Last updated: 17 August 2026
This policy explains what personal data drethan.ai collects, why we collect it, who we share it with, and the choices you have. It applies to this website and to our courses and shop. Please read it alongside our Terms of Sale and Refund & Cancellation Policy.
1. Who is responsible for your data
The data controller is Wen Hsien Ethan Huang, a sole trader registered at 14F., No. 143, Sec. 5, Minsheng E. Rd., Songshan Dist., Taipei City, Taiwan.
For any privacy question, or to exercise the rights in section 8, write to [email protected].
2. What we collect
- Information you give us. Your name, email address, and anything you write in a contact form or email. For course enrolment, the professional details you supply — qualification, country of practice, and any evidence you send to verify professional status.
- Order information. What you bought, when, the amount, your country, and your order reference. Payment is processed by Paddle — see section 4.
- Shipping information. For physical goods, the delivery address and contact details needed to ship and clear customs.
- Technical and usage data. Your IP address, approximate location derived from it, browser and device type, referring page, and which pages you viewed. Collected through cookies and analytics — see section 6.
- Session participation. If you attend a live session, the joining name and email you use, and attendance records. We do not record sessions unless we tell you in advance.
3. Please do not send us patient data
Our training is discussed in general clinical terms. Do not send us identifiable patient information — names, contact details, dates of birth, medical record numbers, or un-anonymised clinical photographs — by email, in a form, or in a live session chat.
If you want to discuss a case, remove all identifiers first. Where identifiable patient data reaches us unsolicited, we delete it. You remain responsible for your own patients’ data under the rules that apply to you.
4. Payments — Paddle
Our order process is conducted by our online reseller Paddle.com, which is the Merchant of Record for all our orders. Paddle collects and processes your payment details and billing information directly, as its own data controller, under its own privacy policy.
We never see or store your full card number. What we receive from Paddle is the information needed to fulfil and support your order — your name, email, country, what you bought, and the order reference.
5. Why we use your data
- To perform our contract with you — confirming your order, sending joining details and materials, shipping goods, verifying eligibility to enrol, and handling refunds.
- For our legitimate interests — answering enquiries, keeping our records, securing the site against fraud and abuse, and understanding in aggregate how the site is used.
- With your consent — sending marketing email, and setting non-essential cookies. You can withdraw consent at any time.
- To comply with legal obligations — tax, accounting and record-keeping requirements.
We do not sell your personal data, and we do not use it to train AI models.
6. Cookies and analytics
We use cookies that are necessary for the site to work — keeping you logged in, remembering your cart, and securing forms. These cannot be switched off.
We also use analytics cookies, including Google Analytics, to see which pages are visited and how people arrive. These tell us about traffic patterns, not about you as an individual, and we do not use them to build advertising profiles.
You can block or delete cookies in your browser settings. Blocking necessary cookies may stop checkout or login from working.
7. Who we share data with
We share data only with service providers who help us run the business, and only as far as they need it:
- Paddle — payment processing, invoicing, tax and refunds (as its own controller).
- Our web host and site plugins — hosting, security, backups and site maintenance.
- Email delivery and mailing-list providers — sending transactional and, where you have consented, marketing email.
- Analytics providers — Google Analytics, as described above.
- Video-conferencing providers — hosting live sessions.
- Couriers — delivering physical goods.
We may also disclose data where the law requires it, or to establish or defend a legal claim.
8. Your rights
Depending on where you live, you may have the right to: ask what data we hold about you and get a copy; have inaccurate data corrected; have data deleted; restrict or object to how we use it; receive it in a portable format; withdraw consent; and unsubscribe from marketing at any time.
Write to [email protected] and we will respond within one month. We may ask you to confirm your identity first. Exercising these rights is free, and we will not treat you differently for doing so.
If you are in the EU, UK or Switzerland and you are not satisfied with our response, you may complain to your national data protection authority. If you are in Taiwan, you may raise a complaint under the Personal Data Protection Act.
9. International transfers
We operate from Taiwan and our providers are located in several countries, so your data may be transferred outside your own. Where data leaves the EU, UK or Switzerland, we rely on the transfer safeguards our providers put in place, such as standard contractual clauses.
10. How long we keep it
- Order and tax records — for as long as tax and accounting law requires.
- Enrolment and verification records — while you have access to materials, and afterwards only as needed to confirm what you completed.
- Enquiries and correspondence — normally up to two years.
- Marketing list — until you unsubscribe.
- Analytics data — for the retention period set in our analytics account.
11. Security
We use encrypted connections, access controls, and reputable providers, and we keep the number of people who can see your data to a minimum. No system is perfectly secure; if a breach affects your data and creates a real risk to you, we will notify you and the relevant authority as the law requires.
12. Children
This site and our courses are intended for adult professionals. We do not knowingly collect data from anyone under 18. If you believe a minor has given us data, contact us and we will delete it.
13. Changes to this policy
We may update this policy. The date at the top shows when it was last revised. Where a change materially affects how we use your data, we will tell you.
14. Contact
Privacy questions, requests, or complaints: [email protected].