Privacy Policy

Introduction

orisunca is committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, and safeguard your data when you visit our location, use our services, or interact with our website.

If you have questions about this policy or our privacy practices, please contact us at [email protected].

Information We Collect

We collect personal information that you provide to us when booking services or communicating with us.

Personal Information You Provide

When you book a treatment session or contact us, we may collect the following information:

• Full name and contact information (email address, phone number)
• Health-related information relevant to treatment (medical conditions, injuries, areas of concern)
• Appointment preferences and booking history
• Payment information (processed securely through our payment provider)
• Communication preferences and feedback

Automatically Collected Information

When you visit our website, we may automatically collect certain information about your device and browsing activity:

• IP address, browser type, and operating system
• Pages visited, time spent on pages, and referring website
• Cookies and similar tracking technologies (see Cookie Policy for details)

How We Use Your Information

We use the information we collect for the following purposes:

Service Delivery

• Schedule and confirm appointments
• Provide appropriate treatment based on your health information
• Process payments and maintain booking records
• Send appointment reminders and follow-up communications

Communication and Support

• Respond to your inquiries and provide customer support
• Send important service updates or changes to our policies
• Request feedback about your experience (with your consent)

Business Operations

• Improve our services and treatment offerings
• Analyze website usage and improve user experience
• Maintain security and prevent fraudulent activity
• Comply with legal obligations and protect our rights

Marketing (With Your Consent)

With your explicit consent, we may send you promotional information about special offers, new treatments, or seasonal availability. You can opt out of marketing communications at any time.

Legal Basis for Processing

We process your personal information based on the following legal grounds:

• Contract Performance: Processing necessary to provide the services you requested
• Consent: You have given clear consent for specific processing purposes
• Legitimate Interest: Processing necessary for our business operations, provided your interests and rights do not override those interests
• Legal Obligation: Processing necessary to comply with applicable laws

Data Sharing and Disclosure

We do not sell your personal information. We may share your information only in the following circumstances:

Service Providers

We work with third-party service providers who assist us with:

• Payment processing (subject to PCI-DSS compliance)
• Appointment scheduling software
• Email communication services
• Website analytics (Google Analytics)

These providers are contractually obligated to protect your information and use it only for the purposes we specify.

Legal Requirements

We may disclose your information if required by law, regulation, legal process, or governmental request, or to protect the rights, property, or safety of orisunca, our clients, or others.

Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred to the acquiring entity. We will notify you of any such change.

Data Security

We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction:

• Secure storage of physical records in locked cabinets with restricted access
• Encryption of digital data in transit and at rest
• Regular security assessments and staff training on data protection
• Access controls limiting data access to authorized personnel only
• Secure payment processing through PCI-compliant providers

Data Retention

We retain your personal information for as long as necessary to fulfill the purposes outlined in this policy, unless a longer retention period is required by law.

• Client Records: Maintained for 7 years after last appointment (as required by Taiwan regulations)
• Booking History: Retained while you remain an active client, then 3 years after last contact
• Marketing Communications: Retained until you opt out or request deletion
• Website Analytics: Aggregated data retained for 26 months

Your Privacy Rights

You have the following rights regarding your personal information:

Right to Access

You can request a copy of the personal information we hold about you.

Right to Rectification

You can ask us to correct inaccurate or incomplete information.

Right to Erasure

You can request deletion of your personal information, subject to legal retention requirements.

Right to Restriction

You can request that we limit how we use your information.

Right to Data Portability

You can request a copy of your data in a structured, commonly used format.

Right to Object

You can object to certain types of processing, including marketing communications.

Right to Withdraw Consent

Where processing is based on consent, you can withdraw that consent at any time.

To exercise any of these rights, please contact us at [email protected]. We will respond within 30 days.

Cookies and Tracking

We use cookies and similar technologies to improve your browsing experience and analyze website usage. For detailed information about our cookie practices, please see our Cookie Policy.

Children's Privacy

Our services are not directed to individuals under 18 years of age. We do not knowingly collect personal information from minors. If we become aware that we have collected information from a minor without parental consent, we will take steps to delete that information.

International Data Transfers

Your information is primarily stored and processed in Taiwan. If we transfer data to other countries, we ensure appropriate safeguards are in place to protect your information in accordance with this Privacy Policy.

Changes to This Policy

We may update this Privacy Policy periodically to reflect changes in our practices or legal requirements. We will notify you of material changes by:

• Posting the updated policy on our website with a new "Last Updated" date
• Sending an email notification if you are an active client
• Displaying a notice on our website for 30 days after the change

Your continued use of our services after policy changes indicates acceptance of the updated terms.

Supervisory Authority

If you believe we have not addressed your privacy concerns adequately, you have the right to lodge a complaint with the Taiwan National Development Council's Personal Data Protection Office or your local data protection authority.

Contact Information

If you have questions about this Privacy Policy or wish to exercise your privacy rights, please contact us: