Privacy Policy

Data controller

TAIWHA GROUP LTD is responsible for the personal data it handles for website enquiries, order review, report delivery, and customer correspondence.

For privacy requests, contact [email protected].

Personal data we handle

• Contact details supplied by the customer, such as name, email address, and correspondence content.
• Order details, product selected, delivery email, payment confirmation metadata, and refund or support correspondence.
• Non-sensitive report context that the customer chooses to provide for scoping or delivery.
• Basic hosting and security logs needed to operate and protect the website.

What we do not want in first contact

Do not send credentials, passwords, private keys, full payment card details, medical records, legal files, tax files, confidential family archives, or unrestricted client materials in the first message.

If sensitive material is needed for a commissioned project, a source and privacy boundary should be agreed separately before it is shared.

Why we use personal data

• To respond to enquiries and decide whether a report or service scope is suitable.
• To confirm payment, delivery email, refund requests, and customer support issues.
• To prepare and deliver the purchased report or commissioned service.
• To keep business, accounting, security, and legal records where required.

Sharing and processors

Taiwha may use payment, email, hosting, security, accounting, and professional service providers where needed to run the business and deliver the service.

Stripe or another payment provider may process payment information. Taiwha does not ask customers to send full card details by email.

Retention

• Order, payment, refund, and business records may be kept for up to 6 years where needed for accounting, tax, legal, or dispute reasons.
• General enquiries may be kept for up to 24 months unless a longer period is needed for an active relationship, legal issue, or business record.
• Accidental sensitive data should be minimised, deleted, or returned where feasible unless retention is legally necessary.

Your rights

Depending on applicable law, you may have rights to access, correct, delete, restrict, object to, or receive a copy of your personal data.

To make a request, email [email protected]. You may also complain to the UK Information Commissioner Office if you are concerned about how your data is handled.