Personal Data Protection Notice
Fendodo Co., Ltd. 分多多股份有限公司 (hereinafter "the Company") gives you the following notice, under Article 8 of the Personal Data Protection Act (個人資料保護法), about the collection, processing and use of your personal data by this system, prep.fendodo.net.
Last updated: September 2026 · Scope: prep.fendodo.net and its related services
1. Who we are
Fendodo Co., Ltd. 分多多股份有限公司
Unified business number: 62153629
Address: 7F, No. 148, Section 1, Xinsheng South Road, Zhongzheng District, Taipei
Telephone: 02-2351-6111 Email: [email protected]
2. What data we collect
We collect only the data needed to provide the service. Depending on the features you use, it may include:
| Account data | Name, email address (which is your login account), telephone number, school, year group, and password (stored as a hash; the Company cannot restore or read it). |
|---|---|
| Learning records | Mock exam answers and scores, practice records, speaking recordings and transcripts, writing and essay content, score analyses, the inputs and results of school-match analyses, study plans and teachers' comments. |
| Personal profile | The school grades, courses taken, and target schools, departments and countries that you enter yourself, and the parent/guardian contact details that you enter yourself (name, relationship, telephone, email, LINE). |
| Transaction data | Order number, items purchased, amount, payment method, payment result, invoice details, and the last four digits of the credit card or the ATM virtual account number. The Company does not obtain or store your full credit card number. |
| LINE linking | The LINE user identifier, display name and profile picture URL obtained when you sign in with LINE, and whether you have added the Company's official account as a friend. |
| Consultation requests | What you enter on the free consultation page (free-consult.html): the student's name or nickname, year group, the countries of interest, who is filling in the form (the student or a parent), and the mobile number or email address you leave; we also record when it was sent and which link brought you to the page. |
| Connection and device | The IP address used at sign-in, browser and device type, and sign-in and last activity times. Used to maintain account security and the "one device at a time" rule. |
3. Purposes of collection and how the data is used
The specified purposes include: education or training administration (教育或訓練行政), contracts, quasi-contracts or other legal relationships (契約、類似契約或其他法律關係事務), consumer and customer management and service (消費者、客戶管理與服務), and the collection, processing and use of personal data by a non-government agency in performance of statutory obligations (非公務機關依法定義務所進行個人資料之蒐集處理及利用). Specifically, the data is used to:
- Create and maintain your account and confirm your service entitlements and their validity period.
- Provide mock exams, the practice area, score analysis, school-match analysis and study planning, on the basis of which your consultant and teachers give guidance.
- Process orders, payments, activation, invoices and customer service contact.
- Contact you by the mobile number or email address you leave on the free consultation page, so that a consultant can arrange your consultation.
- Send service messages about orders, activation and validity periods by LINE or email.
- Maintain system security and prevent account theft and misuse.
The period of use is the period for which the above purposes subsist; the territory of use is the Company's place of operation and the locations of the service providers listed in section 4; the parties using the data are the Company and the parties listed in section 4; and the manner of use is electronic and paper-based use within the scope necessary for the above purposes.
4. Who we share it with
We do not sell your personal data. In order to provide the service, the following parties process your data within the necessary scope:
| ECPay 綠界科技 (Taiwan) | Online payment. We send the order number, amount and item names; your credit card details are collected by ECPay directly on its own page and do not pass through the Company. Once payment is complete, we receive only the payment result and the last four digits of the card or the virtual account number. |
|---|---|
| LINE (LY Corporation, Japan) | Account linking and service notifications. We send the content of the notification messages (for example order, activation and validity period reminders); LINE provides your user identifier, display name and profile picture URL. |
| Marking and analysis service providers (United States) | Automated marking and analysis of essays, speaking transcripts and recordings. This involves sending your answers to cloud service providers located in the United States for processing. The production of consultant reports additionally involves sending the student's name and student number. |
| Google (United States) | Web fonts (when you browse the site, fonts are fetched from Google, and your IP address and browser information are therefore sent to it); and the email service the Company uses for internal operational notifications. |
| Cloudflare (United States and global nodes) | Transmission, encryption and protection of connections to the site. |
| Browser speech recognition (Google, United States) | Some speaking tests use the speech recognition built into your browser to produce a transcript; in browsers such as Chrome and Edge, this feature sends your speech to the browser vendor's servers for processing. This is a feature of the browser itself and is not provided by the Company. |
| The Company's internal systems | Order, student and consultation-request data are synchronised to the Company's own operations management system for use in customer service, class scheduling, accounting and consultation follow-up. |
Some of the service providers above are located outside Taiwan, and your data is therefore transmitted abroad for processing. Except where the law provides otherwise or where you have consented, we do not provide your data to any other third party.
