What Information We Collect

We collect different types of information depending on how you interact with our platform. Here's the breakdown:

Account and Registration Data

When you sign up for courses or create an account, we need basic information to get you started. This includes your name, email address, phone number, and billing details if you're enrolling in paid programs.

We also track your learning progress, course completions, and assignment submissions. This helps us provide certificates and maintain accurate records of your achievements.

Technical Information

Like most websites, we collect technical data through your browser. IP addresses, device types, browser versions, and operating systems help us optimize the platform and troubleshoot issues.

We use cookies and similar technologies to keep you logged in and remember your preferences. You can disable cookies, but some features won't work properly without them.

Communications

When you email us, submit support tickets, or chat with our team, we keep records of those conversations. This helps us provide better support and improve our services based on actual feedback.

How We Use Your Information

We're not in the business of selling your data. Everything we collect serves a specific purpose related to providing educational services.

We send transactional emails about your courses, assignments, and account updates. Marketing emails are optional, and you can opt out anytime without affecting your access to educational content.

Data Sharing and Third Parties

We work with carefully selected service providers who help us run the platform. These companies only access data necessary for their specific functions and are bound by strict confidentiality agreements.

Service Providers We Use

• Cloud hosting providers for platform infrastructure and data storage
• Payment processors for handling transactions securely
• Email service providers for course notifications and communications
• Analytics tools to understand how students use the platform
• Customer support platforms for managing tickets and inquiries

Some data might be transferred outside Taiwan for processing. When this happens, we ensure adequate protection through standard contractual clauses and compliance frameworks.

Your Rights Under Taiwan Law

Taiwan's Personal Data Protection Act gives you significant control over your information. Here's what you can do:

Access and Portability

You can request a copy of all personal data we hold about you. We'll provide it in a structured, commonly used format within 30 days. If you want to transfer your learning history to another platform, we'll help make that happen.

Correction and Updates

Found outdated or incorrect information? You can update most details directly in your account settings. For changes requiring verification, contact our support team at contact@evolvwave.dev.

Deletion Rights

You can request deletion of your account and associated data. We'll comply unless we're required to keep certain records for legal or contractual obligations. For example, we retain transaction records for tax compliance purposes.

Processing Restrictions

You can ask us to limit how we use your data while we investigate a dispute or verify accuracy. During this period, we'll only store the information, not actively process it.

Objection Rights

You can object to processing based on legitimate interests. We'll stop unless we demonstrate compelling legitimate grounds that override your interests.

Data Security Measures

Security isn't just a checkbox for us. We implement multiple layers of protection to keep your information safe from unauthorized access, disclosure, or destruction.

• All data transmissions use industry-standard TLS encryption
• Sensitive information is encrypted at rest using AES-256
• Access controls ensure only authorized personnel can view personal data
• Regular security audits and penetration testing identify vulnerabilities
• Automated backup systems prevent data loss from hardware failures
• Security incident response procedures enable rapid threat containment

Despite our best efforts, no system is completely impenetrable. If a data breach affects your information, we'll notify you within 72 hours as required by law and explain what happened, what data was involved, and what steps we're taking.

Data Retention Periods

We don't keep your data forever. Retention periods depend on the type of information and legal requirements.

Active Accounts

While your account is active, we maintain all associated data to provide continuous service. Learning records, course progress, and certificates remain accessible indefinitely as part of your educational history.

Inactive Accounts

If you haven't logged in for 36 months, we'll send a reminder email before archiving your account. Archived accounts retain core learning records but remove unnecessary personal details.

Deleted Accounts

After account deletion, most personal data is removed within 90 days. We retain minimal information for legal compliance, such as transaction records required for tax purposes (kept for seven years under Taiwan law).

Communications

Support tickets and email correspondence are kept for three years to help resolve recurring issues and improve service quality.

Cookies and Tracking Technologies

We use cookies to make the platform work properly and understand how people use it. Here's what's running:

Essential Cookies

These keep you logged in and remember your preferences. They're necessary for basic functionality, so you can't opt out without breaking the site.

Analytics Cookies

We track page visits, session duration, and feature usage to identify what works and what doesn't. This data is anonymized and helps us prioritize improvements.

Managing Cookie Preferences

You can control non-essential cookies through your browser settings or our preference center. Disabling analytics cookies won't affect your ability to use the platform.

Children's Privacy

Our platform is designed for adult learners. We don't knowingly collect information from anyone under 18 years old without parental consent.

If we discover that we've inadvertently collected data from a minor, we'll delete it promptly. Parents or guardians who believe their child has provided information without permission should contact us immediately.

International Data Transfers

While we're based in Taiwan, some service providers operate servers in other countries. When your data crosses borders, we ensure adequate protection through:

• Standard contractual clauses approved by data protection authorities
• Privacy Shield frameworks where applicable
• Binding corporate rules for multi-national service providers
• Adequacy decisions recognizing equivalent protection levels

You can request details about specific transfers and the safeguards we've implemented for any particular service provider.

Changes to This Policy

Technology evolves, regulations change, and our platform grows. When we update this policy, we'll post the revised version here with a new effective date.

Significant changes will trigger email notifications to active users at least 30 days before taking effect. Continued use of the platform after changes constitute acceptance of the updated terms.

You can always review previous versions by contacting us. We maintain an archive of policy changes for transparency.