Jingluo Digital

Privacy notice

How Jingluo Digital collects, uses, and protects the information you share through this website, and the choices you have.

The short version

  • We collect what you send us through our contact form, by email, or by phone, plus limited technical and analytics data.
  • We use it to reply to you, work with you, and keep the site secure and useful. We don't sell it or use it for advertising.
  • Google Analytics cookies are optional. If you're in Europe, they stay off unless you accept; elsewhere, you can turn them off at any time.
  • Our main service providers are Cloudflare and Google. We're based in Taiwan, and our providers may process data in the United States and other countries.
  • You can ask to see, correct, or delete your information at any time by emailing service@jingluo-digital.com.

Who we are

Jingluo Digital Co., Ltd. (鯨絡數位有限公司) is a digital marketing agency based in Taiwan. We're the controller of the personal information described in this notice, which means we decide why and how it's used. This notice covers the English pages of jingluo-digital.com (under /en/) and the information you share with us through them, by email, or by phone.

For privacy questions or requests, email us and put "Privacy" in the subject line.

What we collect

Information you give us

  • Contact form: your name, company or brand, email address, phone number, the services you're interested in, your monthly budget range, your preferred start time, your main challenge, a few details about what you need, and your confirmation that you've read our notice.
  • Email and phone: whatever you choose to share when you contact us directly.
  • If you become a client: project communications, agreements, and billing details.

Please don't include sensitive information, such as health details or bank account numbers, in your message.

Information collected automatically

  • Technical information: our hosting provider, Cloudflare, processes your IP address, browser and device details, the pages you request, the page that referred you, and the time of each request so it can deliver and protect the site.
  • Spam protection: when you submit the contact form, we use your IP address to limit repeated submissions. That counter expires after about 10 minutes.
  • Cloudflare Web Analytics: this gives us aggregate traffic numbers. Cloudflare states that it doesn't use cookies or local storage or fingerprint visitors.
  • Google Analytics, if it's on for you: the pages you visit, how you arrived, your approximate location, your device and browser type, and interactions such as scrolling, copying our email address or phone number, and clicks on our email, phone, and contact links. When you use the contact form, we record only the service, budget, start time, and challenge options you selected, which required fields were left empty, and whether the form was sent. We never send your name, email address, phone number, or message to Google Analytics.
  • Your cookie choice and, if needed, the country your connection comes from, stored in your browser (see "Cookies and analytics").

How we use it and why

The table shows what we use your information for and, if you're in the European Economic Area (EEA) or the UK, the legal basis we rely on under the GDPR or the UK GDPR.

PurposeInformation usedLegal basis (EEA and UK)
Reply to your inquiry, discuss your needs, and send you a quoteContact form, email, and phone detailsSteps you ask us to take before entering into a contract; our legitimate interest in responding to business inquiries
Provide our services and manage our relationship if you become a clientContact, project, and billing detailsPerformance of a contract with you, or our legitimate interest in managing our relationship with your organization
Keep business, tax, and accounting recordsAgreements, invoices, and related correspondenceOur legitimate interest in complying with Taiwan's tax and accounting laws and keeping accurate records
Keep the website and contact form secure and prevent spam and abuseTechnical information, including your IP addressOur legitimate interest in running a secure website
Measure overall site trafficAggregate, cookie-free data from Cloudflare Web AnalyticsOur legitimate interest in maintaining and improving the site
Understand which pages are usefulGoogle Analytics dataYour consent
Comply with the law and protect our rightsAny of the above, as neededOur legitimate interest in complying with the law and protecting our business

Where we rely on legitimate interests, we've weighed them against your rights, and you can ask us for details. Under Taiwan's Personal Data Protection Act, we collect and use this information for purposes that include handling inquiries and contracts, customer management and service, and information and network security.

Giving us your contact details is voluntary, but without them we can't reply to your inquiry. We don't make decisions about you based solely on automated processing, including profiling.

Cookies and analytics

We keep cookies and similar technologies to a minimum:

NameSet byPurposeHow long
jl-consent (local storage)Jingluo DigitalRemembers your analytics choice so we don't ask on every pageUntil you clear it
jl-loc (session storage)Jingluo DigitalRemembers the country Cloudflare reports for your connection, so we know whether to ask before turning on analyticsUntil you close the tab
_gaGoogle AnalyticsDistinguishes one visitor from another2 years after your last visit
_ga_TGX5R2V5C7Google AnalyticsKeeps track of your visit (session)2 years after your last visit

Cloudflare may also set strictly necessary security cookies, such as __cf_bm, to tell people and bots apart (usually for 30 minutes). They aren't used for analytics or advertising.

How your choice works

  • If your device is set to a European time zone, or if Cloudflare reports that your connection comes from the EEA, the UK, or Switzerland, Google Analytics stays off unless you turn it on. As a further backstop, Google keeps analytics cookies off by default for visitors it locates in those regions.
  • Elsewhere, Google Analytics is on by default, and you can turn it off at any time.
  • If your browser sends a Global Privacy Control (GPC) signal, we treat it as a request to keep analytics off, unless you turn it on yourself.
  • When analytics is off, we don't load Google Analytics. If you turn it off while it's on, we delete the Google Analytics cookies and stop sending data to Google Analytics.

