Privacy Policy
Dear member, welcome to the OKWASP Vulnerability Scanning Platform

This privacy protection statement, in response to the changes in the social environment and legal regulations and the advancement of technology, "Fly Elephant Information Co. Ltd." has the right to modify this announcement statement to protect the privacy of customers, and update and inform customers as soon as possible. "Fly Elephant Information Co. Ltd." respects the privacy of customers very much. The collection, processing, and utilization of customer data are comply with the "General Data Protection Regulation" and related laws and regulations of the government of the Republic of China (Taiwan). You can refer to the following privacy policy to understand our specific measures.

A. Customer infomation collection method

We own customers' personal information, which people who register or make a purchase through the payment flow, products, and information flows provided by the OKWASP Vulnerability Scanning Platform. Or we obtain from other marketing or across from other industry alliance activities (including but no limited to other business).

B. Types of customer information collection
1. According to the services provided by the OKWASP Vulnerability Scanning Platform, we will ask the customer to provide the requirement of information for the paperwork:

1.1. For the members or customers of the OKWASP Vulnerability Scanning Platform, you will need to provide personal information: which includes your full name, gender, personal ID number, date of birth, contact number, contact address, email, and other information that provide from you.

1.2. We will ask you to provide delivery information when you specify the invoice delivery service: which includes the recipient's name, contact number, contact address, and other required delivery contact information.

1.3. We will maintain your account information when you have actual consumption behavior. However, if you choose to use a third-party app that includes their payment method, the relevant information will protect and manage by the third-party service supplier's privacy policy.

1.4. We will ask you to provide other information for required paperwork based on the provision of relevant services such as market analysis, reward activities, membership, and customer rights notifications.

2. The company will collect, process, use, and retain your information pursuant to the act of "classification of personal information in Personal Information Protection Act." by the Ministry of Justice, which is below the following list:

2.1. For identifying the individual (C001): Name, job title, contact address, working address, previous living address, phone number, mobile number, the username you use to sign in to website, residence address, email address, and other information that can identify you.

2.2. For verifying financial information (C002): Bank account number and name, credit card or debit card number, insurance policy number, other personal numbers or account.

2.3. For identification in government documents (C003): ID card number, passport number, etc.

2.4. Personal description (C011): Age, gender, date of birth, place of birth, nationality, voice, etc.

2.5. Body description (C012): Height, weight, blood type, etc.

2.6. Family situation (C021): Marriage, name of spouse or cohabitant, name of ex-spouse or ex-cohabitant, marriage date, number of children, etc.

2.7. Information on other family members (C023): Children, dependents, family members or relatives, parents, etc.

2.8. Housing and facilities (C031): Home address.

2.9. Immigration situation (C033): Passport, etc.

2.10. Travel and other migration details (C034): Travel details

2.11. Lifestyle (C036): Detail of using type and services of consumption goods, consumption Pattern of personal or family, etc.

2.12. Occupation (C038): School principal, public opinion representative, or other occupations, etc.

2.13. Revenue, income tax, assets, and investment (C081)

2.14. Financial transaction (C093): Receipt of payment, credit limit, guarantor, payment method, transaction record, margin or other guarantees, etc.

2.15. Agreement and contract (C102): Regard to trade, business, law or other contract, agency, etc.

2.16. Unclassified information (C132): Letter, file, report, or email that cannot be allocated, etc.

C. Purpose of customer information collection
1. We will use your information for the required paperwork it only occurs when providing product sales, financial transaction authorization, logistics distribution, advertisement marketing, insurance marketing, market analysis, reward activities, customer rights notifications, and other relevant services.

1.1. Logistics shipping: We will provide shipping information to the cooperative manufacturers and logistics providers when we provide product sales, logistics distribution, and other order-fulfilling services, etc. of our customers.

1.2. Financial transaction authorization: The account information that you provided will provide to the financial institution to complete the financial transaction and relevant paperwork during the process of the financial transaction, which includes credit card authority, risk control, and notice.

1.3. Advertisement marketing: To provide more high-quality products and activity information, the company, subsidiary, or outsourcing company will share the relevant information before you agree. However, if you do not want to receive the relevant information further, you can notify us.

1.4. Market analysis: According to your browse of advertisement content, purchase record, and other information you provide, the company will conduct a market analysis, which includes a third-party using cookie, or similar technologies, to develop and offer a better satisfactory customer service. ※ Cookie is a web server that communicates with the user's web browser by technology, which may store some information in the user's computer. Users can cancel or restrict this function through browser settings.

