Privacy Policy

This Privacy Policy applies to your use of the Standard Integrity Institute ("SII") website, upload forms, quotation-document review process, Free Key Results, Complete Risk Reports, payment processes, email notifications, customer-service communications, and other related services.

When you browse the website, complete a form, upload documents, purchase a service, download content, reply to an email, or otherwise interact with SII, this Policy explains the personal-data collection, processing, and use that may occur in connection with that interaction.

If a specific service page, form, payment page, email, or other policy provides more specific information about data processing, that information should be read together with this Privacy Policy.

Depending on how you use the service, SII may collect information you actively provide or information generated through use of the service, including your name or preferred form of address, email address, phone number, form responses, project context, quotation documents, attachments, payment status, order information, customer-service communications, and website-use records.

Information you submit may include personal data, project information, renovation addresses, pricing terms, contractor information, payment arrangements, contract terms, drawings, photos, screenshots, supplemental explanations, or other case-related content.

Before submitting information, please make sure that you have the right to provide it and that doing so does not violate any third party's personal-data rights, trade secrets, copyright, contractual confidentiality obligations, or other rights.

Because SII reviews quotation documents, the quotations, contracts, drawings, photos, screenshots, attachments, and supplemental explanations you upload may contain detailed project information. This information is used to understand work items, quantities, specifications, price and payment structures, clauses, performance conditions, and other information relevant to document review.

SII does not ask you to provide excessive information unrelated to quotation review. If a document contains national identification numbers, financial-account details, health information, or other highly sensitive information unrelated to the review, we recommend redacting or removing it where doing so will not affect the review.

If documents you submit contain third-party data, such as information about a property owner, family member, contractor, designer, project worker, company employee, or another individual, you should make sure that you have a lawful basis or appropriate authorisation to provide that information.

SII primarily uses data to provide, maintain, deliver, and improve quotation-document review services, including receiving documents, establishing project context, reviewing documents, producing Free Key Results, preparing Complete Risk Reports, sending notifications, processing payments, and providing customer support.

SII may also use necessary information to maintain website and service security, prevent abuse, detect unusual activity, handle refunds or disputes, respond to personal-data rights requests, comply with legal obligations, retain necessary records, and protect the legitimate interests of SII, users, or third parties.

Unless you consent, it is necessary to provide a service you request, or another legal basis applies, SII will not use your case documents for unrelated public display, contractor rankings, public lists, third-party endorsements, or other purposes outside those described in this Policy.

If you purchase a paid service, payment may be processed by a third-party payment platform or transaction processor. SII may receive information relating to order status, whether payment succeeded, refund status, transaction time, the plan purchased, and necessary accounting records.

SII generally does not directly store complete credit-card numbers, bank-account numbers, or other complete payment credentials. The handling of payment information is subject to the terms and privacy policy of the third-party payment provider you use.

SII may retain relevant transaction records for a reasonable and necessary period in order to process orders, refunds, transaction anomalies, tax or accounting matters, customer service, or disputes.

To provide website hosting, forms, document intake, cloud storage, payments, email delivery, data processing, customer support, automation, website analytics, or other necessary functions, SII may use third-party services or service providers.

These providers may process information under SII's instructions or under their own applicable terms to the extent necessary to provide, maintain, deliver, protect, or improve the service. SII will take reasonable steps to select appropriate providers and limit unnecessary data disclosure.

If you submit information through a third-party payment page, form, cloud service, email system, or external link, you should also review that provider's data-handling terms. A third party's policies, availability, or security measures may change independently of SII.

SII retains your data for a reasonable and necessary period based on service delivery, report delivery, customer support, refunds and dispute handling, accounting retention, legal compliance, rights claims, and service-security needs. We do not retain data indefinitely without a purpose.

When data is no longer necessary, SII will use reasonable procedures to delete, archive, de-identify, or restrict its use. Some information may need to be retained longer because of backups, system logs, legal obligations, transaction records, security records, or dispute-handling requirements.

You may contact SII to request deletion or restriction of certain data. However, if the information remains necessary to perform the service, complete a transaction, retain legally required records, handle a dispute, maintain security, or protect legitimate rights and interests, SII may be unable to delete all of it immediately to the extent permitted by law.

