1. Who we are

Aspiring Selections provides curated product catalogs, due diligence, and offline commercial workflows for enterprise buyers in Energy & Power, Safety & Emergencies, and Travel & Tourism.

For privacy questions or to exercise your rights, contact us at privacy@aspiring-selections.com.

2. Data we collect

We may collect the following categories of personal data:

• Account data: email address, display name, company name, password (stored hashed), preferred language, and interest product areas you select at registration.
• Authentication data: one-time verification codes, session identifiers, and security logs (IP address, user agent, timestamps) associated with sign-in and two-factor authentication.
• Profile and preferences: display name updates, locale preference, and vertical interests you manage in your account settings.
• Commercial workflow data: quotation requests and due diligence records linked to your organization when you use the client portal (handled offline; not sold online).
• Technical data: server and application logs, request metadata, and cookies described in our Cookie Notice.
• Communications: emails we send for verification, security alerts, and offline follow-up related to your account or commercial inquiries.

3. How we use your data

• Provide and secure the platform, including authentication, authorization, and fraud prevention.
• Personalize your experience (for example, language and catalog interests).
• Respond to quotation requests and support offline commercial processes.
• Maintain audit trails required for B2B compliance and internal governance.
• Improve reliability, diagnose errors, and protect against abuse.
• Comply with legal obligations and enforce our Terms of Service.

4. Legal bases (where applicable)

Depending on your location, we rely on: performance of a contract (providing your account and portal services); legitimate interests (security, product improvement, B2B relationship management); consent (where required, such as optional marketing in future releases); and legal obligation.

5. Sharing and disclosure

We do not sell personal data. We may share data with:

• Authorized staff and reviewers within Aspiring Selections who need access to perform their role.
• Infrastructure providers that host or operate the platform under contractual confidentiality and security obligations.
• Professional advisers or authorities when required by law or to protect rights, safety, and security.

Supplier direct contact details and internal staff notes are never exposed to client-facing APIs.

6. International transfers

Our platform may be accessed globally. Where personal data is transferred across borders, we apply appropriate safeguards consistent with applicable law (such as standard contractual clauses or equivalent mechanisms where required).

7. Retention

• Account data is retained while your account is active and for a reasonable period afterward to resolve disputes, meet legal requirements, and maintain audit records.
• Security and audit logs are retained according to our internal retention schedule (typically 12–24 months unless a longer period is required by law or investigation).
• Commercial records may be retained for the duration of the business relationship and applicable statutory limitation periods.

8. Security

We use industry-standard measures including encrypted transport (HTTPS), httpOnly session cookies, password hashing, role-based access control, rate limiting, and audit logging. No method of transmission or storage is completely secure; please use a strong, unique password and protect your verification codes.

9. Your rights

Depending on applicable law (including GDPR and Taiwan Personal Data Protection Act), you may have rights to access, correct, delete, restrict, or object to certain processing, and to data portability where technically feasible.

To exercise these rights, contact privacy@aspiring-selections.com. We may need to verify your identity before responding.

10. Children

Our services are intended for business users and are not directed at children under 16. We do not knowingly collect personal data from children.

11. Changes

We may update this Privacy Policy from time to time. Material changes will be reflected by updating the "Last updated" date. Continued use of the platform after changes constitutes acceptance where permitted by law.