Privacy Policy

1.    Introduction
Tongtai Machine Tool Co., Ltd. (hereinafter referred to as "the Company," "we," or "us") values and is committed to protecting your personal data. This Policy explains how we collect, process, use, store, and protect your personal data when you visit this website, as well as your legal rights. We review and update this Policy periodically. Updates will be posted on this website, and we recommend checking them regularly.

2.    Scope of application
This Policy applies to the collection and processing of personal data through this website by the Company. It does not apply to linked third-party websites. Links to third-party websites do not imply the Company's endorsement or guarantee of their privacy practices. If you access a third-party website via these links, please refer to their respective privacy policies.

3.    Personal data we collect
 "Personal data" refers to any information that directly or indirectly identifies you. Depending on the services you use and your interactions with us, we may collect the following categories of personal data:

• Data provided voluntarily: Your name, company name, job title, email address, phone number, mailing address, and the content of your message submitted through contact forms, inquiry forms, surveys, or other interactive features.
• Data generated automatically: Your IP address, device and browser information, access times, browsing and click history, referring pages, and usage behavior data collected through cookies and similar technologies (see Section 5). In most cases, you can browse this website without providing personal data. However, if you fail to provide data necessary for specific services, we may be unable to fulfill your request.

4.    Purposes of collection
We collect and use your personal data only within specific, explicit, and legitimate purposes, which mainly include:

• Responding to your inquiries, quotes, and providing requested product or service information.
• Processing orders, providing customer support, and after-sales services.
• Providing information regarding products, events, or services that may interest you, subject to your consent.
• Notifying you of major changes to our website, services, or products.
• Maintaining and improving website operations and service quality, and conducting internal statistical analysis.
• Complying with legal obligations or requests from regulatory authorities.

5.    Use of cookies and similar technologies
Cookies are small text files stored on your device when you visit a website. They help the website remember your operations and preferences (such as language and display settings), eliminating the need to reconfigure them upon return. We request your consent via a "Cookie Consent Banner" upon your first visit. You can choose to accept or decline cookies, and modify your preferences at any time through this mechanism or your browser settings. You may also delete or block cookies, though some website features may not function properly as a result.

This website utilizes the following third-party services that place their own cookies:

1.       Google Analytics: A web analysis service provided by Google that helps us understand user behavior. Information generated regarding your website usage (including your IP address) may be transmitted to and stored on Google servers in the United States. This website has enabled IP anonymization; your IP address will be truncated within the EU/EEA, and the full IP address will only be sent to the U.S. under exceptional circumstances. We also use Google Analytics to evaluate Google Ads performance.

2.       Embedded YouTube videos: Some pages embed YouTube (Google) videos. When you visit these pages, your browser connects to YouTube servers. If you are logged into your YouTube account, YouTube may link your browsing behavior to your account. For more information on Google's data processing and your choices, please refer to Google's Privacy Policy. You can manage personalized ad preferences via Google's Ads Settings page.

6.    Data sharing and outsourcing
We do not disclose, exchange, rent, or sell your personal data to third parties, except under the following circumstances:

• With your consent or that of your designated agent.
• As required by law or regulatory authorities.
• To prevent danger to your life, body, freedom, or property.
• To prevent fraud and reduce credit risk.
• Shared with our affiliates, service providers, authorized agents, contractors, or professional advisors necessary to provide the products or services you requested.
• In connection with the transfer of all or part of the Company's business or assets to a third party. When sharing personal data with third parties, we only provide the minimum necessary data required for the service. We contractually obligate them to maintain confidentiality, process data strictly under our instructions, implement appropriate security measures, and fulfill our supervisory responsibilities.

7.    International data transfers
As a multinational group, the Company operates global affiliates (including European locations) and service providers. To operate and deliver services, we may transfer your personal data outside of Taiwan for processing and storage. When transferring data from the EU/EEA to a third country without an EU adequacy decision, the Company will implement appropriate safeguards required by the GDPR to ensure your data remains protected.

8.    Data retention and security
We retain your personal data only for the period necessary to fulfill the specific purposes of collection, generally not exceeding five years, unless otherwise required by law, business necessity, or with your consent. When the purpose expires, retention is no longer necessary, or the governing regulations are no longer applicable, we will stop processing and delete or destroy the data voluntarily or upon your request. 

We implement appropriate security measures regarding access, processing, transmission, and storage, including strict privilege control and information security protocols, to prevent data from being damaged, lost, stolen, leaked, altered, or accessed without authorization. In the event of a data breach or security incident, the Company will take necessary response measures and notify relevant parties in accordance with the Personal Data Protection Act and related regulations.

9.    Your rights
Regarding your personal data held by the Company, you have the following legal rights:

• To refuse to provide personal data (though we may be unable to provide the corresponding services).
• To inquire, request access to, or request a copy of your personal data.
• To request supplementation or correction of your data.
• To request the cessation of data collection, processing, or utilization.
• To withdraw your consent (withdrawal does not affect the lawfulness of processing based on consent before its withdrawal).
• To request the erasure of your personal data.
• To lodge a complaint with a regulatory authority regarding our processing of your data. You may exercise these rights using the contact methods in Section 11. To secure your data, we may request proof of identity to verify your request. We will process your request within the statutory period; however, law may permit us to refuse or restrict your request under certain circumstances (such as involving the rights of others or legal retention obligations), and we will explain the reasons accordingly.

10.    Amendments to this policy
We will amend this Policy periodically to reflect changes in laws, business operations, or services. Revised versions will be published on this website with an updated "Last Updated" date. We will notify you of major changes through appropriate channels.

11.    Contact us
To exercise your rights or if you have any questions regarding this Policy, our data processing, or cookie utilization, please contact us via email, our website contact form, or phone.