keep your information close to the chest, but sometimes we need to share it with specific partners to get work done:

Service Providers

• Cloud hosting providers: Where we store project data and run testing environments
• Payment processors: Companies that handle billing and payment transactions securely
• Email services: Tools we use to send project updates and communicate with clients
• Analytics tools: Basic website analytics to understand how people use our site

Legal Requirements

We may disclose information if required by Taiwan law, court order, or regulatory authorities. This doesn't happen often, but we're legally obligated to comply when it does.

Business Transfers

If Mindflowenergy were acquired or merged with another company, your information would transfer to the new entity. We'd notify you if this happens.

International Data Transfers

Some of our service providers operate servers outside Taiwan. When we transfer data internationally, we ensure:

• Transfers comply with Taiwan's Personal Data Protection Act
• Receiving countries provide adequate data protection
• Contractual safeguards are in place to protect your information
• Data is encrypted during transfer and storage

Most of our infrastructure stays within Asia-Pacific regions that maintain strong data protection standards.

How We Protect Your Data

Security isn't just good practice for us—it's literally what we do professionally. Here's how we protect your information:

• Encryption: Data is encrypted both in transit (using TLS/SSL) and at rest
• Access controls: Only team members who need access to do their jobs can view client data
• Regular security audits: We test our own systems regularly for vulnerabilities
• Secure facilities: Physical security measures at our office and data centers
• Staff training: Our team receives ongoing training on data protection practices

That said, no system is completely invulnerable. We maintain incident response procedures in case something does go wrong.

How Long We Keep Your Data

We don't hoard data indefinitely. Here's our retention approach:

• Active project data: Kept for the duration of our engagement plus 90 days
• Financial records: Retained for seven years as required by Taiwan tax law
• Contract documentation: Kept for the contract term plus three years
• Marketing communications: Until you unsubscribe or request deletion
• Website analytics: Aggregated data kept for 26 months, individual session data for 14 months

After these periods, we securely delete or anonymize your information unless we have a specific legal reason to keep it longer.

Your Rights

Under Taiwan's Personal Data Protection Act, you have several rights regarding your personal information. Here's what you can do and how to actually do it:

Access Your Data

You can request a copy of the personal information we hold about you. We'll provide this in a readable format within 30 days. There's no charge for the first request in a calendar year.

Correct Inaccurate Information

If something we have on file is wrong, let us know and we'll fix it. This usually happens within a week for simple corrections.

Request Deletion

You can ask us to delete your personal data, with some exceptions. We may need to keep certain information for legal compliance or to complete services you've paid for. We'll be upfront about what we can and can't delete.

Object to Processing

You can object to how we're using your information if you believe it's inappropriate or unnecessary. We'll review your concern and explain our reasoning.

Data Portability

Want to take your data to another service provider? We'll give you a copy in a commonly used format when technically feasible.

Withdraw Consent

If we're processing data based on your consent, you can withdraw that consent anytime. This won't affect any processing we did before you withdrew consent.

Children's Privacy

Our services aren't designed for anyone under 18. We don't knowingly collect information from minors. If we discover we've accidentally collected data from someone under 18, we'll delete it promptly.

Changes to This Policy

We update this policy occasionally as our practices evolve or laws change. When we make significant changes, we'll:

• Update the "Last Updated" date at the top
• Email active clients about material changes
• Post a notice on our website for 30 days

For minor clarifications or formatting changes, we'll just update the date. We recommend checking back periodically if privacy is a concern for you.

Third-Party Links

Our website might link to external resources, documentation, or tools. We're not responsible for how those sites handle your data. Check their privacy policies if you're concerned about what they collect.

Questions or Concerns

If something in this policy is unclear, or if you have concerns about how we're handling your data, reach out. We'd rather answer questions than have clients wondering what's happening with their information.

If you're not satisfied with our response, you have the right to file a complaint with Taiwan's National Development Council or the relevant supervisory authority.