Privacy Policy

"Your Story, Your Taipei" Giveaway · Last updated: 2026-05-29

This Privacy Policy explains how we collect, use, share, and protect your personal data when you participate in the "Your Story, Your Taipei" giveaway campaign (the "Campaign"). For the full Campaign rules, see the Terms & Conditions.

1. Data controller

Controller: Woowaa Asset Management Co., Ltd. (屋瓦資產管理有限公司)
Taiwan unified business number: 94186325
Contact for privacy matters: service@woo-waa.com

2. Data we collect

When you enter the Campaign and use this website, we may collect the following:

Email address
Instagram handle
Country / region
Your Taiwan story (short free-text comment from Step 1)
If you submit Step 2: planned arrival date, length of stay, visa type, city, monthly budget, source of referral
IP address (stored as a salted hash, never in raw form)
Browser fingerprint (stored as a salted hash, used for duplicate-entry prevention)
Page-view and interaction data collected by the Meta Pixel, only if you have opted in via the consent banner

3. How we use your data

Campaign execution: validating entries, running the drawing, notifying and verifying winners, delivering prizes, and tax reporting where applicable.
Marketing & remarketing: sending you news, offers, and remarketing communications related to TING STATES and Woowaa for a period of 24 months after the end of the Campaign. You may unsubscribe at any time using the link in any email.
Fraud prevention: detecting duplicate entries, automation, and other abusive behavior using the hashed identifiers described above.

4. Who we share your data with (processors)

We share the minimum data necessary with the following service providers, who act as our processors:

Meta (United States) — Conversion API and Meta Pixel for advertising attribution and remarketing.
Google (United States) — tag and analytics services where applicable.
Cloudflare (multi-region) — hosting, edge storage, bot protection (Turnstile), and delivery infrastructure.
Resend (United States) — transactional email delivery for entry confirmations and winner notifications.

We do not sell your personal data to any third party.

5. Cross-border transfer

Some of the processors listed above operate in the United States and other regions outside Taiwan. By entering the Campaign you acknowledge and consent to the transfer of your personal data to those jurisdictions. We require all processors to maintain appropriate technical and organisational safeguards.

6. Cookies and tracking

Necessary cookies / storage — required for form submission, the Cloudflare Turnstile challenge, and to remember your consent choice. These are always active.
Advertising / remarketing — the Meta Pixel and related tags load when you choose either “Accept all” or “Necessary only”, because the remarketing identifier is treated as necessary to operate this campaign.
Analytics — load only if you choose “Accept all”.

7. Data retention

We retain your personal data for 24 months after the end of the Campaign, after which it is deleted automatically via our edge storage time-to-live (TTL) policy. Hashed identifiers used for fraud prevention follow the same 24-month retention.

Records that we are legally required to keep for tax or audit purposes (for example, withholding statements for the grand prize winner) are retained for the period required by Taiwan law.

8. Your rights

You have the right to:

Access the personal data we hold about you
Request correction of inaccurate data
Request a portable copy of your data
Request erasure of your data
Request that we stop processing your data
Withdraw your consent at any time

To exercise any of these rights, please email service@woo-waa.com. We aim to respond within 30 days, in line with GDPR practice, and in all cases within a reasonable period as required by the Taiwan PDPA.

How to withdraw consent

Tracking cookies: clear your browser's localStorage entry tsgiveaway_consent_v1 for this site, and the consent banner will reappear so you can choose again.
Marketing emails: use the unsubscribe link in any email we send you.
All other processing: contact service@woo-waa.com.

9. Security

We use HTTPS for all data in transit, salted hashing for IP and browser fingerprint storage, and access controls on all administrative systems. No security measure is perfect, but we take reasonable steps to protect your data against unauthorised access, loss, or alteration.