Website Privacy Policy

1. Introduction & Entity Identity

This Privacy Policy governs your access and use of the website operated by Indochina Link Vietnam Co., Ltd. (ICLV)(Tax Code: 0314028165), a licensed corporate advisory and tax consulting firm registered with the Ministry of Finance of Vietnam (License No. 157/KDKET, issued 25/01/2021). We are committed to maintaining the highest standards of confidentiality, data security, and privacy compliance across all jurisdictions we serve.

2. Information We Collect

We collect personal data only to the extent necessary to deliver high-quality advisory services and maintain website security:

2.1 Information You Actively Provide

• Contact & Identification: Full name, corporate email address, phone number, and company name submitted via consultation inquiry forms, quote calculators, or newsletter subscriptions.
• Consultation Context: Business structure, investment scale, industry sector, and specific inquiries shared during preliminary advisory communications.

2.2 Automatically Collected Technical Data

• Browser type, operating system, and screen resolution
• Truncated IP address and approximate geographic location (country/city level)
• Referral source, visited URLs, session duration, and interaction timestamps

3. Cookies and Tracking Policy

Our website strictly adheres to the principle of Prior Consent and Equal Ease of Choice under the EU ePrivacy Directive, GDPR Article 7, and Vietnam PDPL. Non-essential tracking scripts are never executed without your prior affirmative action.

You can modify or withdraw your cookie preferences at any time using our on-page cookie settings or directly via your web browser configuration.

4. Legal Bases for Processing

In accordance with international privacy benchmarks (GDPR Article 6 and Vietnam Law 91/2025/QH15), we process personal data under the following lawful bases:

• Contractual Necessity: Processing required to prepare proposals, execute engagement agreements, and provide FDI corporate services.
• Legal Obligation: Compliance with Vietnamese statutory reporting, tax administration, accounting retention, and anti-money laundering regulations.
• Legitimate Interests: Securing website infrastructure against cyber threats (WAF/DDoS), preventing fraud, and optimizing content delivery.
• Consent: Sending email newsletters, marketing communications, and loading non-essential analytics cookies.

5. Data Security & Storage

As a licensed accounting and tax firm handling sensitive FDI corporate matters, we implement enterprise-grade technical and organizational safeguards:

• End-to-end TLS 1.3 / HTTPS encryption across all endpoints
• Cloudflare Web Application Firewall (WAF), DDoS mitigation, and bot management
• Strict Role-Based Access Control (RBAC) restricting data access to authorized CPA specialists
• Mandatory non-disclosure agreements (NDAs) signed by all staff members

6. Data Sharing & Cross-Border Transfers

We never sell, rent, or trade your personal data. Information is disclosed only under strict parameters:

• Statutory Authorities: When required by Vietnamese tax, judicial, or regulatory bodies in compliance with legal obligations.
• Trusted Service Processors: Enterprise hosting and security infrastructure (Cloudflare) operating under compliant data processing agreements.
• Cross-Border Safeguards: Any cross-border data transfer complies with Decree 13/2023/ND-CP and utilizes Standard Contractual Clauses (SCCs) recognized internationally.

7. Data Retention Periods

We retain personal data strictly for the period necessary to fulfill its original purpose or comply with legal statutes:

• General Inquiries: Maximum 3 years from the last contact date.
• Accounting & Tax Records: Minimum 5 to 10 years as mandated by the Vietnam Law on Accounting (88/2015/QH13) and Tax Administration Law (38/2019/QH14).

8. Global Data Subject Rights

Regardless of your geographic location, you enjoy full sovereignty over your personal data:

• Right to Access & Know: Request confirmation of what personal data we hold and receive a structured copy.
• Right to Rectification: Correct inaccurate or incomplete information.
• Right to Erasure ("Right to be Forgotten"): Request deletion of your personal data, subject to statutory accounting retention laws.
• Right to Restrict or Object: Limit the scope of processing or object to legitimate-interest processing.
• Right to Withdraw Consent: Revoke previously granted consent without affecting past lawful processing.

9. Additional Provisions for EU/EEA Residents (GDPR Addendum)

If you are located in the European Union or European Economic Area, Regulation (EU) 2016/679 (GDPR) applies directly to your interactions with our service:

• Supervisory Authority Complaints: You have the right to lodge a complaint with an EU Data Protection Authority (DPA) in the member state of your habitual residence or place of work.
• Automated Decision-Making: We do not conduct automated profiling or decision-making that produces legal effects.

10. Additional Provisions for Singapore & International Clients (PDPA / CCPA)

• Singapore PDPA 2012: We adhere to the Purpose, Notification, and Consent obligations when handling regional client inquiries.
• Non-Sale Assurance (CCPA/CPRA): We confirm that ICLV does not "sell" or "share" personal data for cross-context behavioral advertising.

11. Privacy Contact & DPO Inquiries

To exercise any privacy rights, submit a data subject request, or inquire about our data protection standards, please contact our Privacy Team:

• Company: Indochina Link Vietnam Co., Ltd. (ICLV)
• Head Office: Level 3, An Phu Plaza, 117-119 Ly Chinh Thang, Xuan Hoa Ward, Ho Chi Minh City, Vietnam
• Privacy Email: info@indochinalink.com
• Telephone: +84 282 2468 007
• Response SLA: We formally acknowledge and respond to all verified data requests within 72 hours.