TAPI Ltd. (the “Company”) operates the Tapi Online Japanese Language School website and related services (the “Services”). We value the protection of your personal data and have established this Privacy Policy in accordance with Taiwan's Personal Data Protection Act (the “PDPA”) and other applicable laws. Please read this Policy carefully before using the Services. By registering an account, purchasing lessons, or otherwise using the Services, you acknowledge that you have read, understood, and agreed to this Policy.

​

1. Scope

​

This Policy applies to the Company's collection, processing, and use of your personal data when you use the Services at https://www.tapi.tw/. It does not apply to third-party websites or services linked from the Services. Please refer to those providers' privacy policies for information about their data protection practices.

​

2. Data Controller

​

• Company name: TAPI Ltd.

• Business registration number: 62093284

• Address: No. 325, Section 1, Wenxin South 5th Road, Fengle Village, Nantun District, Taichung City, Taiwan

• Customer support email: info@tapi.tw
   

3. Purposes of Collection

​

The Company collects, processes, and uses your personal data for the following specific purposes, including the purpose codes published by Taiwan's Ministry of Justice:

1. 040 Marketing

2. 069 Matters relating to contracts, quasi-contracts, or other legal relationships

3. 090 Consumer and customer management and services

4. 129 Accounting and related services

5. 135 Information and communication services

6. 152 Advertising or commercial activity management

7. 157 Surveys, statistics, and research analysis

8. 181 Other business activities consistent with the registered business scope or articles of association
    

4. Categories of Personal Data Collected
 

Depending on how you use the Services, the Company may collect the following categories of personal data:

1. Identification data (C001, C003): name, nickname, email address, telephone number, messaging account details such as LINE ID, and similar information.

2. Personal characteristics (C011): date of birth, gender, nationality, preferred language, and similar information.

3. Financial transaction data (C002, C093): payment records, invoice details, and similar information. The Company does not directly collect or store your full credit card number. Card payment details are processed by our third-party payment provider using its security procedures.

4. Learning-related data (by analogy with C051, C052): Japanese proficiency, learning goals, course selections, attendance records, lesson assessments, tutor feedback, assignments, and similar information.

5. Technical and usage data: IP address, device and browser information, cookies, and records of your browsing and interactions with the Services.

6. Lesson recordings: your image and voice in recordings made with the agreement of both parties, for example, to allow students to review lessons.
    

5. Retention Period, Locations, Recipients, and Methods of Use
 

1. Retention period: from the date you register or begin using the Services until seven years after your membership ends, or until the purpose of collection no longer exists or you request deletion under applicable law. Where a different retention period is required by law, that requirement applies.

2. Locations: Taiwan and the locations of servers operated by the cloud services, video conferencing systems, and payment providers we use. These servers may be outside Taiwan; see Section 6 on international transfers.

3. Recipients:

   • The Company and its employees;

   • Tutors providing your lessons, limited to information necessary for teaching, such as your name, nickname, proficiency level, and learning records;

   • Service providers engaged by the Company, including website platforms, video conferencing providers, payment processors, electronic invoice services, and email newsletter providers;

   • Government agencies with lawful investigative authority.

   • Other than the recipients listed above, the Company will not provide, exchange, rent, or sell your personal data to third parties. The Company will also not circulate your personal data between separate legal entities within its corporate group or disclose or use it beyond the purposes of the contract.

4. Methods: automated or non-automated collection, processing, and use, including electronic file storage, email, and message notifications.
    

6. International Transfers
 

Some systems used for the Services may have servers outside Taiwan. Your personal data may therefore be transferred abroad for storage or processing. The Company will require service providers to protect your data using security standards consistent with applicable laws. If you do not agree to these international transfers, please do not use the Services, or contact customer support.
 

7. Your Rights Under the PDPA
 

Under Article 3 of the PDPA, you may exercise the following rights in relation to personal data held by the Company:

1. Make inquiries or request access;

2. Request a copy;

3. Request supplementation or correction;

4. Request that collection, processing, or use cease;

5. Request deletion.
    

You may submit a request by emailing customer support. The Company will respond within the time limits and in the manner required by the PDPA. Under Article 14, the Company may charge necessary costs for inquiries, access, or copies. Where retention is necessary to comply with the law, perform a contract, or conduct business, the Company may lawfully decline to delete data or cease its use and will explain the reasons.
 

8. Consequences of Not Providing Personal Data
 

You may choose whether to provide personal data. However, if you decline to provide information needed for registration, course selection, payment, or other processes, or provide incomplete or inaccurate information, the Company may be unable to provide all or part of the Services.
 

9. Cookies and Analytics Tools
 

1. To improve your experience, the Services store and read cookies in your browser. You can reject or delete cookies in your browser settings, although some features may then be unavailable or may not work correctly.

2. The Services use third-party analytics and advertising tools, including Google Analytics 4 and Meta Pixel, to analyze website traffic and usage through anonymized or de-identified statistical data. Processing by these tools is also subject to the relevant providers' privacy policies.
    

10. Data Security
 

In accordance with Article 27 of the PDPA, the Company takes appropriate security measures, including access controls, SSL/TLS encryption in transit, and oversight of service providers, to prevent theft, alteration, damage, loss, or disclosure of your personal data. Internet transmission cannot be guaranteed to be completely secure. If a personal data incident occurs, the Company will notify you appropriately as required by law.
 

11. Protection of Minors
 

Users under 18 may register and use the Services only after their legal representative has read, understood, and agreed to this Policy in full. If the Company becomes aware that a minor's personal data was collected without that consent, it will promptly delete the data or cease using it.
 

12. Changes to This Policy
 

The Company may amend this Policy to meet legal or business needs and will publish the revised Policy on the website. For material changes, the Company will also notify you by appropriate means, such as email or an on-site notification. Continued use of the Services after publication of an amendment constitutes agreement to the revised Policy.
 

13. Contact Us
 

If you have questions about this Policy or personal data protection, or wish to exercise your rights under the PDPA, please contact:

• TAPI Ltd.

• Customer support email: info@tapi.tw