Skip to content
Privacy notice

How British Chamber of Commerce in Taipei handles your personal data.

This notice explains what personal data British Chamber of Commerce in Taipei collects from members, applicants, event guests, newsletter subscribers and visitors, why, who else handles it, how long it is kept and what you can ask for. It is written to meet the notice requirements of Taiwan's Personal Data Protection Act and, for people who are in the European Union, the General Data Protection Regulation.

Last updated 30 September 2026

Who is responsible for your data

British Chamber of Commerce in Taipei (台北市英僑商務協會) is the organisation that collects your personal data and decides how it is used. Its office is at 26F, President International Tower, 9-11 Song Gao Road, Xinyi District, Taipei, 110206. Questions and requests about your data go to info@bcctaipei.com.

The chamber runs its membership, invoicing, events, website and email on a platform operated by VentureLK LLC (Delaware, United States). VentureLK LLC processes personal data only on the chamber's instructions and under a written agreement, and does not use it for any purpose of its own.

What we collect, and from whom

The chamber holds different details depending on how you deal with it.

Members and their representatives: the company, its address and registration number, the names, roles, email addresses and phone numbers of the people who represent it, the membership tier, dues, invoices, receipts and payment status, and the notes the office keeps about the relationship.

Applicants: what you enter on the membership application form, including the tier you choose and your answers to the chamber's questions. For a membership type with an age or student requirement, also what that needs: your confirmation, and your date of birth or a student card or ID if the type asks for one. Some types also ask which country you are based in.

Event guests: your name, organisation and email address, your ticket, any dietary or accessibility note you give us, and whether you attended.

Guests booked by someone else (for example at a table): the name the booker gives for you, your email and dietary note if they add them, and whether you attended. If you book for others, please share only what they are happy for the chamber to have.

Newsletter subscribers: your email address, your name if you give it, the lists you choose, and every consent, unsubscribe and preference change.

Everyone who signs in: the email address a one-time code is sent to, and the time, network address and browser of each sign-in and each action, kept in an audit log.

Members who let us know they have paid another way (bank transfer, FPS or cheque): how and when you paid, the reference, any note, and a slip or photo if you send one.

Card details are never collected by the chamber or its platform. They are entered on the payment provider's own page.

Why we use it

Administering membership: applications, the member roster, renewals, dues, invoices and receipts.

Running events: registration, tickets and entry passes, attendance, and the practical arrangements of an event.

Communicating: newsletters and invitations to those who have agreed to receive them, and messages about your own membership, invoices and registrations to everyone.

The member directory, which shows member companies by name and category to other members, or to everyone if the chamber makes it public. A contact email or phone number appears only if the member company chooses to show it.

Keeping the records the law requires the chamber to keep, and keeping the system secure.

The legal basis, where the GDPR applies

For people who are in the European Union, the chamber relies on its membership agreement with you or your organisation, on your consent for marketing email, on its legitimate interest in running the chamber and keeping it secure, and on its legal obligations for accounting records. You can withdraw consent for marketing email at any time; that does not affect anything done before you withdrew it.

Who else processes it

The platform runs on infrastructure providers under contract. They host or transmit data on the chamber's behalf and may not use it for their own purposes.

Vercel Inc.: application hosting, Singapore region.

Neon Inc.: the database, on Amazon Web Services in Singapore. Documents you upload are stored here, behind the chamber's login.

Resend Inc.: email delivery, United States.

Vercel Blob: hosting for the public images on the chamber's website and newsletters. No personal data is stored there.

Mistral AI, France: a writing assistant that helps chamber staff draft messages. It sees only what a task needs: the record a message is about, which can include a name and email address, or, when staff match a bank transfer to a member, the payer's name and the member companies' names. It never sees passwords or payment details. It runs in Europe, and Mistral does not use the data to train its models.

The chamber's payment provider: takes card payments on its own pages and receives your email address, the amount and the invoice reference so that it can take the payment.

Beyond these, your data goes to nobody outside the chamber unless the law requires it or you ask the chamber to send it somewhere.

Where it is kept

The application and the database run in Singapore. Email is delivered through a provider in the United States, and the staff writing assistant runs in the European Union. Because the chamber's providers are abroad, your data crosses borders; the contract with each provider commits them to keep it confidential and secure.

How long we keep it

Membership, invoice and event records: for as long as you or your organisation are a member, and afterwards for the period that the rules of the chamber and the law on accounting records require.

Applications: as part of the membership record if approved; if not, until you ask the office to remove them.

Guest names, emails and dietary notes given with a booking: kept with that booking, and deleted with it.

A student card or ID sent to confirm eligibility: deleted once the application is decided, unless the membership type keeps proofs. The chamber keeps only a note that the check was done, by whom and when, and the date the membership stops qualifying. A date of birth is kept only where the membership type needs it.

Newsletter consents and preferences: until you unsubscribe. A record that you unsubscribed is kept so that you are not emailed again.

A payment slip or photo you send: deleted once the chamber office records the payment or sets it aside, unless the chamber keeps proofs. How and when you paid, and the reference, stay with the payment record.

One-time sign-in codes: minutes, then they expire.

The audit log: for the life of the chamber's account, because it is the record of who did what.

When the chamber stops using the platform, its data is exported to the chamber and deleted from the platform on the chamber's written request, except where financial records must be kept.

Your rights, and how to use them

You can ask the chamber for any of the following.

A copy of what the chamber holds about you.

Correction of anything that is wrong or out of date.

Deletion, except for invoices, receipts and the audit line that records the deletion, which are financial records the chamber must keep.

To stop marketing email at any time: use the unsubscribe link in any newsletter, the preferences page, or write to the office. Messages about your own invoices and registrations continue while you are a member.

To have your company removed from the member directory, or its contact details taken off it.

To complain to the authority responsible for personal data protection where you live.

Making a request

Write to info@bcctaipei.com. The chamber answers within the time the law allows and confirms in writing what it has done. Members can see their own company, invoices and registrations at any time by signing in to the member portal.

If you would rather not share these details

Membership, event registration and the newsletter each need the details described above. If you choose not to provide them, the chamber cannot process your application or registration, or send you its newsletter.

Cookies and analytics

The website sets no tracking cookies. Page views are counted without cookies and without identifying you. The only cookies are the ones that keep a signed-in member or staff member signed in and one that remembers which chamber's site you are on. There are no advertising trackers and no third-party fonts.

Changes to this notice

This notice was last updated on 30 September 2026. If the chamber changes how it uses your data, this page is updated and the date changes with it.