Privacy Policy

個資保護聲明

[DRAFT — please review] This is an English translation of the Chinese Privacy Policy. In case of any discrepancy, the Chinese version prevails.

Olan Law Firm ("we," "us," or "the Firm") respects your privacy. This policy explains how we collect, process, and use personal data through this website and, as required by Article 8 of Taiwan's Personal Data Protection Act (the "PDPA"), informs you of the following.

1. Scope

This policy applies when you browse this website or submit personal data through the website's consultation request form. Personal data handled after you formally engage the Firm is governed by the engagement agreement and applicable law.

2. Data Collector

Olan Law Firm (Principal Attorney: Shih-Ya (Tanya) Huang)

We collect your personal data to respond to your inquiry, schedule a consultation, contact you, and assess whether we can take on your matter. Under the "Specific Purposes and Categories of Personal Data" issued under the PDPA, the purposes are:

  • 069 Contracts, quasi-contracts, or other legal relationships
  • 090 Consumer and client management and services

We collect and process your personal data under Article 19, Paragraph 1 of the PDPA, to the extent you consent or have a contractual or quasi-contractual relationship with us (for example, when inquiring about an engagement), and use it only as necessary for the purposes above.

We do not use your personal data for marketing, and we do not sell or provide it to third parties for marketing.

4. Categories of Personal Data

Data you provide:

  • Identifying information (C001): name, phone number, and email address
  • The topic, preferred contact time, and brief description you enter in the form

Data generated automatically when you browse: When your browser connects to this website and the third-party services listed in Section 6, it sends technical information such as your IP address and browser type.

Please do not include case details, national ID numbers, or special categories of personal data under Article 6 of the PDPA (medical records, medical treatment, genetic information, sex life, health examinations, or criminal records) in the form. We will discuss the details of your matter during the consultation.

5. Period, Area, Recipients, and Manner of Use

  • Period: We keep your data for as long as the purposes above require. If you do not engage the Firm, we will delete the data after [TO BE COMPLETED — attorney to decide: e.g. one year]. If you engage the Firm, we keep it for the period required by the engagement, the practice of law, and applicable law.
  • Area: Taiwan, and the locations of the servers of the service providers listed in Section 6 (which may be outside Taiwan).
  • Recipients: Attorneys and staff of the Firm who handle your matter; the service providers listed in Section 6 that help us operate this website; and courts or government agencies where required by law.
  • Manner: By email, telephone, in writing, or by other lawful means.

6. Third-Party Services

This website uses the following services. When providing their functions, they may process technical information such as your IP address, subject to their own privacy policies:

  • Web3Forms: Sends the content of the consultation request form to the Firm by email.
  • Cloudflare: Hosts and delivers this website, and provides Cloudflare Web Analytics, which counts anonymous visits (such as pages visited, device type, and country or region). It does not use cookies and is not used to identify individuals.

This website does not use cookies to track your browsing.

7. Your Rights and How to Exercise Them

Under Article 3 of the PDPA, you may exercise the following rights regarding personal data we hold about you:

  1. Inquire about or review your data
  2. Request a copy
  3. Request supplementation or correction
  4. Request that we stop collecting, processing, or using your data
  5. Request deletion

To exercise these rights, please contact us by phone or through the consultation request form. We will process your request after verifying your identity:

  • We will decide on requests to inquire, review, or obtain a copy within 15 days, and on requests to supplement, correct, stop collection, processing, or use, or delete within 30 days. If necessary, we may extend each period once, by up to 15 and 30 days respectively, and will notify you in writing of the reason (PDPA Article 13).
  • Under Article 14 of the PDPA, we may charge a fee covering necessary costs for inquiries, reviews, or copies.
  • Where the proviso of Article 10 or the circumstances in Article 11 of the PDPA apply — for example, where a request may harm a third party's significant interests, or where we must keep data to perform our duties or comply with law — we may refuse or limit your request as permitted by law, and will explain why.

8. Effect of Not Providing Data

Providing personal data is voluntary. Fields marked "*" in the form are required; if you do not provide them, we will not be able to respond to your inquiry or schedule a consultation. You can still contact us by phone.

If you are under 18, please provide personal data with the consent or in the presence of your legal guardian.

9. Security and Confidentiality

We take appropriate security measures under Article 27 of the PDPA to prevent your personal data from being stolen, altered, damaged, lost, or disclosed. Attorneys are bound by a statutory duty of confidentiality under Taiwan's Attorney Regulation Act for information learned in the course of their work.

If your personal data is stolen, disclosed, altered, or otherwise compromised, we will investigate and notify you by appropriate means under Article 12 of the PDPA.

10. Changes to This Policy

We may update this policy as laws change or as needed. Updates will be posted on this page, and the "Last updated" date below will change.

Last updated: October 9, 2026