Privacy Policy

1. Who We Are

Phượng Minh Business Consulting is the data controller for personal data collected through our website and consulting engagements. Registered address: 29 Duy Tân, Cầu Giấy District, Hanoi 100000, Vietnam. This policy applies to data collected via phuongis.club, through our contact form, and during consulting engagements.

2. Personal Data We Collect

We collect only information necessary to respond to inquiries and deliver our services:

• — Contact form submissions: name, email address, phone number (optional), and message content
• — Engagement communications: emails and documents shared during a consulting engagement
• — Technical/analytics data: browser type, approximate IP location, pages visited — collected via analytics tools with your consent
• — Cookie data: preferences stored in your browser — see our Cookie Policy

We do not collect sensitive personal categories, financial account details, or data from children under 18.

3. Legal Basis for Processing

We process personal data under applicable Vietnamese data protection law (Decree 13/2023/ND-CP on Personal Data Protection) on these grounds:

• — Consent: for analytics cookies and optional marketing communications
• — Legitimate interest: for responding to inquiries and website improvement
• — Contract performance: for data necessary to deliver consulting engagements
• — Legal obligation: for records required under Vietnamese commercial law

4. How We Use Your Data

• — Respond to inquiries submitted through our contact form
• — Deliver and manage consulting engagements
• — Understand how visitors use our website to improve it
• — Comply with legal and regulatory obligations in Vietnam

We do not sell personal data to third parties. We do not use your data for automated decision-making or profiling.

5. Data Retention

• — Contact inquiries that do not lead to an engagement: deleted within 6 months
• — Engagement-related data: retained for 5 years from engagement completion, as required by Vietnamese commercial record-keeping law
• — Analytics data: retained in aggregated form; individual session data not stored beyond 14 months

6. Data Sharing with Third Parties

We do not sell or rent personal data. We may share data with:

• — Analytics providers (e.g., Google Analytics) — under data processing agreements, with anonymization where possible
• — Email and communication tools used to manage correspondence
• — Legal or regulatory authorities if required by Vietnamese law

Any third-party processors are bound by appropriate data processing terms and are not permitted to use your data for their own purposes.

7. Data Protection Measures

• — Website communication is encrypted via HTTPS/TLS
• — Access to personal data is restricted to team members who need it to perform their role
• — We review our data handling practices periodically
• — In the event of a data breach that affects your rights, we will notify affected individuals within the timeframe required by Vietnamese law

8. Cookies

We use cookies for essential website functionality and, with your consent, for analytics purposes. You can manage cookie preferences at any time via our Cookie Policy page, which also explains how to manage cookies in your browser.

9. Your Rights

Under Vietnamese personal data protection law, you have the right to:

• — Access the personal data we hold about you
• — Correct inaccurate or incomplete personal data
• — Delete personal data (subject to legal retention requirements)
• — Object to processing based on legitimate interest
• — Withdraw consent for any processing based on consent, at any time without affecting prior processing
• — Lodge a complaint with the Ministry of Public Security's Department of Cybersecurity and High-Tech Crime Prevention, the relevant supervisory authority in Vietnam

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.

10. Third-Party Links

Our website may contain links to third-party websites. We are not responsible for the privacy practices of those sites. We encourage you to review the privacy policy of any site you visit.

11. Children's Privacy

Our services are intended for business use and are not directed at individuals under the age of 18. We do not knowingly collect personal data from minors. If we become aware that a minor has submitted data, we will delete it promptly.

12. Changes to This Policy

We may update this Privacy Policy from time to time. The "Last Updated" date at the top of this page reflects the most recent revision. Continued use of our website after any changes constitutes acceptance of the updated policy. For material changes, we will make reasonable efforts to notify you.