Privacy Policy

1. Who We Are

Thiên Phú Consulting is a business advisory firm registered and operating in Vietnam, with its principal office at 134 Doi Can Street, Ba Dinh, Hanoi 100000. We are the data controller for personal information collected through this website and in connection with our consulting services. For data-related enquiries, contact us at privacy@thienphubnines.

2. Information We Collect

We may collect the following categories of personal information:

• Contact information: name, email address, phone number, and business details submitted through our contact form or during engagement discussions.
• Engagement information: information you share with us in the course of a consulting engagement, including business data, financial information, and organisational details.
• Website usage data: anonymised information about how you interact with our website, collected through analytics cookies (if consented).
• Communication records: records of correspondence via email or phone.

3. How We Collect Information

We collect information through the following means:

• Contact forms on our website
• Direct email and phone communications
• In-person meetings and engagement intake documents
• Cookies and analytics tools on our website (with consent)

4. Legal Basis for Processing

We process personal information based on the following legal grounds under Vietnam's Law on Cybersecurity (No. 24/2018/QH14) and applicable personal data protection regulations:

• Consent: where you have explicitly agreed to the processing, such as when submitting our contact form.
• Contract: where processing is necessary to fulfil a consulting engagement you have entered into with us.
• Legitimate interests: for internal record-keeping, service improvement, and communication related to our services.

5. How We Use Your Information

• To respond to enquiries submitted through our contact form
• To deliver consulting services under an agreed engagement
• To communicate updates, schedules, and deliverables related to active engagements
• To send occasional service-related communications (not unsolicited marketing)
• To improve our website and service offering using anonymised analytics data
• To comply with applicable legal and regulatory obligations

6. Information Sharing

We do not sell, rent, or trade personal information. We may share information with:

• Trusted service providers: such as email hosting and analytics platforms, bound by confidentiality obligations.
• Legal authorities: where required by Vietnamese law or court order.
• Advisors: engaged to support a specific client project, and only with the client's knowledge and consent.

All third-party service providers we use are selected for their commitment to data security and are contractually prohibited from using client data for any purpose beyond their designated service function.

7. Data Retention

We retain personal information for as long as necessary to fulfil the purposes described in this policy:

• Contact form submissions: up to 24 months after last contact
• Engagement records: 5 years following completion of engagement (for professional record-keeping)
• Analytics data: anonymised and retained for up to 14 months

After the applicable retention period, data is securely deleted or anonymised.

8. Data Protection Measures

• All website data transmitted via HTTPS encryption
• Access to client records restricted to named principals on the relevant engagement
• Regular review of data handling practices
• Incident response procedures in place for any suspected data breach
• Notification to affected individuals within 72 hours of confirmed data breach, in accordance with applicable Vietnamese law

9. Cookies

Our website uses cookies to understand usage patterns and improve the visitor experience. Essential cookies are required for the site to function. Analytics cookies are optional and activated only with your consent. Please visit our Cookie Policy for full details and preference management.

10. Your Rights

Under Vietnamese personal data protection regulations, you have the following rights:

• Right of access: to request a copy of personal information we hold about you
• Right of rectification: to correct inaccurate or incomplete information
• Right of erasure: to request deletion of your data, subject to legal retention obligations
• Right to withdraw consent: at any time for processing based on consent
• Right to object: to processing based on legitimate interests
• Right to data portability: to receive your data in a structured, readable format

To exercise any of these rights, contact us at privacy@thienphubnines. We will respond within 30 days.

11. Third-Party Links

Our website may contain links to external sites. We are not responsible for the privacy practices of those sites and encourage you to review their policies independently.

12. Children's Privacy

Our services are directed exclusively at business professionals aged 18 and above. We do not knowingly collect information from minors. If you believe a minor has submitted information through our website, please contact us and we will take appropriate action.

13. Policy Updates

We may update this policy periodically to reflect changes in our practices or applicable law. The updated version will be posted on this page with a revised "Last Updated" date. Continued use of our website following any update constitutes acceptance of the revised policy.

14. Contact

For all privacy-related enquiries:

• Email: privacy@thienphubnines
• Address: 134 Doi Can Street, Ba Dinh, Hanoi 100000, Vietnam
• Phone: +84 24 3463 8217

You also have the right to lodge a complaint with the relevant Vietnamese authority responsible for data protection supervision.