Privacy Policy

Van Son Consulting ("we," "us," or "our") operates from 152 Nguyen Van Linh Street, Hai Chau, Da Nang 550000, Vietnam. We take the privacy of people who interact with us online seriously. This policy describes what personal information we collect, how we use it, how long we keep it, and the rights you hold regarding your data.

By visiting our website or submitting an enquiry, you acknowledge that you have read and understood the practices described here. If you have questions at any point, please write to us at [email protected].

1. Data We Collect

We collect information through two routes: what you actively provide and what is recorded automatically when you browse.

Information You Provide

• Full name and business name (when supplied in a contact form)
• Email address and telephone number
• The content of messages and enquiries submitted via our contact form
• Any additional details you choose to share during consultations or follow-up correspondence

Information Collected Automatically

• Browser type, device type, and operating system
• Pages visited, time spent on pages, and navigation paths
• IP address (used for geographic analytics only, not for identification)
• Cookie identifiers (see Section 5 below and our Cookie Policy)

2. How We Use Your Information

• Responding to enquiries: We use your contact details to reply to messages and arrange consultations.
• Service delivery: Contact and business information supports the advisory relationship during active engagements.
• Website improvement: Anonymised analytics help us understand which content is useful and where the site can be clearer.
• Legal obligations: Certain records may be retained to comply with applicable Vietnamese law.
• Marketing communications: We may send relevant content or service updates by email only where you have given explicit consent. You may withdraw this at any time.

Legal Bases for Processing

• Consent — you submit a form or agree to cookies voluntarily
• Legitimate interest — website security, analytics, and improving our services
• Contractual necessity — fulfilling an agreed consulting engagement
• Legal obligation — compliance with Vietnamese Decree 13/2023/NĐ-CP on personal data protection

3. Data Retention

• Contact enquiries — retained for 12 months from last contact, then securely deleted unless an engagement began
• Active client records — kept for the duration of the engagement plus 3 years for reference and legal purposes
• Analytics data — anonymised and aggregated; individual-level data is not retained beyond 26 months
• Cookie consent records — retained for 13 months

After the applicable retention period, data is deleted or anonymised so it can no longer be attributed to an individual.

4. Sharing With Third Parties

We do not sell personal data. We may share information with:

• Google Analytics — anonymised website usage data for traffic analysis
• Email service providers — used solely to deliver email replies and service communications
• Legal authorities — only where required by Vietnamese law or a valid legal order

Any third-party processor we engage is subject to a data processing agreement requiring them to handle information only as directed and to appropriate security standards.

5. Cookies

Our website uses cookies to function correctly and to understand how visitors engage with the content. Strictly necessary cookies are always active. Optional analytics and preference cookies require your consent, which you can manage at any time.

For full details on the cookies we use and how to adjust your preferences, please see our Cookie Policy.

6. Data Security

• Data in transit is protected via TLS/HTTPS encryption
• Access to personal data is limited to team members who require it for their role
• Our hosting infrastructure is maintained with current security patches
• We review data handling practices periodically and update them as needed
• In the event of a data breach affecting your rights, we will notify relevant parties within the timeframes required by law

7. Your Rights

Under Vietnamese Decree 13/2023/NĐ-CP and applicable international standards, you have the right to:

• Access — request a copy of the personal data we hold about you
• Correction — ask us to correct inaccurate or incomplete data
• Erasure — request deletion of your data where no legal obligation requires us to keep it
• Restriction — ask us to pause processing while a dispute is resolved
• Portability — receive your data in a structured, machine-readable format
• Objection — object to processing based on legitimate interest
• Withdraw consent — cancel marketing consent at any time without affecting prior processing

To exercise any of these rights, write to [email protected]. We aim to respond within 30 days.

8. External Links

Our site may contain links to third-party resources. We have no control over those sites and are not responsible for their privacy practices. We encourage you to read the privacy policy of any site you visit.

9. Children's Privacy

Our services are directed at business founders and organisations. We do not knowingly collect data from individuals under the age of 18. If we become aware that we have inadvertently gathered such data, we will delete it promptly.

10. Updates to This Policy

We may revise this policy from time to time to reflect changes in our practices or applicable law. When we do, we update the "Last Updated" date at the top. Where changes are material, we will make them visible on the website for a reasonable period.