GDPR-aligned
Privacy Policy
This policy explains how Weiyon Industry ("we") collects, uses, and protects personal data when you visit weiyon.com or submit the contact form. It is aligned with EU GDPR Art. 13 disclosure requirements and Taiwan's Personal Data Protection Act.
Last updated: May 2026
1. Data Controller
Weiyon Industry (偉勇工業社)
Address: No. 35, Aly. 118, Ln. 332, Sec. 8, Huanzhong Rd., Wuri Dist., Taichung City, Taiwan
Phone: +886-4-2335-6451
Email: agesmyth@gmail.com
For any questions about your personal data or to exercise your rights, please contact us via the channels above.
2. Data We Collect
(a) Information you provide (contact form):
• Required: name, email, message
• Optional: phone, company, country, quantity, INCOTERMS, attachments (CAD files, PDFs, etc.)
(b) Information collected automatically (only after cookie consent):
• Google Analytics 4: page views, events, geolocation (country/city level), device type, browser
• IP address: anonymized via GA4 anonymize_ip — last octet masked (e.g. 192.168.1.x → 192.168.1.0)
• Google Signals and Ad Personalization are disabled — your data is not used for advertising.
3. Legal Basis for Processing (GDPR Art. 6)
• Contact form data: legitimate interest in responding to your inquiry (Art. 6(1)(f)) and contractual necessity for fulfilling the inquiry (Art. 6(1)(b))
• Email notifications (sent to our inbox via Resend): same legitimate interest as above
• Google Analytics 4: based on your explicit consent given through the Cookie Preferences banner (Art. 6(1)(a)). You may withdraw consent any time (footer "Cookie settings").
4. Data Retention
• Contact form submissions: retained 3 years (matching our batch traceability retention) for inquiry follow-up and quality dispute resolution
• Attachment files (Supabase Storage): signed URLs valid 90 days, original files retained 3 years
• Google Analytics 4: GA4 default retention period of 14 months
After retention, data will be deleted or anonymized within a reasonable time.
5. Third-Party Processors
To operate this site, we use the following processors qualified under GDPR Art. 28:
• Vercel Inc. (hosting) — USA, SCCs in place
• Supabase Inc. (database & file storage) — USA, SCCs in place
• Resend Inc. (email notifications) — USA, SCCs in place
• Google LLC (Analytics 4) — USA, certified under EU-US Data Privacy Framework
We have verified that these processors provide adequate data protection and process your data only on our instructions.
6. International Data Transfers
Because the above processors are located in the United States, your data may be transferred outside the EU/EEA.
We rely on the following mechanisms to ensure lawful transfer:
• Standard Contractual Clauses (SCCs, 2021) — Vercel, Supabase, Resend
• EU-US Data Privacy Framework — Google LLC (certified)
You may request copies of relevant SCCs by contacting us.
7. Your Rights (GDPR Art. 15-22)
You may exercise the following rights at any time:
• Right of access: obtain a copy of data we hold about you
• Right to rectification: correct inaccurate data
• Right to erasure (right to be forgotten): request deletion of your data
• Right to restrict processing: ask us to pause specific processing
• Right to data portability: receive your data in structured format
• Right to object: object to processing based on legitimate interest
• Right to withdraw consent: revoke GA4 cookie consent (footer "Cookie settings")
• Right to lodge a complaint: EU users may complain to their local data protection authority
How to exercise: email agesmyth@gmail.com — we will respond within 30 days.
8. Cookies
This site uses only two categories of cookies:
(a) Essential (no consent required):
• weiyon-cookie-consent (localStorage) — stores your cookie consent choice, 1-year retention
• Next.js / next-intl essential technical cookies (e.g. locale preference)
(b) Analytics (consent required):
• Google Analytics 4 cookies (_ga, _ga_*) — identify unique visitors, calculate sessions
• Click footer "Cookie settings" any time to revoke consent — these cookies will no longer be set.
9. Contact Us
For any questions about personal data or to exercise your rights, please email:
agesmyth@gmail.com
This policy may be updated due to legal or service changes. Material changes will be announced on the homepage — please check this page periodically.
Questions about our compliance and transparency?
Contact Us