Last updated: 17 August 2026. This is a courtesy translation; the Traditional Chinese version governs in case of any discrepancy.
1. Who we are
This website (paocan-herb.com) is operated by Pao Can Biomedical Co., Ltd., a non-government agency as defined in Taiwan's Personal Data Protection Act (PDPA).
- Address: No. 1, Yonghan Rd., Xinshi Dist., Tainan City 744, Taiwan
- Telephone: +886-6-2430889 ext. 502
- Email: [email protected]
2. What we collect
2.1 Data you provide
When you use the enquiry form we collect the following fields:
| Field | Required |
|---|---|
| Contact name | Yes |
| Business email | Yes |
| Company / organisation | No |
| Budget range | Yes |
| Biggest challenge | Yes |
| Additional details | No |
Please note: "Additional details" is a free-text field. Please include only what is needed to discuss your project. Do not enter national ID numbers, financial account details, health information or medical records. We do not need such data to answer your enquiry.
2.2 Data recorded automatically
When you submit the form, the server also records your IP address, browser user-agent string and the time of submission. These are used solely to prevent spam and to investigate abnormal traffic. They are not used to profile your browsing behaviour.
2.3 What we do not do
- This site does not use Google Analytics, Facebook Pixel or any advertising tracker
- This site does not place tracking cookies in your browser
- We do not sell, trade or rent your personal data, and we do not pass it to marketers
3. Purpose and legal basis
We collect your data for these specific purposes only, as classified under the PDPA:
- 040 Marketing — responding to enquiries you initiate
- 069 Contractual or quasi-contractual matters — assessing feasibility, quoting, and follow-up
- 090 Consumer and customer management and service
The legal basis is PDPA Article 19(1)(2) (a contractual or quasi-contractual relationship exists) and Article 19(1)(5) (your consent). Ticking the consent box on the form constitutes that consent.
4. Retention, location, recipients and method
4.1 Retention period
Enquiry records are kept for three years from receipt, then deleted. If a business relationship is formed, records are kept for the period required by Taiwan's Business Accounting Act and tax regulations. You may ask us to delete your data earlier at any time (see section 6).
4.2 Location
Enquiry data is stored on our leased web server physically located in Tokyo, Japan (provider: Akamai Connected Cloud / Linode). Notification emails are transmitted and stored through Google's Gmail service and may reside on Google servers outside Taiwan.
In other words, your data is transferred outside Taiwan. Japan has been recognised by the EU as providing an adequate level of data protection, and Taiwan currently imposes no restriction on international transfers to Japan. Should the competent authority issue such a restriction, we will comply and update this page.
4.3 Recipients
Access is limited to our own sales and customer-service staff. We do not disclose your data to third parties, except:
- technical service providers necessary to operate this website (see section 5)
- where required by law, or by a judicial or administrative authority following due process
4.4 Method
Stored as electronic files on the server, with an email notification to our staff. A member of staff reviews it and contacts you.
5. Third-party services used by this site
To make the site work, your browser connects to the following services, which may receive your IP address as a technical necessity:
| Service | Provider | Purpose |
|---|---|---|
| Cloudflare | Cloudflare, Inc. | Site acceleration and protection. May set strictly necessary cookies (e.g. __cf_bm) to identify malicious traffic; not used for marketing. |
| Google Fonts | Google LLC | Web font delivery |
| Unsplash | Unsplash Inc. | Illustrative photography on some pages |
| Gmail | Google LLC | Delivering enquiry notifications to us |
| YouTube (no-cookie mode) | Google LLC | Video playback in some articles. We embed via youtube-nocookie.com, so no tracking cookie is set until you press play. |
Our footer links to Facebook, LinkedIn and LINE. Following those links takes you off this website; those platforms handle personal data under their own privacy policies, which are outside the scope of this policy.
6. Your rights
Under PDPA Article 3, in respect of the personal data we hold about you, you may:
- enquire about it and request to review it
- request a copy
- request supplementation or correction
- request that we cease collecting, processing or using it
- request deletion
To exercise these rights, email [email protected] or call +886-6-2430889 ext. 502. To protect you, we may need to verify your identity first. We will respond within 15 days of receiving your request; where necessary this may be extended once by a further 15 days, and we will notify you in writing of the reason. Under Article 14, we may charge the necessary cost of providing copies.
7. If you choose not to provide data
Providing personal data is entirely voluntary. If you do not complete the required fields, we will not be able to handle your enquiry through the form. This does not prevent you from contacting us another way — you can still call +886-6-2430889 ext. 502 or email [email protected].
8. Security measures
- The entire site is served over HTTPS; form contents are not transmitted in clear text
- Enquiry data is stored outside the web root and cannot be reached by a browser
- The administration area is password-protected; passwords are stored only as irreversible hashes, and repeated failed logins trigger a temporary lockout
- Access is granted only to staff who need it to handle enquiries
We should be candid: no internet transmission or electronic storage can be guaranteed one hundred per cent secure. In the event of a data breach we will notify you by appropriate means once the facts are established, as required by PDPA Article 12.
9. Minors
This is a business-to-business website and is not directed at people under 18, nor do we knowingly collect their personal data. If you are under 18, please review this policy with your legal guardian, who should decide on your behalf whether to provide data.
10. Changes to this policy
We may revise this policy in response to legal or service changes. Revisions are published on this page with an updated "last updated" date. Where a change materially affects your rights, we will notify you by appropriate means. We suggest reviewing this page from time to time.
11. Contact us
- Pao Can Biomedical Co., Ltd.
- No. 1, Yonghan Rd., Xinshi Dist., Tainan City 744, Taiwan
- Telephone: +886-6-2430889 ext. 502 (Mon–Fri 08:30–17:30, Taiwan time)
- Email: [email protected]