SII uses reasonable administrative, technical, and procedural measures to protect information against unauthorised access, disclosure, alteration, loss, or misuse. Measures may include access controls, service-provider management, data-access restrictions, cloud-security settings, and internal operational controls.

However, no internet transmission, cloud storage, email communication, or electronic system can be guaranteed to be 100% secure. When submitting documents and personal data, you should also consider the security of your network, device, and email account and whether the information you upload is necessary.

If SII becomes aware of a data-security incident that may require notification by law or may materially affect your rights and interests, SII will take necessary response measures and, depending on the nature of the incident, applicable law, and practical feasibility, notify affected persons or competent authorities as appropriate.

SII does not sell your personal data or case documents. SII shares information only to the extent necessary to provide the service, complete transactions, send notifications, maintain system security, comply with legal obligations, handle disputes, or protect legitimate rights and interests.

Recipients may include cloud and website service providers, form services, payment platforms, email services, document-processing services, customer-support or operational tools, legal or compliance advisers, and competent authorities, courts, or other parties lawfully entitled to request information.

If SII is involved in a reorganisation, merger, business transfer, asset transfer, or similar transaction in the future, necessary information may form part of reasonable transaction evaluation or transfer. SII will require the recipient to protect the information to the extent required by applicable law and reasonably practicable.

To the extent permitted by applicable law, you may ask SII to provide access to or review of your personal data, provide a copy, supplement or correct it, stop collection, processing, or use, or delete it. These rights may be subject to legal exceptions or limitations.

To protect data security, SII may need information sufficient to verify your identity and the scope of your request. If a request concerns third-party data, transaction records, legal retention obligations, dispute handling, service delivery, security records, or rights claims, SII may lawfully or reasonably refuse, limit, or defer the request to the extent permitted by applicable law.

To exercise your data rights, contact SII using the email address listed in this Policy and, where possible, describe your request, the relevant order, submission time, or email address used so that we can identify the scope and process it efficiently.

The SII website or third-party services may use cookies, log files, device information, browser information, referring pages, click records, form-interaction records, or similar technologies to maintain website functionality, improve user experience, analyse website performance, protect service security, and troubleshoot technical issues.

You can block or delete cookies through your browser settings, but some features may then not work properly, including form submission, preference settings, payment processes, or interactive website functions.

If SII uses third-party analytics or website-service tools, those tools may process a certain range of device, browsing, and interaction information under their own policies. The actual scope of processing may also depend on your browser settings or consent mechanisms.

SII's services are primarily intended for users who have legal capacity to contract or appropriate authorisation and who use the service for renovation, construction, engineering, or procurement quotation-document review. The service is not primarily directed to minors.

If under applicable law you do not have the legal capacity to use the service or consent to data processing on your own, you should use the service only with the consent and assistance of a legal representative or guardian. If SII becomes aware that a minor submitted information without appropriate authorisation, SII may delete or restrict processing of that information as required by applicable law and the circumstances.

Some cloud, form, payment, email, analytics, or data-processing services used by SII may be located outside Taiwan or provided by overseas providers. Your data may therefore be stored, transmitted, or processed in other countries or regions.

SII will take reasonable steps to select appropriate providers and implement practicable safeguards, but data-protection laws may differ between jurisdictions. Cross-border processing should occur only to the reasonable extent necessary to provide the service, maintain security, or use necessary service providers.

SII may update this Privacy Policy in response to changes in services, website features, data-processing practices, third-party services, legal requirements, or operational needs.

The updated version will be posted on this page, and the "Last Updated" date shown on the page will indicate the current version. If there is a material change, SII may provide notice through the website, email, form notice, or another reasonable method depending on the nature of the change.

We recommend reviewing this page again when submitting a new case, purchasing a service, or when there has been a material change in data-processing practices so you understand the policy then in effect.

If you have questions about this Privacy Policy, our data-handling practices, personal-data rights, deletion requests, order records, document data, or other privacy-related matters, please contact SII using the email address below.

Contact email: official@siistandard.org