Privacy Policy

Introduction

Citadel Nexus ("we," "our," or "us") is committed to protecting your privacy and personal information. This Privacy Policy explains how we collect, use, store, and protect your personal data when you use our website, engage our consulting services, or otherwise interact with our firm.

We operate under the jurisdiction of Taiwan and comply with applicable data protection regulations including the Taiwan Personal Data Protection Act. By using our services or website, you acknowledge that you have read and understood this Privacy Policy.

If you have questions or concerns about this Privacy Policy or our data practices, please contact us at [email protected].

Information We Collect

Personal Information You Provide

We collect personal information that you voluntarily provide to us when you:

• Contact us through our website forms or email
• Engage our consulting services
• Subscribe to our communications
• Attend our events or meetings

This information may include your name, email address, phone number, business information, investment interests, and any other information you choose to provide.

Automatically Collected Information

When you visit our website, we automatically collect certain information about your device and browsing activity, including:

• IP address and general location information
• Browser type and version
• Operating system
• Pages visited and time spent on our website
• Referral source and website navigation patterns

This information is collected through cookies and similar technologies. Please see our Cookie Policy for detailed information.

How We Use Your Information

We use your personal information for the following purposes:

Service Delivery

• Providing investment consulting services and support
• Responding to your inquiries and communications
• Coordinating with professional networks on your behalf
• Maintaining engagement documentation and records

Business Operations

• Managing client relationships and engagements
• Processing payments and maintaining financial records
• Improving our services and website functionality
• Conducting internal business analysis and planning

Communications

• Sending service-related notifications and updates
• Providing market insights and consulting information (with your consent)
• Responding to customer service requests

Legal Basis for Processing

We process your personal data based on:

• Contractual necessity when providing consulting services
• Your explicit consent for marketing communications
• Our legitimate business interests in maintaining client relationships
• Legal obligations under Taiwan regulations

Data Sharing and Disclosure

Third-Party Service Providers

We may share your information with trusted third-party service providers who assist us in:

• Website hosting and technical infrastructure
• Email communications and customer relationship management
• Payment processing and financial services
• Professional services (legal, accounting, regulatory specialists)

These providers are contractually obligated to maintain confidentiality and use your information only for specified purposes.

Legal Requirements

We may disclose your information when required by law or when we believe disclosure is necessary to:

• Comply with legal obligations or governmental requests
• Protect our legal rights and property
• Prevent fraud or other illegal activities
• Protect the safety of our clients, employees, or others

No Sale of Personal Data

We do not sell, rent, or trade your personal information to third parties for marketing purposes.

Data Security

We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. Our security measures include:

• Encryption of data in transit and at rest
• Secure server infrastructure with access controls
• Regular security audits and vulnerability assessments
• Employee training on data protection practices
• Restricted access to personal data on need-to-know basis

While we strive to protect your personal information, no method of transmission over the internet or electronic storage is completely secure. We cannot guarantee absolute security but maintain industry-standard protective measures.

Data Retention

We retain your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law.

Specific retention periods:

• Client engagement records: Seven years after engagement completion for legal and business purposes
• Marketing communications data: Until you withdraw consent or two years of inactivity
• Website analytics data: Twelve months from collection
• Financial and tax records: Seven years as required by Taiwan regulations

When personal information is no longer needed, we securely delete or anonymize it in accordance with our data retention policies.

Your Privacy Rights

Under Taiwan's Personal Data Protection Act and applicable regulations, you have the following rights:

Right to Access

You may request access to the personal information we hold about you. We will provide a copy of your data in a commonly used format.

Right to Rectification

You may request correction of inaccurate or incomplete personal information we maintain about you.

Right to Erasure

You may request deletion of your personal information in certain circumstances, such as when it is no longer necessary for the purposes collected or when you withdraw consent.

Right to Restrict Processing

You may request that we limit how we use your personal information in certain situations, such as while we verify accuracy or assess your objection to processing.

Right to Data Portability

You may request a copy of your personal information in a structured, machine-readable format for transmission to another service provider.

Right to Object

You may object to our processing of your personal information based on legitimate interests or for direct marketing purposes.

Right to Withdraw Consent

Where we process your data based on consent, you may withdraw that consent at any time. This will not affect the lawfulness of processing based on consent before withdrawal.

How to Exercise Your Rights

To exercise any of these rights, please contact us at [email protected]. We will respond to your request within thirty days as required by Taiwan law.

Cookies and Tracking Technologies

We use cookies and similar technologies to enhance your website experience and analyze site usage. For detailed information about our use of cookies, the types we use, and how to manage your preferences, please see our Cookie Policy.

Third-Party Links

Our website may contain links to third-party websites for your convenience and information. We are not responsible for the privacy practices or content of these external sites. We encourage you to review the privacy policies of any third-party sites you visit.

Children's Privacy

Our services are not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If you believe we have inadvertently collected information from a minor, please contact us immediately so we can delete such information.

International Data Transfers

Your personal information may be transferred to and processed in countries other than Taiwan. When we transfer data internationally, we ensure appropriate safeguards are in place to protect your information in accordance with this Privacy Policy and applicable data protection laws.

Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of material changes by posting the updated policy on our website with a new "Last Updated" date.

Your continued use of our services after policy changes indicates your acceptance of the updated Privacy Policy. We encourage you to review this policy periodically to stay informed about how we protect your information.

Contact Information

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

We will respond to privacy-related inquiries within thirty days as required by Taiwan's Personal Data Protection Act.

Supervisory Authority

If you believe your privacy rights have been violated or you are dissatisfied with our response to your concerns, you have the right to lodge a complaint with Taiwan's Ministry of Justice Investigation Bureau, Cyber Security Office, or other relevant supervisory authority.