Policy

PRIVACY POLICY

This Privacy Policy (“Policy”) describes how InvestConsult Group (“We”, “Us”, or “Our”) conducts activities related to the processing of personal data of customers who access our website and/or use our services (hereinafter collectively referred to as “You” or “Your”).

By accessing the Website, clicking the “Submit” button (or equivalent) on electronic forms such as “Email Us”, “Form liên hệ” to submit information, or through any other online interaction, you are deemed to have read, understood, and consented to InvestConsult Group’s collection, processing, and use of your personal data in accordance with the terms of this Policy.

  1. Personal Data We Collect

Personal data is collected only when you actively and voluntarily provide information through interaction tools (“Email us”, “Form liên hệ”) on the Website. Data categories include:

  • Identification Data: Full name, job title, and organization.
  • Contact Data: Phone number and email address.
  • Interaction Content: Information provided in legal consultation requests or attached recruitment profiles.
  • Technical Data: We only use Session Cookies to ensure technical operation and display language. This data is anonymous and automatically deleted upon termination of the session.
  1. How We Use Your Information

By actively providing information, you confirm that you have understood and agreed to allow InvestConsult Group to process your personal data for the following specific purposes:

  • Responding to legal consultation requests and performing professional services.
  • Sending legal newsletters, service updates, or marketing materials deemed relevant to your needs.
  • Conducting recruitment and storing potential candidate profiles for future personnel needs.
  • Analyzing access trends to improve the Website’s interface and content.
  • Fulfilling reporting obligations, providing information, or other mandates as required by competent State authorities.
  1. Data Storage and Protection
  • The data we collect is stored within our internal management systems. We implement necessary security measures in compliance with applicable laws to ensure that data is not altered, disclosed, or accessed without authorization.
  • In cases where data is stored in electronic format on the online systems of a third-party infrastructure provider, such provider is responsible for complying with personal data protection regulations under Vietnamese law.
  1. Data Retention Period
  • Data will be stored until the purposes of processing set out in Section 2 of this Policy are fulfilled, or until you formally request the erasure of such data.
  • In certain cases, we are required to retain data for longer periods to comply with accounting, tax, dispute resolution obligations, or specific mandates from competent State authorities.
  • Once personal data is no longer necessary or the mandatory retention period expires, we will proceed to erase or anonymize the data in a secure manner, rendering it unrecoverable and non-identifiable.
  1. Your Rights as a Data Subject

In accordance with applicable law, we respect and facilitate the exercise of your rights as a data subject. However, to ensure security and information accuracy, the following procedures apply:

  • Establishment of Consent: You confirm your right to be informed and consent to data processing through the act of accessing the Website or actively clicking “Send” or “Register” on electronic forms.
  • Procedure for Exercising Rights: All requests regarding withdrawal of consent, access, rectification, or erasure of personal data must be sent via formal written document or official email to our headquarters or our email address. These requests are subject to InvestConsult Group’s mandatory identity verification process.
  • Consequences of Data Modification: You understand and acknowledge that withdrawing consent or requesting data erasure may result in our inability to continue responding to consultation requests, providing services, or maintaining professional interactions with you.
  • Right to Complain: You have the right to lodge a complaint in accordance with personal data protection laws.
  1. Third-Party Disclosures

InvestConsult Group maintains data confidentiality and does not engage in the commercial sale or transfer of your personal data to third parties. Data disclosure or transfer is conducted only in the following necessary instances:

  • Professional Support: Sharing with affiliates, strategic partners, associated law firms, or experts within the InvestConsult Group network to coordinate the processing of your requests.
  • Operational Support: Providing data to infrastructure, storage, or management platform providers that support our internal operations.
  • Legal Mandates: Disclosing information at the request of competent State authorities or when necessary to protect our legitimate rights and interests as prescribed by law.
  • Corporate Restructuring: Transferring data to successors in the event of a merger, acquisition, spin-off, or business transfer.
  1. Security Limitations and Liability

You voluntarily acknowledge and accept that the Internet environment inherently contains technical risks beyond human control. Accordingly:

  • Sensitive Information Advisory: We strongly advise against sending confidential information, sensitive data, or trade secrets through online forms (“Email Us”, “Form liên hệ”) and email. Should you choose to do so, it is understood that you voluntarily assume all associated risks, and InvestConsult Group disclaims all liability for any resulting losses.
  • Transmission and Infrastructure Risks: We are not liable for any interception, leakage, or unauthorized access occurring during data transmission from your device to the Website’s online storage or due to failures of the network infrastructure provider.
  • User Device Security: We disclaim all liability for data loss arising from malware infections on your personal device or user negligence in securing communications.
  • Force Majeure: InvestConsult Group is disclaimed from liability in cases of data leakage caused by sophisticated, targeted cyber-attacks, or wide-area telecommunications infrastructure failures.
  1. Third-Party Links

This Website may contain links to external websites (such as government portals, news outlets, etc.). This Policy does not apply to such third-party websites. We do not control and assume no responsibility for the content or privacy practices of these sites. Accessing these links is at your own risk, and we recommend that you review their respective privacy policies before providing any personal data.

  1. Implementation Provisions

This Policy is effective from the date of posting. We reserve the right to amend this Policy at any time without prior notice. Your continued use of the Website constitutes acceptance of the latest version of this Policy.