5. Retention periods
Account and learning records are kept for as long as the account exists. The account is not deleted automatically when the service validity period ends; you can still sign in to view score reports and purchase records. You may request deletion at any time under section 6.
Transaction and invoice records are kept for the retention periods required by tax legislation and the Business Entity Accounting Act (商業會計法).
Free consultation requests are kept until they are no longer needed for the consultation and any follow-up service. You may request deletion at any time under section 6.
System security and audit records (for example sign-in IP addresses and operation logs) are kept until they are no longer needed for maintenance or as evidence.
The Company does not currently operate an automatic deletion schedule; when you make a deletion request under section 6, it is handled by a member of staff.
6. Your rights and how to exercise them
Under Article 3 of the Personal Data Protection Act (個人資料保護法), you may exercise the following rights in respect of your personal data held by the Company: to make enquiries about it or request to review it, to request a copy, to request supplementation or correction, to request that collection, processing or use cease, and to request deletion.
You can change some data yourself in the system (for example your personal profile, target schools and departments, and parent contact details). For everything else, please write to [email protected] with "exercise of personal data rights" in the subject line, stating your name and login email address (if you have only left details on the free consultation page, give the mobile number or email address you left there instead) so that we can verify your identity. We will reply within the statutory time limits: 15 days for enquiries, review and the provision of a copy, and 30 days for supplementation, correction, cessation of use or deletion; these periods may be extended where necessary, and we will notify you if they are.
You are free to choose whether to provide personal data; however, if you do not provide the data necessary for an account and for transactions, the Company will be unable to create an account for you, complete a transaction or provide the service.
7. Cookies and browser storage
This site does not currently run any third-party advertising or web analytics tracking tools (for example Google Analytics or the Meta pixel). If we enable any in future, we will update this notice first and state it on this page. We use only the following necessary cookies:
- Login credentials: to maintain your signed-in state and to rotate it securely.
- Purchase flow identifier: to remember a purchase temporarily between the completion of LINE linking and the completion of checkout (valid for a few hours).
- Anti-forgery verification code: security verification during the LINE sign-in process (valid for a few minutes).
In addition, so that you do not lose your answers when the network is unstable, the system temporarily stores your answers, writing drafts and completed but not yet uploaded scores (including speaking recordings) locally in your browser. This data is held on your device. If you use a school or public computer, we recommend clearing your browser data after use, so that the next user cannot see your answers.
8. Minors and parents
Most users of this service are minors. Users under 18 may use this service and make paid purchases only after their statutory agent or guardian has read this notice and given consent; we ask you to confirm this at checkout. If you are a parent and find that your child has provided personal data without your consent, please write to [email protected] and we will help resolve it.
The parent/guardian contact details a student enters in their personal profile are used only for contact about course matters and learning progress.
9. Data security
- Passwords are stored using a one-way hash (bcrypt); the Company cannot restore or read your password.
- HTTPS encryption is enforced across the whole site.
- Sign-in uses short-lived credentials that are rotated regularly; if a credential is detected being reused, all signed-in sessions for that account are revoked.
- A student account can be signed in on only one device at a time.
- Rate limits are applied to sign-in and to the various services, to prevent brute-force attempts and misuse.
- The payment page is provided by ECPay 綠界科技; credit card details do not pass through the Company's systems.
However, transmission over the internet and electronic storage cannot be guaranteed to be absolutely secure. The Company will continue to maintain data security with reasonable technical and managerial measures.
10. Changes and contact
If this notice is amended, the latest version and the date of the update will be published on this page. For matters relating to personal data protection, please contact:
Fendodo Co., Ltd. 分多多股份有限公司
7F, No. 148, Section 1, Xinsheng South Road, Zhongzheng District, Taipei
[email protected] 02-2351-6111
Fendodo Prep