隱私權政策Privacy policy
源泉科技有限公司（以下稱「本公司」）重視你的隱私。本政策依《個人資料保護法》（以下稱「個資法」）說明本公司在網站 jubilees.life（以下稱「本網站」）蒐集哪些個人資料、為什麼蒐集、如何處理與保存，以及你可以行使的權利。本公司發行的 App 若有額外的資料處理方式，會在各 App 的隱私權頁面補充說明（見 App 頁面）。
一、蒐集者
- 名稱：源泉科技有限公司（Rejoicing fountain LTD.）
- 統一編號：50783302
- 地址：台北市信義區忠孝東路5段1之3號10樓
- 聯絡 Email：[email protected]
二、蒐集目的
本公司僅在下列目的範圍內蒐集、處理及利用你的個人資料（括號內為法務部公告之特定目的）：
- 回覆你的詢問、提供報價與後續服務（〇九〇 消費者、客戶管理與服務）。
- 與你洽談、成立及履行合約（〇六九 契約、類似契約或其他法律關係事務）。
- 維護本網站的安全與正常運作，例如限制送出頻率、偵測機器人與濫用（一三七 資通安全與管理）。
本公司目前不會將你的個人資料用於行銷。若未來要這麼做，會事先取得你的同意，你也可以隨時拒絕。
三、蒐集的個人資料類別
- 聯絡表單：姓名、Email、公司名稱（選填）、需求類型、需求說明，以及你送出時瀏覽的語言版本。這些資料屬於可辨識個人的資料（C001 辨識個人者）。
- IP 位址：送出表單時，用來限制同一來源的送出次數，以防止濫用。IP 位址只暫存在伺服器記憶體中，不會寫入資料庫，時間窗結束或伺服器重新啟動後即消失。
- 人機驗證：聯絡表單使用 Cloudflare Turnstile 判斷送出者是否為機器人。過程中 Cloudflare 會處理你的瀏覽器與裝置訊號（例如 IP 位址與瀏覽器特徵），用於防止濫用。
- 網站流量統計：本網站使用 Cloudflare Web Analytics 了解網站流量。它會蒐集彙總的瀏覽資料，例如瀏覽的頁面網址、來源網頁、瀏覽器與裝置類型、依 IP 位址判斷的國家或地區，以及頁面效能指標。詳見下方第七節。
- 伺服器紀錄：主機與網路服務會自動產生技術紀錄（例如請求時間、網址、IP 位址與瀏覽器類型），用於維運、除錯與資訊安全。
本公司不會刻意蒐集敏感性個人資料（例如病歷、健康或犯罪前科），請不要在表單中提供。
四、利用期間、地區、對象及方式
- 期間：詢問資料自收到之日起最多保存 2 年，期滿即刪除；若你與本公司已建立業務往來，則於往來期間，以及法令（例如稅務、會計相關法規）要求保存的期間內保存。伺服器紀錄只保存維運與資安所需的期間。
- 地區：資料儲存在本公司於 Amazon Web Services（AWS）東京區域（ap-northeast-1，日本）的資料庫；電子郵件透過 Google Workspace 傳送與保存；人機驗證訊號與網站流量統計資料由 Cloudflare 在其全球網路上處理。
- 對象：本公司內部需要處理你的詢問的人員，以及協助本公司提供服務的受託廠商：AWS（主機與資料庫）、Google（電子郵件）、Cloudflare（人機驗證、網路安全與網站流量統計）。除法令要求、主管機關依法要求或為保護本公司及他人權益外，本公司不會將你的個人資料提供給其他第三人，也不會出售。
- 方式：在上述目的範圍內，以自動化及非自動化方式蒐集、處理、利用及國際傳輸。
五、國際傳輸
由於上述服務供應商在台灣以外的地區（例如日本、美國及其他 Cloudflare 與 Google 營運的地區）儲存或處理資料（包括 Cloudflare, Inc. 處理的人機驗證訊號與網站流量統計資料），你的個人資料會傳輸到境外。本公司選擇具備業界標準安全措施的供應商，並遵循個資法的規定；若主管機關依法限制特定的國際傳輸，本公司將配合辦理。
六、你的權利
依個資法第 3 條，你可以就本公司保有的你的個人資料行使下列權利：
- 查詢或請求閱覽。
- 請求製給複製本。
- 請求補充或更正。
- 請求停止蒐集、處理或利用。
- 請求刪除。
請寄信至 [email protected]，註明你的姓名、你當初聯絡我們時使用的 Email，以及你想行使的權利。為保護你的資料，本公司會先確認你的身分。依個資法第 13 條，查詢、閱覽或製給複製本的請求，本公司會在 15 日內處理；補充、更正、停止蒐集處理利用或刪除的請求，會在 30 日內處理。必要時得各延長一次（分別不超過 15 日、30 日），並以書面告知原因。本公司目前不收取費用。
若法令要求本公司保存特定資料，或為履行與你的合約所必要，本公司得依法拒絕部分請求，並會告知理由。
你可以自由選擇是否提供個人資料。聯絡表單中的必填欄位若未填寫，本公司將無法回覆你的詢問；你也可以直接來信聯絡。
七、Cookie 與本機儲存
本網站不使用廣告 Cookie。本網站只在你的瀏覽器中使用一個必要的本機儲存（localStorage）項目，用來記住你選擇的「中英」對照顯示方式；這個項目不含個人資料，也不會傳送給本公司。Cloudflare Turnstile 在完成人機驗證時可能使用其運作所必要的技術機制。
本網站使用 Cloudflare Web Analytics 了解網站流量。這是一項重視隱私的服務，不使用 Cookie 或本機儲存來追蹤你，也不建立訪客的個人檔案。它會蒐集彙總的瀏覽資料，例如瀏覽的頁面網址、來源網頁、瀏覽器與裝置類型、依 IP 位址判斷的國家或地區，以及頁面效能指標。這些資料由 Cloudflare, Inc. 以本公司服務供應商的身分處理，可能在台灣以外的地區處理（見第五節）。本公司只用這些資料了解網站流量與改善內容，不用於廣告，也不用來識別個別訪客。更多資訊請見 Cloudflare 隱私權政策。
