Privacy Policy

Last Updated: 27 July 2026

This Privacy Policy explains how API Solutions ("we", "us", "our") collects, uses, stores, and protects personal data obtained through the website apisolutions.digital and related service enquiries. We operate in compliance with Taiwan's Personal Data Protection Act (個人資料保護法, PDPA) and applicable international data protection standards.

Data We Collect

  • Contact form submissions: name, company name, email address, phone number, and the content of your enquiry message.
  • Technical data: IP address, browser type, device type, referring URL, and pages visited, collected automatically via server logs and analytics tools.
  • Cookie data: preferences and session identifiers stored in browser cookies. See our Cookie Policy for full detail.
  • Correspondence: email content and attachments exchanged directly with our team.

We do not collect sensitive personal data (as defined under PDPA Article 6) through this website.

How We Use Your Data

  • To respond to enquiries submitted through the contact form or by email.
  • To schedule and administer audit engagements with clients.
  • To maintain records of business communications as required for legitimate business operations.
  • To analyse website usage patterns for the purpose of improving website performance and content.
  • To comply with legal obligations under Taiwanese law.

We do not use personal data for automated decision-making or profiling. We do not sell personal data to third parties.

Legal Basis for Processing

Under the Personal Data Protection Act (PDPA), we process personal data on the following bases:

  • Consent: where you have ticked the privacy checkbox on our contact form or accepted cookies through our consent interface.
  • Contractual necessity: where processing is required to fulfil a service engagement you have entered into with us.
  • Legitimate interests: for website analytics and security monitoring, where our interests do not override your rights.
  • Legal obligation: where processing is required to comply with applicable Taiwanese law.

Data Retention

  • Contact form data is retained for up to 24 months from the date of submission, or longer if an active business relationship exists.
  • Client engagement records are retained for a minimum of 5 years following the conclusion of an engagement, in accordance with standard business record-keeping requirements.
  • Website analytics data is retained in aggregated, anonymised form and is not linked to individual identities after 13 months.
  • Cookie data is retained according to the individual cookie lifespans described in our Cookie Policy.

Data Sharing

We share personal data only in the following circumstances:

  • Service providers: third-party tools used to operate this website, including hosting providers and analytics platforms, operate under data processing agreements and are not permitted to use your data for their own purposes.
  • Legal requirements: we may disclose personal data to competent authorities in Taiwan where required by law, court order, or regulatory obligation.
  • Business transfers: in the event of a merger, acquisition, or sale of business assets, personal data may be transferred to the successor entity, subject to equivalent privacy protections.

We do not share personal data with advertising networks or data brokers.

International Transfers

Where personal data is transferred outside Taiwan, we ensure appropriate safeguards are in place consistent with PDPA requirements and any applicable guidance from the Personal Data Protection Commission. We will inform you of any such transfers where required by law.

Your Rights Under PDPA

Under Taiwan's Personal Data Protection Act, you have the right to:

  • Inquire about and review your personal data held by us.
  • Request a copy of your personal data.
  • Request correction of inaccurate personal data.
  • Request deletion of personal data, subject to any legal retention obligations.
  • Request that we cease processing or using your personal data.
  • Object to processing where it is based on legitimate interests.

To exercise any of these rights, contact us at info@apisolutions.digital. We will respond within the timeframes required under the PDPA.

Security Measures

We implement technical and organisational measures appropriate to the risk of processing, including encrypted data transmission (HTTPS), access controls limiting data access to authorised personnel, and regular review of data handling practices. No transmission over the internet is entirely secure; we cannot warrant absolute security but we take reasonable steps to protect personal data.

Cookies

This website uses cookies. For full information on what cookies we use, their purpose, and how to manage your preferences, see our Cookie Policy.

Changes to This Policy

We may update this Privacy Policy from time to time. The date at the top of this page reflects when the policy was last revised. Material changes will be noted on this page. Continued use of this website after changes are posted constitutes acceptance of the updated policy.

Contact

For privacy-related enquiries or to exercise your rights: