Services

Website Development

Static HTML & WordPress

Conversion Funnels

Email systems & lead nurturing

AI & Automations

Intelligent workflows & custom code

Resources

9

Blog

Insights on web development, AI automation, and modern digital systems.

Company

Setup and Sell Ltd

PRIVACY POLICY

Setup and Sell Ltd. ("we", "us", "the Company") operates the website setupandsell.com and any subpages. This policy describes the personal data we process on this website and is kept accurate to what the site actually does: it is an information-only site — there are no user accounts, no registration, no login, no newsletter list, and no online checkout.

1. Who We Are (Data Controller)

Setup and Sell Ltd.
11F., No. 122, Songjiang Rd., Zhongshan Dist., Taipei City 10457, Taiwan (R.O.C.)
Privacy contact: contact[at]setupandsell.com

We decide how and why your personal data is processed only in the narrow sense described below.

2. What Personal Data We Collect

  • Correspondence. There are no forms on this site. The only contact channel is the email address shown on every page. If you email us, we process your name and email address (as they appear in the email), the content of your message, and any attachments.
  • Technical data from hosting. When your browser requests our pages, our hosting provider processes standard server access-log data for delivery and security: IP address, browser/user-agent information, timestamps, and the URLs requested.
  • Usage analytics. We measure traffic with Vercel Analytics and Speed Insights, which record anonymized, cookieless page-view counts and performance metrics. No identifying profile is created.
  • Tag loader (disabled). A Google Tag Manager container is embedded on our pages. All tags inside it are currently disabled, so it collects no data at present. If we ever enable analytics tags, we will update this policy and request consent before activation.
  • Web fonts. The site's typography is served by Google Fonts; your browser requests them from Google, which processes those requests under Google's own privacy policy.

Not collected: we do not collect payment or credit-card data (no online payments exist), account or login data, advertising pixels, CRM profiles, or newsletter subscriptions.

3. Why We Use It (Lawful Basis)

  • Replying to your emails and dealing with your inquiries — performance of a contract or steps prior to a contract at your request, and our legitimate interests (GDPR Arts. 6(1)(b) and 6(1)(f)).
  • Delivering, operating, and securing this site, including server logs — legitimate interests (GDPR Art. 6(1)(f)).
  • Cookieless, aggregated analytics to understand which information is useful — legitimate interests (GDPR Art. 6(1)(f)); Vercel Analytics does not use cookies and cannot identify you.
  • Meeting legal obligations — legal obligation (GDPR Art. 6(1)(c)), where applicable.

If you email us, providing your details is voluntary; we only process what you send us, and we cannot reply if no return address is given.

4. Retention

  • Correspondence is kept on our email systems only for as long as needed to handle your inquiry, plus a reasonable period for continuity, and is deleted promptly at your request.
  • Server logs are retained by our hosting provider for a short, provider-defined period for security and diagnostics per Vercel's own privacy policy.
  • Analytics survive only as aggregate counts and statistics.
  • We keep no other personal data from this site, so nothing else is stored.

5. Who Else Receives It (Third-Party Processors)

  • Vercel Inc. (USA) — hosting and delivery of this static site, plus request logging and the anonymized Vercel Analytics/Speed Insights. Safeguards: Vercel's published data processing agreement. See vercel.com/legal/dpa.
  • Google (fonts and the embedded, disabled tag loader) — font delivery; requests are processed per Google's Privacy Policy (policies.google.com/privacy).

Our footer links to our social media pages (Facebook, X, LinkedIn, Instagram, YouTube) as ordinary outbound links; opening them is your choice and subjects you to each platform's privacy practices. We do not sell, rent, or trade personal data. There are no other processors or subprocessors in use on this site today.

6. International Transfers

We are based in Taiwan; our hosting provider is based in the United States and serves content worldwide. Personal data may therefore be processed in the United States and other countries where our providers operate. Where personal data of persons in the European Economic Area, the United Kingdom, or Switzerland is concerned, we rely on transfer safeguards documented in each provider's published terms, including adequacy decisions and Standard Contractual Clauses where used.

7. Your Rights and How to Exercise Them

You have the following rights over your personal data. Send an email to contact[at]setupandsell.com describing your request — no user account exists, so all requests (including deletion) operate by email.

  • Access and copy your personal data (GDPR Art. 15; PDPA Art. 3 — query, read, and obtain copies).
  • Rectify and complete inaccurate data (GDPR Art. 16; PDPA Art. 3).
  • Erasure: have your personal data deleted (GDPR Art. 17; PDPA Art. 3 — cessation of collection, processing, and use).
  • Restrict processing (GDPR Art. 18).
  • Portability of data you provided (GDPR Art. 20).
  • Object to processing based on our legitimate interests (GDPR Art. 21; PDPA Art. 3 — refusals of collection, processing, or use) — including refusing any marketing, which we do not send.
  • Withdraw consent at any time where consent applies (GDPR Art. 7(3)).
  • Complain to your national supervisory authority in the EU/EEA/UK — and in Taiwan to the Personal Data Protection Commission Preparatory Office, hotline (02) 3356-8015.

In Taiwan, under the PDPA you may exercise Article 3 rights: query and read, obtain copies, correct or complement your data, and request that collection, processing, or use of your personal data be stopped or its deletion. You may complain about privacy practices to the Personal Data Protection Commission Preparatory Office (hotline (02) 3356-8015).

We verify your identity by replying to the email account you contact us from; because our only data about you is your own correspondence, requests are normally answerable within one month (30 days) of receipt, and we will explain to you if any element cannot be met and why.

8. Cookies

This site sets no tracking or advertising cookies, and we run no consent-gated trackers: our analytics are cookieless and the embedded tag loader is disabled. Strictly-necessary infrastructure cookies may occasionally be set by our hosting provider. If optional analytics are enabled in the future, we will ask for consent before they activate.

9. Data Breach Notification

If a personal data breach affecting this website is detected, we will investigate, contain it, and notify the competent supervisory authority and affected individuals without undue delay as applicable law requires, including within 72 hours to a competent authority where GDPR obligations apply.

10. Children

This site is directed at businesses and persons aged 18 or over. We do not knowingly collect personal data from anyone under 18.

11. Changes to This Policy

We may update this policy from time to time. The current version is always published on this page, and the revision date below tells you when it was last updated.

12. Revision Date

This privacy policy was last updated on 27 October 2026 ("Revision Date").