How does DingYao protect my personal data?

DingYao Advisory complies with both Taiwan's Personal Data Protection Act (PDPA) and South Africa's Protection of Personal Information Act (POPIA). We use bank-grade encryption for all data transmission and storage, ensuring your KYC documents and transaction records remain fully secure.

Will DingYao share my data with third parties?

DingYao does not sell or trade your personal data. Information is only shared with partners when legally required — such as for regulatory compliance, bank account opening, or government applications — and only with your explicit authorisation.

Can I request deletion of my personal data?

Yes. Under both PDPA and POPIA, you have the right to access, correct, and delete your personal data. Submit a request anytime to info@dingyaoadvisory.tw and DingYao will process it within a reasonable timeframe.

Privacy Policy | Cross-Border Data Security

Cross-Border Compliance: Dual Safeguards

As a cross-border asset consultant, DingYao International Advisory strictly adheres to both Taiwan's Personal Data Protection Act (PDPA) and South Africa's Protection of Personal Information Act (POPIA).

Taiwan: PDPA Compliant

Personal Data Protection Act

Data used solely for authorized purposes (e.g., consultation).
No transfer to third parties without written consent.
Records stored on ISO 27001 certified encrypted servers.

South Africa: POPIA Compliant

Protection of Personal Information Act

Dedicated Information Officer at Crestline Advisory.
Cross-border transfer complies with Section 72 regulations.
Physical isolation for sensitive FICA (Anti-Money Laundering) data.

Data Flow Privacy Statement

We embed privacy protection into every step of the investment contract (Privacy by Design):

Stage 1

Consultation

Party: DingYao (Taiwan)

We collect contact info and investment needs.

Pledge: Used for internal assessment only. Not transferred to SA unless contract initiated.

Stage 2

KYC & Account

Party: Crestline / Bank

Passport & proof of funds for FICA checks.

Pledge: Documents encrypted to bank. Crestline acts as courier only; no login credentials retained.

Stage 3

Authorization

Party: Crestline (Agent)

You sign POA for milestone payments.

Pledge: Instruction authority is "Single Purpose" only (paying this project). No right to misappropriate funds.

Stage 4

Title Deed

Party: CanvasCrest / Deeds Office

Data submitted to Deeds Office upon completion.

Pledge: Developer accesses only necessary data for registration, no access to financial details.

Your Absolute Control Over Data

Right to Access

You may request to view the data we hold about you at any time.

Right to Rectification

Update your contact or ID details immediately to ensure service continuity.

Right to Erasure

Upon contract termination or expiry of statutory retention, request physical destruction or anonymization.

Privacy as Our Core Asset