How The Canadian Chamber of Commerce in Taiwan handles your personal data.
This notice explains what personal data The Canadian Chamber of Commerce in Taiwan collects from members, applicants, event guests, newsletter subscribers and visitors, why, who else handles it, how long it is kept and what you can ask for. It is written to meet the notice requirements of Taiwan's Personal Data Protection Act and, for people who are in the European Union, the General Data Protection Regulation.
Last updated 12 September 2026
Who is responsible for your data
The Canadian Chamber of Commerce in Taiwan (台灣加拿大商會) is the organisation that collects your personal data and decides how it is used. Its office is at No. 319, Section 2, Dunhua S Rd, Da’an District, Taipei City, 106. Questions and requests about your data go to info@canchamtw.com.
The chamber runs its membership, invoicing, events, website and email on a platform operated by VentureLK LLC (Delaware, United States). VentureLK LLC processes personal data only on the chamber's instructions and under a written agreement, and does not use it for any purpose of its own.
What we collect, and from whom
The chamber holds different details depending on how you deal with it.
Members and their representatives: the company, its address and registration number, the names, roles, email addresses and phone numbers of the people who represent it, the membership tier, dues, invoices, receipts and payment status, and the notes the office keeps about the relationship.
Applicants: what you enter on the membership application form, including the tier you choose and your answers to the chamber's questions.
Event guests: your name, organisation and email address, your ticket, any dietary or accessibility note you give us, and whether you attended.
Newsletter subscribers: your email address, your name if you give it, the lists you choose, and every consent, unsubscribe and preference change.
Everyone who signs in: the email address a one-time code is sent to, and the time, network address and browser of each sign-in and each action, kept in an audit log.
Card details are never collected by the chamber or its platform. They are entered on the payment provider's own page.
Why we use it
Administering membership: applications, the member roster, renewals, dues, invoices and receipts.
Running events: registration, tickets and entry passes, attendance, and the practical arrangements of an event.
Communicating: newsletters and invitations to those who have agreed to receive them, and messages about your own membership, invoices and registrations to everyone.
The public member directory, which lists member companies by name and category and publishes no personal contact details.
Keeping the records the law requires the chamber to keep, and keeping the system secure.
The legal basis, where the GDPR applies
For people who are in the European Union, the chamber relies on its membership agreement with you or your organisation, on your consent for marketing email, on its legitimate interest in running the chamber and keeping it secure, and on its legal obligations for accounting records. You can withdraw consent for marketing email at any time; that does not affect anything done before you withdrew it.
Who else processes it
The platform runs on infrastructure providers under contract. They host or transmit data on the chamber's behalf and may not use it for their own purposes.
Vercel Inc.: application hosting, Singapore region.
Neon Inc.: the database, on Amazon Web Services in Singapore. Documents you upload are stored here, behind the chamber's login.
Resend Inc.: email delivery, United States.
Vercel Blob: hosting for the public images on the chamber's website and newsletters. No personal data is stored there.
Mistral AI, France: drafting assistance for chamber staff. When a staff member asks for a draft, the model receives the record being drafted about, never a password, a payment credential or the whole member list. Inference runs on Mistral's European infrastructure and the data is not used to train its models.
The chamber's payment provider: takes card payments on its own pages and receives your email address, the amount and the invoice reference so that it can take the payment.
Beyond these, your data goes to nobody outside the chamber unless the law requires it or you ask the chamber to send it somewhere.
Where it is kept
The application and the database run in Singapore. Email is delivered through a provider in the United States, and drafting assistance for staff runs in the European Union. Nothing is stored in China. Because the chamber's providers are abroad, your data crosses borders; the contract with each provider commits them to keep it confidential and secure.
How long we keep it
Membership, invoice and event records: for as long as you or your organisation are a member, and afterwards for the period that the rules of the chamber and the law on accounting records require.
Applications: as part of the membership record if approved; if not, until you ask the office to remove them.
Newsletter consents and preferences: until you unsubscribe. A record that you unsubscribed is kept so that you are not emailed again.
One-time sign-in codes: minutes, then they expire.
The audit log: for the life of the chamber's account, because it is the record of who did what.
When the chamber stops using the platform, its data is exported to the chamber and deleted from the platform on the chamber's written request, except where financial records must be kept.
Your rights, and how to use them
You can ask the chamber for any of the following.
A copy of what the chamber holds about you.
Correction of anything that is wrong or out of date.
Deletion, except for invoices, receipts and the audit line that records the deletion, which are financial records the chamber must keep.
To stop marketing email at any time: use the unsubscribe link in any newsletter, the preferences page, or write to the office. Messages about your own invoices and registrations continue while you are a member.
To have your company removed from the public member directory.
To complain to the authority responsible for personal data protection where you live.
Making a request
Write to info@canchamtw.com. The chamber answers within the time the law allows and confirms in writing what it has done. Members can see their own company, invoices and registrations at any time by signing in to the member portal.
If you would rather not share these details
Membership, event registration and the newsletter each need the details described above. If you choose not to provide them, the chamber cannot process your application or registration, or send you its newsletter.
Changes to this notice
This notice was last updated on 12 September 2026. If the chamber changes how it uses your data, this page is updated and the date changes with it.