Privacy Policy

1. Introduction

Lụa Công takes the protection of personal data seriously. This Privacy Policy explains what information we collect when you visit our website or engage with our services, how we use that information, and the rights available to you under applicable Vietnamese data protection law and international standards.

We collect only what is necessary. We do not sell personal data. We do not share it with third parties except as described in this policy.

2. Data We Collect

We collect personal data through the following means:

• Contact form submissions: name, email address, and optionally phone number and message content when you submit an enquiry.
• Direct communication: name and contact details shared when you email or call us directly.
• Analytics data: anonymised data about website usage (pages visited, time on site, device type) collected via analytics tools — only if you consent via the cookie banner.
• Cookie data: technical cookies required for website functionality, and optional analytics/marketing cookies subject to your consent. See our Cookie Policy.

3. How We Use Your Data

• To respond to enquiries submitted via our contact form or direct communication
• To deliver advisory services or training programmes you have engaged us for
• To send service-related communications (programme updates, scheduling)
• To improve our website based on anonymised usage data (if analytics consent is given)
• To comply with legal obligations under Vietnamese law

We do not use your data for unsolicited marketing without your explicit prior consent. We do not use personal data for automated decision-making.

Retention: Contact enquiry data is retained for 24 months from last contact. Client programme data is retained for 36 months post-engagement. After retention periods, data is securely deleted.

4. Data Sharing

We do not sell personal data. We share data only in the following limited circumstances:

• Service providers: Analytics and website hosting providers operating under data processing agreements. These providers process data only on our instruction.
• Legal requirements: If required by Vietnamese law, court order, or government authority.
• Business transfers: In the event of a business sale or merger, subject to the same privacy commitments.

5. Data Protection Measures

• Data transmitted via our website is encrypted using TLS (HTTPS)
• Access to client data is restricted to Lụa Công team members who require it for service delivery
• Internal systems use access controls and authentication requirements
• We review data security practices periodically and update as needed
• In the event of a data breach affecting your rights, we will notify you without undue delay

6. Cookies

We use essential cookies required for website functionality and, with your consent, optional analytics and preference cookies. Full details are in our Cookie Policy. You can manage preferences at any time on that page.

7. Your Rights

Under the Vietnam Personal Data Protection Decree (PDPD 2023) and applicable law, you have the right to:

• Access the personal data we hold about you
• Correction of inaccurate or incomplete data
• Deletion of your data (subject to legal retention requirements)
• Portability of data provided to us in a structured format
• Objection to processing based on legitimate interest
• Withdrawal of consent at any time for consent-based processing

To exercise any right, contact us at [email protected]. We will respond within 30 days. You may also raise concerns with the Ministry of Public Security's Department of Cybersecurity and High-Tech Crime Prevention (Vietnam).

8. Third-Party Links

Our website may contain links to external sites. We are not responsible for the privacy practices of those sites. We recommend reviewing their privacy policies before submitting personal data to them.

9. Children's Privacy

Our services are intended for adults (18 years and over). We do not knowingly collect personal data from minors. If you believe a minor has submitted data to us, contact us at [email protected] and we will delete it promptly.

10. Policy Updates

We may update this policy to reflect changes in our practices or legal requirements. The updated date at the top of this page reflects when changes took effect. Where changes are material, we will notify active clients directly.