Privacy Policy

1. Scope and controller

This policy applies to the website, accounts, contact forms, cart, orders, and related online services operated by Easy Trust Information Co., Ltd. (“Easy Trust”). Easy Trust is the controller of the personal data described below.

2. Data we collect

We collect only information reasonably necessary for the feature you use.

• Contact requests: name, telephone number, email, company, and message.
• Accounts: name, email, telephone number, and a securely hashed password. We do not retain plain-text passwords.
• Orders and payments: purchased items, amount, buyer details, company, notes, payment result, and transaction identifiers. Full card details are processed by the payment provider and are not stored by this site.
• Security logs: IP address, browser/device information, access time, errors, and anti-abuse data.
• Analytics enabled with consent or configuration: page views and interaction events.

3. Purposes

We use the data to:

• respond to enquiries, provide quotations, deliver services, and provide support;
• operate accounts, carts, orders, payments, refunds, and reconciliation;
• send essential service, transaction, and security notices;
• improve the website, measure service performance, prevent fraud, and protect security; and
• meet accounting, tax, consumer-protection, and other legal obligations.

4. Member sign-in with Google and Google user data

This site offers “Continue with Google” for member sign-in. If you choose it, Google provides us with the data below after obtaining your consent. If you do not use it, we receive no Google user data at all.

• Scopes accessed: only the basic openid, email, and profile scopes. Of these we actually use your Google account identifier, email address, and name. We neither request nor can read your Gmail messages, Drive files, contacts, calendar, or any other Google service content.
• How we use it: solely to create or sign you in to your member account on this site, to identify you, and to show your name and email in the member area.
• What we store: your Google account identifier and the email address at the time of linking (so a later sign-in maps to the same member account), plus your name. We do not store your Google password, nor any Google-issued access or refresh tokens.
• Sharing: we do not sell or trade Google user data, and do not provide it to third parties for advertising or marketing. We disclose it only where required by law or a competent authority.
• Limited use: our handling of Google user data complies with the Google API Services User Data Policy, including its Limited Use requirements.
• Unlinking: you can unlink Google under “Member area → Account security” (set a password first so you do not lose access to the account), or remove this site from the third-party access page of your Google account. Once unlinked, we delete the Google link record.

5. Back-office Google data (Google Analytics and Search Console)

The “Google data” feature in this site’s back office lets an Easy Trust website administrator authorize this site, with their own Google account, to read reports for our company websites from Google Analytics (GA4) and Google Search Console and show them on the back-office traffic analytics page. The feature is only for our back-office staff; visitors and members are never asked to authorize it, and no data from their Google accounts is read through it.

• Who authorizes and scopes: only back-office accounts with the Administrator role can start the authorization. It requests only two read-only scopes, analytics.readonly (Google Analytics, read-only) and webmasters.readonly (Search Console, read-only); this authorization cannot be used to change any Google Analytics or Search Console settings or data.
• Data read: so the administrator can choose which site to view, we read the names of the GA4 accounts and properties the Google account can view, its list of Search Console sites, and the web data streams (measurement IDs) of the selected GA4 property. The reports themselves are site-level aggregates: users and daily trends, sessions, page views, engagement, traffic channels, device categories, countries, top pages, and conversions, plus Search Console clicks, impressions, click-through rate, average position, top search queries, and top pages. These figures do not identify individual visitors. The feature does not read the authorizing account’s name, email address, or other profile data, nor any Gmail, Drive, or other Google service content.
• Purpose and who can see it: solely to show our websites’ traffic and search performance in the back office for website operations analysis (for example, which pages are viewed and which search queries bring visitors). Only this site’s back-office administrators and editors can view it.
• What we store: only the refresh token issued by Google (encrypted with AES-256-GCM in our database; never shown on screen, returned to the browser, or written to logs) and the GA4 property ID and Search Console site URL selected by the administrator. Report figures and resource lists are not written to the database; they are cached in server memory only, with a 12-minute lifetime. Access tokens likewise exist only in server memory. Our back-office audit log records which administrator connected, disconnected, or changed the selection, and when; it contains no tokens.
• Sharing: we do not sell, trade, or provide this data to any third party, and do not use it for serving or personalizing ads. We disclose it only where required by law or a competent authority.
• Revoking access: an administrator can click “Disconnect” under “Settings → Google data” in the back office at any time. We first revoke the authorization with Google, then delete the stored refresh token, the selection, and the in-memory caches (local data is deleted even if revocation with Google fails). Access can also be removed from the third-party access page of the Google account settings; after that, this site can no longer read the data.
• Limited use: Easy Trust’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

6. Service providers and international processing

We disclose data only as necessary to payment, hosting, email, analytics, and professional service providers, or where required by law or a competent authority. Providers may process data outside Taiwan and must apply reasonable confidentiality and security measures. We do not sell personal data.

7. Retention and security

We retain data while its purpose, our contractual relationship, or a legal retention duty continues, then delete, anonymize, or restrict it. We use reasonable access controls, encrypted transport, password hashing, backups, and monitoring, although no internet transmission is completely risk-free.

8. Your rights

Subject to applicable law, you may request access, a copy, correction, cessation of collection/processing/use, or deletion. We may limit a request where the information is necessary to perform a contract or meet a legal retention duty, and will explain the reason.

9. Cookies, links, and contact

We use cookies required for sign-in, cart, security, and preferences. Analytics cookies are used only when the related service is enabled. Third-party links follow their own policies. For questions or rights requests, email [email protected] or call +886-3-582-7637. Material changes will be posted here with a new effective date.