Privacy notice

This notice explains how Tech Security Flow (“we”) handles personal data collected through https://techsecurityflow.digital and during fintech audit engagements.

Data controller

Tech Security Flow, 5244 N 3rd Street, 澎湖市, 福建省, Taiwan. Contact: hello@techsecurityflow.digital, +886-9-459-1722.

Data we collect

• Contact details you submit (name, email, phone, company, message content)
• Technical logs such as IP address, browser type, and pages viewed when analytics cookies are accepted
• Engagement evidence that may include employee names, role titles, and — under strict protocols — limited customer identifiers required for KYC or lending samples

Purposes & legal bases

We process contact-form data to respond to audit inquiries (legitimate interest / pre-contract steps). We process engagement data to perform the contracted audit and meet professional record-keeping duties. Analytics run only with consent where required.

Retention

Inquiry emails are kept up to 24 months after the last correspondence if no engagement follows. Engagement working papers and letters are retained for at least seven years, or longer if a regulator or dispute requires. Analytics data follows the durations in our cookies table.

Sharing

We use hosting and email providers who process data on our instructions. We do not sell personal data. We may share findings with parties you designate (board, statutory auditors) or when required by law.

International transfers

Our primary operations are in Taiwan. If a processor stores data outside Taiwan, we seek contractual safeguards appropriate to the destination and the sensitivity of the data. Customer PII from sampling stays in supervised environments whenever feasible.

Your rights

Subject to Taiwan Personal Data Protection Act requirements, you may request access, correction, deletion, or restriction of your personal data, and you may withdraw cookie consent without losing site access. Contact us using the details above. You may also lodge a complaint with the competent Taiwan authority.

Children

Our services are directed at business clients. We do not knowingly collect data from children.

Last updated: 28 July 2026