八、資料安全
本公司採取合理的技術與管理措施保護你的個人資料，例如全站以 HTTPS 加密傳輸、資料庫存取限制、帳號權限控管與最小權限原則，以及系統的定期更新與監控。不過任何網路傳輸或儲存方式都無法保證百分之百安全。若發生個人資料被竊取、洩漏或竄改等事故，本公司會依個資法查明後以適當方式通知你。
九、未成年人
本網站以企業與成年人為服務對象。若你未滿 18 歲，請在法定代理人同意下再提供個人資料。若本公司發現在未經同意的情況下蒐集了未成年人的資料，將予以刪除。
十、其他網站
本網站可能連結到其他網站（例如作品案例的客戶網站）。這些網站的隱私權做法由各網站自行負責，不適用本政策。
十一、政策修訂
本公司可能因法令、服務或技術的變化修訂本政策。修訂後的內容會公告在本頁，並更新頁面上的「最後更新」日期；若有重大變更，會在本網站明顯處提示。
十二、聯絡我們
對本政策或你的個人資料有任何問題，請來信 [email protected]，或寄送書面信件至：台北市信義區忠孝東路5段1之3號10樓 源泉科技有限公司。
Rejoicing fountain LTD. (源泉科技有限公司, "we", "us") cares about your privacy. In line with Taiwan's Personal Data Protection Act (the "PDPA"), this policy explains what personal data we collect on jubilees.life (the "Site"), why we collect it, how we handle and keep it, and the rights you have. If an app we publish handles data in additional ways, its own privacy page adds those details (see our apps).
1. Who we are
- Name: Rejoicing fountain LTD. (源泉科技有限公司)
- Tax ID (Business Registration No.): 50783302
- Address: 10F., No. 1-3, Sec. 5, Zhongxiao E. Rd., Xinyi Dist., Taipei City 110, Taiwan (R.O.C.)
- Email: [email protected]
2. Why we collect personal data
We collect, process and use personal data only for these purposes (the specific purposes defined by Taiwan’s Ministry of Justice are in brackets):
- To answer your inquiry and provide quotes and follow-up service [090 consumer and customer management and service].
- To discuss, enter into and perform a contract with you [069 contractual and similar legal relationships].
- To keep the Site secure and working, for example by rate-limiting submissions and detecting bots and abuse [137 information and communication security and management].
We do not currently use your personal data for marketing. If we ever want to, we will ask for your consent first, and you can say no at any time.
3. What we collect
- Contact form: your name, email, company (optional), topic, message, and the language version of the Site you used. This is data that identifies you [C001 identifying information].
- IP address: when you submit the form, we use it to limit how many submissions one source can send, to prevent abuse. It is held only in server memory, never written to our database, and is gone when the time window ends or the server restarts.
