Privacy Policy

Welcome to InjectionLab (hereinafter referred to as the "Company" or "we"). As a professional cybersecurity firm, we deeply understand the importance of data protection and privacy to you. This Privacy Policy is intended to explain how we collect, process, use, and protect your personal data.

1. Collection and Sources of Personal Data

When you visit our website or use our services, we may collect the following categories of data:

• Contact Information: When you fill out the "Contact Us" form, we collect your name, email address, company name, and required services.
• System Logs: Including but not limited to your IP address, browser type, time of visit, and pages browsed (usually collected automatically via Cookies).
• Data Required for Project Execution: When you sign a service contract with us for projects such as penetration testing or vulnerability scanning, we collect the necessary system authorizations and technical contact information required to fulfill the contract.

2. Purposes of Using Personal Data

The Company collects your personal data primarily for the following purposes:

• To respond to your inquiries and provide customer service.
• To execute and fulfill the signed cybersecurity service contracts.
• To send you our latest cyber threat intelligence, service updates, or event notifications (you can unsubscribe at any time).
• To optimize our website experience and service quality.

3. Data Sharing and Third-Party Disclosure

The Company is committed to a strict confidentiality obligation regarding your personal data. Except in the following circumstances, we will never sell, exchange, or lease your data to any third party:

• With your explicit consent.
• When required to fulfill statutory obligations (e.g., lawful requests by judicial authorities).
• When necessary to protect national security or promote the public interest.

4. Data Security Mechanisms

Protecting your data is our highest principle. We have implemented technical and organizational measures that meet high industry standards (including end-to-end encrypted transmission, strict internal access controls, and regular vulnerability scanning) to prevent your personal data from unauthorized access, alteration, leakage, or destruction.

5. Your Rights as a Data Subject

In accordance with relevant personal data protection laws, you may exercise the following rights regarding the personal data held by the Company:

• Inquire or request to review.
• Request a copy.
• Request supplements or corrections.
• Request to cease collection, processing, or use.
• Request deletion.

6. Contact Us

If you have any questions about this Privacy Policy or wish to exercise your rights as a data subject, please contact us via:
Email: service@injectionlab.com.tw