Taiwan PDPA notice

Privacy Policy and Personal Data Notice

This website follows Taiwan Personal Data Protection Act principles: clear notice, specific purpose, minimum necessary collection, secure storage, retention limits, and data subject rights.

Updated2026-05-24
Privacy request:02-2211-2271

Data controller and contact

碧潭大藥局 is the personal data controller for this website. For access, correction, deletion, restriction, or objection requests, please contact us by phone at 02-2211-2271.

Purposes of collection

We collect and use personal data only for pharmacy service inquiries, prescription pickup reservations, order status notification, product inquiry or reservation, AI customer support record keeping, customer dispute handling, security, audit, and legal compliance.

Categories of personal data

Depending on the service, we may collect name, mobile phone number, optional email, optional LINE/contact account, prescription image or file, pickup date/time, inquiry message, order number, IP address, user agent, source page, support conversation content after sanitization, consent version, and consent timestamp.

Use period, area, recipients, and method

Data is used in Taiwan and in cloud systems necessary to operate the website and pharmacy services. Access is limited to authorized pharmacy staff and commissioned service providers needed for hosting, database, notification, AI support, Telegram notification, security, and audit. Cross-border transfer may occur when cloud or AI services process data outside Taiwan; we apply minimum necessary transmission and security controls.

Retention and deletion

Prescription files are retained only for service processing and are scheduled for short retention. AI support conversations are stored in sanitized form for service dispute handling and audit, normally up to 180 days unless flagged for legal, safety, or dispute preservation. Data whose purpose no longer exists will be deleted or stopped from further use unless business, legal, or dispute-preservation needs apply.

Your rights and effects of not providing data

You may request inquiry, review, copy, correction, supplementation, cessation of collection/processing/use, or deletion of your personal data. If you do not provide required data, we may be unable to provide prescription reservation, product inquiry, order tracking, AI support, or related notification services.

Security and incident response

We use access control, audit logs, storage restrictions, retention rules, and administrative controls to reduce unauthorized access, alteration, loss, leakage, or misuse. If a personal data incident occurs, we will take containment actions, preserve records, and notify/report as required by applicable law.

How to exercise your rights

To exercise privacy rights, please use the online privacy request form or call the pharmacy, and provide enough information for identity verification and request handling.

CallPrescriptionDirections