- Bot check: the contact form uses Cloudflare Turnstile to tell people from bots. To do this, Cloudflare processes signals from your browser and device (such as your IP address and browser characteristics) to prevent abuse.
- Site traffic statistics: the Site uses Cloudflare Web Analytics to understand traffic. It collects aggregated page-view data such as the page URL, the referrer, browser and device type, the country derived from your IP address, and page performance metrics. See section 7 below.
- Server logs: our hosting and network services automatically record technical data (such as request time, URL, IP address and browser type) for operations, debugging and security.
We do not intentionally collect sensitive personal data (such as medical, health or criminal records). Please do not include it in the form.
4. How long, where, by whom and how data is used
- How long: inquiries are kept for up to 2 years from receipt and then deleted. If you become a client, we keep the data for as long as we work together and for any period the law requires (for example tax and accounting rules). Server logs are kept only as long as operations and security require.
- Where: data is stored in our database on Amazon Web Services (AWS) in the Tokyo region (ap-northeast-1, Japan). Email is sent and stored through Google Workspace. Bot-check signals and site traffic statistics are processed by Cloudflare on its global network.
- By whom: the people at our company who need to handle your inquiry, and the service providers who help us run the Site: AWS (hosting and database), Google (email) and Cloudflare (bot checks, network security and site traffic statistics). We do not share your personal data with anyone else or sell it, unless the law or a competent authority requires it, or it is needed to protect our or others’ rights.
- How: by automated and non-automated means, within the purposes above, including international transfer.
5. International transfers
Because the providers above store or process data outside Taiwan (for example in Japan, the United States and other regions where Cloudflare and Google operate, including Cloudflare, Inc.’s processing of bot-check signals and site traffic statistics), your personal data is transferred abroad. We choose providers with industry-standard security and follow the PDPA. If the competent authority lawfully restricts a particular transfer, we will comply.
6. Your rights
Under Article 3 of the PDPA, you may ask us to do the following with the personal data we hold about you:
- Tell you what we hold, or let you review it.
- Give you a copy.
- Complete or correct it.
- Stop collecting, processing or using it.
- Delete it.
Email [email protected] with your name, the email address you used to contact us, and the right you want to exercise. To protect your data, we will confirm your identity first. Under Article 13 of the PDPA, we will handle requests to review or copy your data within 15 days, and requests to complete, correct, stop using or delete it within 30 days. If needed, we may extend each deadline once (by up to 15 or 30 days respectively) and will tell you why in writing. We do not currently charge a fee.
Where the law requires us to keep certain data, or it is necessary to perform a contract with you, we may decline part of a request as the law allows, and we will tell you why.
Providing personal data is your choice. If you leave out required fields in the contact form, we will not be able to reply; you can always email us instead.
7. Cookies and local storage
The Site does not use advertising cookies. It stores one essential item in your browser’s local storage to remember whether you chose the bilingual 中英 display. It contains no personal data and is never sent to us. Cloudflare Turnstile may use technical mechanisms it needs to complete a bot check.
The Site uses Cloudflare Web Analytics to understand site traffic. It is a privacy-first service that does not use cookies or local storage to track you and does not build visitor profiles. It collects aggregated page-view data such as the page URL, the referrer, browser and device type, the country derived from your IP address, and page performance metrics. Cloudflare, Inc. processes this data as our service provider, possibly outside Taiwan (see section 5). We use it only to understand site traffic and improve our content; we do not use it for advertising or to identify individuals. For more information, see the Cloudflare Privacy Policy.
8. Security
We use reasonable technical and organisational measures to protect your personal data, such as HTTPS encryption across the Site, restricted database access, access control on a least-privilege basis, and regular updates and monitoring. No method of transmission or storage is completely secure, however. If personal data is stolen, leaked or altered, we will investigate and notify you appropriately as the PDPA requires.
9. Minors
The Site is intended for businesses and adults. If you are under 18, please provide personal data only with your legal guardian’s consent. If we learn that we collected a minor’s data without that consent, we will delete it.
10. Other websites
The Site may link to other websites (for example, clients’ sites in our case studies). Their privacy practices are their own and are not covered by this policy.
11. Changes to this policy
We may update this policy when laws, our services or technology change. We will post the updated version on this page and change the "Last updated" date; for significant changes, we will also show a clear notice on the Site.
12. Contact us
For any question about this policy or your personal data, email [email protected] or write to: Rejoicing fountain LTD., 10F., No. 1-3, Sec. 5, Zhongxiao E. Rd., Xinyi Dist., Taipei City 110, Taiwan (R.O.C.).