How Google handles analytics data

Google acts as our service provider (processor) for Google Analytics under the Google Ads Data Processing Terms. We've turned off Google advertising features, Google signals, and ad personalization, and we've turned off the settings that would let Google use our analytics data to improve its own products. Google uses your IP address to estimate your general location; for visitors in the EU, the UK, and Switzerland, Google states that it doesn't log or store IP addresses.

Our site doesn't respond to Do Not Track signals, because there's no common standard for them; we honor Global Privacy Control as described above. We don't allow third parties to use our site to track you across other websites.

You can change your choice at any time with the button below or the "Cookie settings" link in the site footer. You can also block or delete cookies in your browser settings.

Who we share it with

We share personal information only as described here:

  • Cloudflare: website hosting, content delivery, security, contact form handling, and cookie-free web analytics.
  • Google: Google Workspace for our business email, where your inquiry is stored; Google Apps Script, which delivers contact form messages to our inbox; and Google Analytics.
  • Professional advisers, such as accountants and lawyers, when needed and under a duty of confidentiality.
  • Courts, regulators, or law enforcement when the law requires it, or when needed to protect our rights or someone's safety.
  • A buyer or successor if our business is reorganized, merged, or sold. They would have to handle your information in line with this notice.

Cloudflare and Google act as our processors and handle personal information on our behalf under their data processing terms. We don't sell personal information, and we don't share it for cross-context behavioral advertising or targeted advertising.

International transfers

We're based in Taiwan, so when you send us information, it comes to us in Taiwan. Our service providers may process it in the United States and other countries where they operate. These countries may not have the same data protection laws as yours. For example, neither the European Commission nor the UK government has recognized Taiwan as providing an adequate level of data protection.

When our service providers process information about people in the EEA, the UK, or Switzerland outside those regions, we rely on safeguards such as the European Commission's Standard Contractual Clauses, the UK International Data Transfer Addendum, and, where a provider is certified, the EU-U.S. Data Privacy Framework and its UK and Swiss extensions. You can ask us for a copy of these safeguards.

How long we keep it

  • Inquiries that don't lead to a project: as long as we need them to respond and follow up, then we delete them. You can ask us to delete yours sooner.
  • Client records: for as long as we work together, and afterward for as long as the law requires. Taiwan's Business Entity Accounting Act requires us to keep accounting vouchers for at least 5 years, and accounting books and financial statements for at least 10 years, after the annual closing.
  • Contact form rate-limit counters: about 10 minutes.
  • Cloudflare technical and security logs: for limited periods under Cloudflare's own retention policies.
  • Google Analytics: user-level and event-level data is kept for 14 months; aggregated reports can be kept longer. Google Analytics cookies last up to 2 years after your last visit unless you delete them or turn analytics off.
  • Your cookie choice: until you clear it from your browser. The connection country we check: until you close the tab.

How we protect it

We protect your information with encrypted connections (HTTPS), strict browser security policies, and access limited to the people who need it. We also work with established providers that maintain their own security programs. No method of transmission or storage is completely secure. If a data breach affects your information, we'll notify you and the relevant authorities as required by law.

Your rights

Your rights depend on where you live. In every case, you can contact us and we'll help.

  • Everyone: under Taiwan's Personal Data Protection Act, you can ask to review your personal information or get a copy, have it supplemented or corrected, have us stop collecting, processing, or using it, or have it deleted.
  • EEA, UK, and Switzerland: you can also ask us to restrict how we use your information or to give it to you in a portable format. Where we rely on your consent, you can withdraw it at any time; this doesn't affect what we did before you withdrew it. You can also lodge a complaint with a data protection authority, such as the authority where you live or work in the EEA, the Information Commissioner's Office in the UK, or the Federal Data Protection and Information Commissioner in Switzerland. We'd appreciate the chance to address your concern first.
  • United States: depending on your state, privacy laws may give you the right to know about, access, correct, delete, and get a copy of your personal information, and to opt out of its sale, sharing, or use for targeted advertising. We don't sell or share personal information or use it for targeted advertising. We won't treat you differently for exercising your rights. You can use an authorized agent; we'll ask for proof that they can act for you. If we decline your request, you can appeal by replying to our decision.

Right to object: where we rely on legitimate interests, you can object at any time. We'll stop unless we have compelling legitimate grounds that override your interests or we need the information to establish, exercise, or defend legal claims.

To make a request, email service@jingluo-digital.com. To protect your information, we may need to confirm your identity, for example by replying from the email address you used with us. We respond within the time the applicable law requires, which under the GDPR is one month, and we don't charge a fee unless the law allows one.

Children

This site is meant for businesses and isn't directed at children. We don't knowingly collect personal information from anyone under 16. If you believe a child has sent us information, please contact us and we'll delete it.

Other websites

Our site links to other websites and services, such as Google Maps. Their own privacy policies apply when you visit them.

Changes to this notice

If we change how we handle personal information, we'll update this page and the date below. If the change is significant, we'll also make it clear on the site.

Last updated: