Last updated: 5 October 2026
This policy explains what personal data Ground Biotech collects through ground-bt.com, why we collect it, who receives it and what rights you have. We are a B2B export company, and this website is intended for business buyers.
1. Who is responsible for your data
The data controller is Ground Biotech Co., Ltd. (寬達生技有限公司), No. 8, Ln. 194, Zhangshui Rd., Changhua City, Changhua County 500, Taiwan.
For any privacy question or request, email [email protected] or call +886-4-752-5377 ext. 03.
2. What we collect and why
Inquiry and contact forms
When you send an inquiry, we collect the details you enter: name, company, email address, phone number, country, product category, message and the products on your inquiry list. Our system also records the page you sent it from, the site language, your IP address, the country derived from that address, and your browser type.
We use this data to answer your inquiry, prepare quotations and follow up on the business relationship. The legal basis is taking steps at your request before entering into a contract (Article 6(1)(b) GDPR). For the technical data, the legal basis is our legitimate interest in preventing spam and abuse (Article 6(1)(f) GDPR).
You are not obliged to provide this data, but without your contact details and message we cannot reply to you.
Product updates by email
If you enter your email address in the subscription box, we store the address and the page where you subscribed, and use it only to send you product updates. The legal basis is your consent (Article 6(1)(a) GDPR). You can withdraw it at any time through the unsubscribe link in our emails or by writing to us.
Email, phone and WhatsApp
If you contact us by email, phone or WhatsApp, we keep your messages and the contact details you share so that we can respond and handle your request (Article 6(1)(b) and (f) GDPR). WhatsApp is operated by Meta and is subject to its own privacy terms.
Visiting the website
Like most websites, our server and our security and delivery provider Cloudflare process your IP address, browser type and the pages you request in order to deliver the site and protect it against attacks. The legal basis is our legitimate interest in a secure and working website (Article 6(1)(f) GDPR).
We count visits with WP Statistics, which runs on our own server, sets no cookies and stores IP addresses only in anonymised, hashed form. Cloudflare Web Analytics measures page performance without cookies and without building visitor profiles.
Our forms are protected by Cloudflare Turnstile, which checks technical signals from your browser to tell people from automated programs.
The products you add to your inquiry list are saved in the local storage of your own browser. They are sent to us only when you submit the inquiry form.
The page footer shows a Taiwantrade badge that is loaded from taiwantrade.com, so that server receives your IP address when the image loads.
3. Cookies and similar technologies
Analytics and advertising cookies are set only after you accept them in the cookie banner. If you decline or ignore the banner, they are not set.
- Necessary: server_name_session, a technical session cookie set by our hosting server.
- Necessary: seopress-user-consent-accept or seopress-user-consent-close, which remembers your cookie choice for 30 days.
- Necessary: Cloudflare may set a security cookie when it needs to verify that a request comes from a real browser.
- Analytics, only with your consent: Google Analytics 4 (_ga and _ga_BD2HVMKBG9, up to 2 years), used to understand how visitors use the site.
- Advertising, only with your consent: Google Ads (_gcl_au, 90 days, and cookies set by Google on doubleclick.net), used to measure the results of our ads and to show our ads to people who have visited the site.
The legal basis for analytics and advertising cookies is your consent (Article 6(1)(a) GDPR). You can change or withdraw your choice at any time with the link below or the Cookie Settings link at the bottom of every page.
4. Who receives your data
We do not sell personal data. We share it only with the recipients below, and only as far as needed.
- Cloudflare, Inc. (United States): website delivery, security, Turnstile and performance measurement.
- Google: Gmail, which we use for business email and where inquiry notifications are delivered, and, only with your consent, Google Analytics and Google Ads.
- Brevo: delivery of the emails sent by this website.
- Our website hosting provider: operation of the server where inquiries and subscriptions are stored.
- Kantatsu Shoji LLC (合同会社寛達商事), our affiliate in Japan: when it is needed to handle your inquiry.
- Manufacturers, freight forwarders and other business partners: only when necessary to quote or fulfil your order, and normally limited to business contact details.
- Public authorities: where the law requires it.
5. Transfers outside the European Economic Area
Ground Biotech is located in Taiwan, so the data you send us is processed in Taiwan. Some of our service providers process data in the United States and other countries.
Taiwan is not covered by an adequacy decision of the European Commission. When you send us an inquiry, the transfer is necessary to take steps at your request before a contract (Article 49(1)(b) GDPR). Google and Cloudflare rely on recognised safeguards such as the EU-U.S. Data Privacy Framework or the standard contractual clauses of the European Commission.
6. How long we keep data
- Inquiries and related correspondence: 3 years after our last contact with you.
- Orders and accounting records, if you become a customer: as long as tax and commercial law requires.
- Product-update subscription: until you unsubscribe.
- Visit statistics: kept only in anonymised form.
- Cookies: for the periods listed in section 3.
7. Your rights
Where the GDPR applies to you, you have the right to:
- Access the personal data we hold about you and receive a copy.
- Have inaccurate data corrected.
- Have your data erased.
- Have the processing of your data restricted.
- Object to processing based on our legitimate interests, and to direct marketing at any time.
- Receive the data you gave us in a commonly used format (data portability).
- Withdraw your consent at any time. This does not affect processing carried out before the withdrawal.
To use any of these rights, email [email protected]. We reply within one month and may ask for information to confirm your identity.
You also have the right to lodge a complaint with the data protection authority of the country where you live or work.
Under the Personal Data Protection Act of Taiwan, you may ask to inquire about, review or copy your data, to supplement or correct it, to have its collection, processing or use stopped, and to have it deleted.
We do not use your data for automated decision-making or profiling that has legal or similarly significant effects on you.
8. Children
This website is intended for business buyers. We do not knowingly collect personal data from anyone under 16.
9. Security
The website is served over an encrypted HTTPS connection, inquiry records are stored in a password-protected administration area, and forms are protected against automated abuse. No transmission over the internet is completely secure, but we work to protect your data and will notify you and the authorities of a data breach where the law requires.
10. Changes to this policy
We may update this policy when the website or the law changes. The date at the top shows the current version.