1.5. Other services incidental points: According to the service purposes mentioned above and other services that you using on the OKWASP Vulnerability Scanning Platform, it will be operate within the necessary scope subjects of your permission.

2. For a certain purpose the company will collect, process, use, and retain your information pursuant to the act of "classification of personal information in Personal Information Protection Act." by the Ministry of Justice, which is below the following list:

2.1. 001 Insurance of Person

2.2. 040 Marketing

2.3. 063 Non-government agency to collect, process and use the personal information in respect to legal obligation

2.4. 067 Credit Card, Cash Card,Transfer Card and Electronic Certificate Business

2.5. 069 Contract or quenci-contract or other matters in relation to legal management

2.6. 090 Consumer/Customer Management and Services

2.7. 091 Consumer Protection

2.8. 093 Non-life Insurance

2.9. 098 Commercial and Technology Information

2.10 107 Purchasing and Supply Management

2.11. 111 Bill Business

2.12. 118 Intellectual Property, Optical Disk Management, and Other Relevant Administration

2.13. 125 Communication Administration and Management

2.14. 127 Fund Raising (includes welfare funds)

2.15. 129 Accounting and other relevant services

2.16. 132 Public Relations Business

2.17. 136 Information (communication) and Database Management

2.18. 148 Online Shop and Other E-commerce services

2.19. 152 Advertisement or Business Behavior Management

2.20. 157 Investigation, Statistics and Research Analysis

2.21. 181 Other business items registered in the business certification or in the article in corporation

D. The period and region which customer information will be used
Unless otherwise stipulated by laws and regulations, in principle, we will only use customer information based on the scope of your authorization. During the company's business existence and within the reachable areas of the service, following the scope of the previous mentioned service purposes for the required use of customer information.
E. Objects and methods of disclosure of customer information
1. According to following the scope of the previous mentioned service purposes for the required use of customer information, we will only use our company and the third party we appoint to handle business-related affairs (for example, financial institutions, cooperative manufacturers, logistics providers, and other service providers). We will not disclose your personal information to third parties other than the above unless otherwise regulated by law or obtained by your consent.
2. When we provide information to other third parties unless the customer agrees, otherwise there may be the rest of following situations:

2.1. Essential for operation and utilization within the scope of the specific purpose specified above.

2.2. Use for purposes other than those specified in the proviso of Article 20 of Personal Data Protection Act.

2.3. Based on the provisions of the law or the requirements of the judiciary and other competent authorities based on legal procedures.

2.4. To protect legitimate rights and interests of other members or third parties in emergency situations.

2.5. To maintain the operation of the membership service system.

2.6. Essential information about the cash/logistics flow generated by members purchasing, redeeming for a prize, and participating in the drawing, and more of it through this service.

F. Customer information storage and custody
1. According to the information you provided, we will formulate strict regulations on the information system and company operating rules, and anyone must process and utilize the essential information under our authorization regulations. Our protection standards for betting on data security equipment are as follows:

1.1. We use the finest technology to protect your information security. Up to now, we use the Secure Sockets Layer (SSL) mechanism (256bit) for information transmission encryption, and install a firewall to prevent illegal intrusion and your information from being illegally accessed.

1.2. To provide a suitable service for you, we will use the technology of Cookie to receive and record the server data of the browse for you, which includes the IP Address, Cookies to provide the updates of products and internet optimize services that are relevant to the for use.

G. Exercising customer information rights
1. According to Article 3 of Personal Information Protection Act., unless there have other restrictions of regulations, you have the right to search or request to read, make a copy, replenish, revise, stop to collect or use, and delete that based on the information you provided.
2. If you want to exercise the above rights or have other inquiries, you can leave a message or phone call with your comments, and we will reply to your questions as soon as possible.
H. Impact on rights and interests of information accuracy
We remind you that if the customer did not provide the whole information, you may not be able to become our member or even enjoy the member sales services or latest updates. If the information provided by customers is an error, they will not be protected by this statement.
Regarding this Privacy Policy Statement, we will modify the statement at any time due to the change in a social environment, law regulation, and technological innovation. The modification of this statement will notice customer by email, phone call, catalogue, communication network, website annoouncement, and other appropriate way.