Privacy Policy

1 Information We Collect

1.1 Personal Information You Provide

We may collect personal information that you voluntarily provide when you:

• Fill out contact or inquiry forms on our Website
• Send us emails or other correspondence
• Request information about our services or partnerships
• Submit a business diagnosis or consultation request

This information may include your name, email address, company name, phone number, industry category, monthly GMV range, and the content of your message.

1.2 Automatically Collected Information

When you visit our Website, we may automatically collect certain technical information, including:

• Browser type, version, and language settings
• Operating system and device information
• IP address (anonymized where possible)
• Pages visited, session duration, and navigation paths
• Referring website addresses and search terms
• General geographic location (country/city level)

1.3 Analytics Data

We may use web analytics services to understand how visitors use our Website. These tools may set their own cookies or collect data in accordance with their own privacy policies. Analytics data is used only in aggregated, anonymized form and is never sold or shared for advertising purposes.

2 Legal Basis for Processing

ActsOne Vietnam processes personal data in compliance with Vietnamese law, including the Law on Cybersecurity (No. 24/2018/QH14), Decree No. 13/2023/NĐ-CP on personal data protection, and other applicable regulations issued by the Ministry of Public Security.

We process your personal information on the following legal bases:

• Consent: When you voluntarily submit information through our Website forms
• Legitimate Interests: To operate, maintain, and improve our Website and business services
• Legal Obligation: When required by Vietnamese law, court order, or competent authority
• Contractual Necessity: To fulfill obligations under service agreements with business partners

You may withdraw your consent at any time by contacting us at support@actsone.vn. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.

3 How We Use Your Information

We use the information we collect for the following purposes:

• To respond to your inquiries and provide appropriate business information
• To process and evaluate partnership or service opportunities
• To schedule and conduct business consultations or diagnosis sessions
• To improve the content, design, and functionality of our Website
• To send relevant business communications, where you have given consent
• To detect and prevent fraudulent or abusive activity
• To comply with legal obligations under Vietnamese law
• To protect the rights, safety, and property of ActsOne Vietnam and its partners

We do not use your personal information to serve third-party advertising or sell your data to data brokers.

4 Information Sharing

We do not sell, trade, or rent your personal information to third parties. We may share information only in the following limited circumstances:

• Service Providers: Trusted vendors who assist with hosting, email delivery, analytics, or customer support — bound by confidentiality agreements
• Parent Company: ActsOne Corp. (Republic of Korea), for business coordination purposes, under equivalent data protection safeguards
• Legal Requirements: When required by Vietnamese law, regulation, court order, or a request from a competent government authority
• Business Transfers: In connection with a merger, acquisition, or sale of company assets, where the acquiring entity agrees to honor this Policy
• With Your Consent: For any other purpose, only with your explicit prior consent

5 Data Security and Breach Notification

We implement appropriate technical and organizational security measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include access controls, encrypted communication (HTTPS), and periodic security reviews.

However, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security and encourage you to use caution when submitting sensitive information online.

6 Cookies and Tracking Technologies

Our Website may use cookies and similar technologies. Cookies are small text files stored on your device that help us recognize returning visitors and improve the browsing experience.

We may use the following types of cookies:

• Strictly Necessary: Required for the Website to function (e.g., session management)
• Analytics: Help us understand how visitors interact with our Website (e.g., pages visited, session duration)
• Preference: Remember your language and display settings

You can control or disable cookies through your browser settings at any time. Disabling cookies may limit certain features of the Website. Third-party services integrated with the Website (such as analytics tools) may set their own cookies governed by their respective privacy policies.

7 Third-Party Links

Our Website may contain links to third-party websites including e-commerce platforms (Shopee, TikTok Shop, Lazada), social media channels, and partner organization sites. We are not responsible for the privacy practices or content of these external sites.

We encourage you to review the privacy policies of any third-party sites you visit before submitting personal information. A link to a third-party site does not imply our endorsement of that site or its practices.

8 Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes for which it was collected, or as required by Vietnamese law and regulations. Our general retention guidelines are:

• Inquiry / contact form data: Up to 2 years from the date of submission
• Business correspondence: Up to 5 years, in accordance with Vietnamese commercial record-keeping requirements
• Analytics data: Up to 26 months, typically in anonymized or aggregated form
• Legal / compliance records: As required by applicable Vietnamese law (typically 5–10 years)

When personal data is no longer required, we will securely delete or anonymize it. You may request early deletion by contacting us — see Section 9 for your rights.

9 Your Rights

Under Vietnamese law (Decree 13/2023/NĐ-CP) and applicable international standards, you have the following rights regarding your personal information:

• Right to Know: To be informed about how your personal data is collected and used
• Right to Access: To request a copy of the personal data we hold about you
• Right to Correct: To request correction of inaccurate or incomplete data
• Right to Delete: To request deletion of your personal data, subject to legal retention obligations
• Right to Withdraw Consent: To withdraw consent to processing at any time
• Right to Object: To object to processing for direct marketing or other purposes
• Right to Data Portability: To receive your data in a structured, machine-readable format
• Right to Complain: To lodge a complaint with the Ministry of Public Security or relevant Vietnamese authority

To exercise any of these rights, please submit a written request to support@actsone.vn. We will respond within 30 days. We may need to verify your identity before processing your request.

10 Children's Privacy

Our Website is not directed to children under the age of 16, and we do not knowingly collect personal information from children. If you believe that a child has provided us with personal information, please contact us immediately at support@actsone.vn and we will take steps to delete such information promptly.

11 International Data Transfers

Your personal information may be transferred to and processed in countries other than Vietnam, including the Republic of Korea, where our parent company ActsOne Corp. operates. When transferring data internationally, we ensure that appropriate safeguards are in place, including:

• Binding contractual obligations (data processing agreements) with the receiving entity
• Compliance with Vietnamese regulations on cross-border data transfers under Decree 13/2023/NĐ-CP
• Equivalent levels of data protection as required under Vietnamese law

By using our Website and submitting personal information, you acknowledge and consent to such transfers taking place in accordance with this Policy.

12 Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or business operations. Material changes will be indicated by updating the "Last updated" date at the top of this page.

We encourage you to review this Policy periodically. Your continued use of the Website after changes are posted constitutes your acceptance of the updated Policy.

13 Governing Law

This Privacy Policy is governed by the laws of the Socialist Republic of Vietnam, including the Law on Cybersecurity (No. 24/2018/QH14), Decree No. 13/2023/NĐ-CP on personal data protection, and any successor legislation. Any disputes arising from this Policy shall be resolved in accordance with Vietnamese law.

14 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or our personal data practices, please contact our data team: