Contact us

Privacy Policy

Privacy Statement

Date: 14 May 2026

This is a general information notice provided to all visitors to the website (“Website”) in accordance with Personal Data Protection Law 2025 (“PDPL”) of Vietnam, Decree No. 356/2025/ND-CP guiding the PDPL and all other applicable laws (“Applicable Data Protection Legislation”). With this Privacy Statement, CRIF D&B Vietnam Limited Liability Company (“we” or “us”), as the data controller, intends to describe the methods of managing this Website with reference to the Processing of the Personal Data of visitors who access it.

DEFINITIONS:

In the context of this Privacy Statement, these specific terms have the following definitions:

1. “Personal Data” means any digital data or information of another format that identifies or enables the identification of a specific person, including: Basic Personal Data and Sensitive Personal Data.

2. “Basic Personal Data” means Personal Data reflecting common personal and background elements, typically used in transactions or social relations.

3. “Sensitive Personal Data” means Personal Data associated with the privacy of an individual, which, when infringed upon, will directly affect the rights and lawful interests of agencies, organizations, or individuals.

4. “Processing” means activities affecting Personal Data, including the collection, analysis, synthesis, encryption, decryption, modification, deletion, destruction, de-identification, provision, publicization, transfer of Personal Data and other activities affecting Personal Data.

COLLECTION, PROCESSING AND PROTECTION OF PERSONAL DATA

5. The kind of Personal Data we collect and process depends on the purpose for which it is collected. It may include:

Basic Personal Data, such as:

  • Full name, middle name, and birth name;
  • Physical address;
  • Email address;
  •  Information about the personal digital account, i.e., information of your registered account on our Website.

Sensitive Personal Data, such as:

  • Bank card information.
  •  Data tracking usage activities and behaviors on our Website, such as cookies.

6. When you visit our Website, we use cookies to collect information about your computer or other device that you use for accessing to our Website. For details about the use of cookies on this Website, please refer to the Sections 34-36 below.

7. We generally ask your Personal Data directly from you and get your consent when you interact with us, unless otherwise exempted under Applicable Data Protection Legislation.      .

8. We will take appropriate steps to ensure that your data is treated securely and in accordance with this Privacy Statement. We implement a variety of security measures and strive to ensure the security of your Personal Data in our systems. Your Personal Data is contained behind secured networks and is only accessible by a limited number of employees who have special access rights to such systems. However, there can inevitably be no guarantee of absolute security.

PERSONAL DATA PROCESSING PURPOSES

10. We may collect and use your Personal Data for the following purposes:

  • performing obligations in connection with your access to this Website or providing products and/or services when requested by you.
  • verifying your identity.
  • responding to, handling, and processing queries, requests, applications (including job/internship applications), complaints and feedback from you.
  • managing, operating, providing and/or administering your use of and/or access to our service and our Website, as well as managing your relationship with us.
  • complying with any applicable laws, regulations, codes of practice, guidelines, or rules, or to assist in law enforcement and investigations conducted by any governmental and/or regulatory authority, including but not limited to the Applicable Data Protection Legislation.
  • managing, operating, administering and providing you with as well as facilitating the provision of our Service, including, without limitation, remembering your preferences.
  • tailoring your experience through the service by displaying content according to your interests and preferences and submitted information to us and allowing us to contact you, if necessary.
  • maintaining and administering any software updates and/or other updates and supporting that may be required from time to time to ensure the smooth running of our service.
  • contacting you or communicating with you via voice call, text message and/or fax message, email and/or postal mail or otherwise for the purposes of administering and/or managing your relationship with us or your use of our services, such as but not limited to communicating administrative information to you relating to our service. You acknowledge and agree that such communication by us could be by way of the mailing of correspondence, documents or notices to you, which could involve disclosure of certain Personal Data about you to bring about delivery of the same as well as on the external cover of envelopes/mail packages.
  • producing statistics and research for internal and statutory reporting and/or record-keeping requirements.
  • carrying out due diligence or other screening activities (including, without limitation, background checks) in accordance with legal or regulatory obligations or our risk management procedures that may be required by law or that may have been put in place by us.
  • auditing our service.
  • storing, hosting, backing up (whether for disaster recovery or otherwise) of your Personal Data, whether within or outside of your jurisdiction.
  • any other purposes which we notify you of at the time of obtaining your consent.

DISCLOSURE AND TRANSFER OF PERSONAL DATA

11. In accordance with your consent or in other cases where consent is exempted, we may disclose or share your Personal Data:

  • where such disclosure is required for performing the contractual obligations in connection with your access to this Website or providing products and/or services requested by you.
  • to third party service providers, agents and other organizations including our affiliates we have engaged to perform any of the functions and purposes listed in Section 10 above.
  • to comply with the prevailing laws and regulations including but not limited to the Applicable Data Protection Legislation and legal process or a request from governmental or regulatory authority in Vietnam.

12. In accordance with your consent or in other cases where consent is exempted, the Personal Data that we collect from you may be transferred to, processed and stored at, a destination outside Vietnam. It may also be processed by staff operating outside the Vietnam who work for us or for one of our service providers.

YOUR RIGHTS AS DATA SUBJECTS

To be Informed about Personal Data Processing

13. You have the right to know about the Processing of your Personal Data. With this Privacy Statement, we provide the necessary information on the Processing of your Personal Data.

To give Consent or Withdraw your Consent to Personal Data Processing

14. You have the right to consent or not to consent to the Processing of your Personal Data, except in cases where personal data can be processed without consent under Applicable Data Protection Legislation.

15. You have the right to withdraw your consent at any time when there is doubt about the scope or purpose of the Personal Data Processing or the accuracy of the Personal Data, unless otherwise provided by laws. The consent that you provide for the collection, use and disclosure of your Personal Data will remain valid until such time it is being withdrawn by you in writing. You may withdraw consent and request us to stop using and/or disclosing your Personal Data for any or all of the purposes listed above by submitting your request via email to us at the contact details provided below.

16. Upon receipt of your written request to withdraw your consent, we may require reasonable time (depending on the complexity of the request and its impact on our relationship with you) for your request to be processed and for us to notify you of the consequences of us acceding to the same, including any legal consequences which may affect your rights and liabilities to us. In general, we will try to respond to your request as soon as possible within applicable regulatory timeline, and we will try to process your request within ten (10) business days of receiving it.

17. Whilst we respect your decision to withdraw your consent, please note that depending on the nature and scope of your request, we may not be in a position to grant your access or continue the services to you and we shall, in such circumstances, notify you before completing the processing of your request. Should you decide to cancel your withdrawal of consent, please inform us in writing in the manner described in Section 15 at above.

To View, Modify or Request for Modification of Personal Data

18. We generally rely on the Personal Data provided by you (or your authorized representative). In order to ensure that your Personal Data is current, complete and accurate, please update us if there are changes to your Personal Data by informing us via email at the contact details provided below.

19. If you wish to make (a) an access request for access to a copy of the Personal Data which we hold about you or information about the ways in which we use or disclose your personal data, or (b) a modification request to correct or update any of your Personal Data which we hold about you, you may submit your request via email to us at the contact details provided below.

20. Please note that a reasonable fee may be charged for an access request. If so, we will inform you of the fee before processing your request.

21. We will respond to your request as soon as reasonably possible within applicable regulatory timeline, and we will try to process your request within ten (10) business days of receiving it. If we are unable to provide you with any Personal Data or to make a modification requested by you, we shall generally inform you of the reasons why we are unable to do so (except where we are not required to do so under the Applicable Data Protection Legislation).

To Request for the Provision, Deletion, and Restriction of Personal Data Processing

22. You have the right to request for the provision, deletion of your Personal Data at any time, and have the right to request for the restriction of the Processing of your Personal Data when there is doubt about the scope or purpose of the Personal Data Processing or the accuracy of the Personal Data, unless otherwise provided by laws. You may submit your request via email to us at the contact details provided below.

23. In case of request for the deletion of your Personal Data, you accept possible risks and damage that could happen due to such deletion.

24. Upon receipt of your written request for the restriction of the Processing of your Personal Data, we may require reasonable time (depending on the complexity of the request and its impact on our relationship with you) for your request to be processed and for us to notify you of the consequences of us acceding to the same, including any legal consequences which may affect your rights and liabilities to us. In general, we will try to respond to your request as soon as possible within applicable regulatory timeline, and we will try to process your request within ten (10) business days of receiving it. If we are unable to delete your Personal Data, we shall generally inform you of the reasons why we are unable to do so (except where we are not required to do so under the Applicable Data Protection Legislation).

To send Objection Request to Personal Data Processing

25. You have the right to send objection request for the Processing of your Personal Data at any time, unless otherwise provided by laws. You may submit your request via email to us at the contact details provided below.

26. Upon receipt of your written request regarding objection to the Processing of your Personal Data, we may require reasonable time (depending on the complexity of the request and its impact on our relationship with you) for your request to be processed and for us to notify you of the consequences of us acceding to the same, including any legal consequences which may affect your rights and liabilities to us. In general, we will try to respond to your request as soon as possible within applicable regulatory timeline, and we will try to process your request within ten (10) business days of receiving it.

To Lodge Complaints, Denunciations, Lawsuits and Claims for Damages

27. You have the right to lodge complaints, denunciations, lawsuits and claims for damages according to the laws.

To Request for Measures and Solutions to Protect your Personal Data

28. You have the right to request competent authorities, us, or other agencies, organizations, individuals relevant to the Processing of your Personal Data to adopt solutions and measures to protect your Personal Data according to the law. Upon receipt of your written request for measures and solutions to protect your Personal Data, we may require reasonable time (depending on the complexity of the request and its impact on our relationship with you) for your request to be processed and for us to notify you of the consequences of us acceding to the same, including any legal consequences which may affect your rights and liabilities to us. In general, we will try to respond to your request as soon as possible within applicable regulatory timeline, and we will try to process your request within ten (10) business days of receiving it.

YOUR OBLIGATIONS AS DATA SUBJECTS

29. As data subjects, you will have the following general obligations under the Applicable Data Protection Legislation:

  • To self-protect your Personal Data;
  • To respect and protect the Personal Data of others;
  • To provide Personal Data fully and accurately in accordance with the law, in accordance with the contract or when providing consent to the Processing of your Personal Data;
  • To comply with the Applicable Data Protection Legislation and participate in the prevention and combat of personal data infringements.

DATA RETENTION PERIOD

30. We may retain your data for as long as necessary for the fulfilment of the purpose for which it was collected or to which you give consent.

31. If you cease using the Website, or your permission to use the Website and/or the services provided by us is terminated or withdrawn, we may continue storing, using and/or disclosing your Personal Data in accordance with the prevailing laws and regulations including but not limited to the Applicable Data Protection Legislation. Subject to the prevailing laws and regulations, we may securely dispose of your Personal Data without prior notice to you.

AMENDMENTS TO THIS PRIVACY STATEMENT

32. We may amend this Privacy Statement from time to time. The amended Privacy Statement will be published on our website. You may consent to new scope and purposes (if any) provided in these amended versions, or you may withdraw your consent in accordance with Sections 14-17 above.

CONTACT US

33. For any questions regarding the processing of your Personal Data, please contact us at: privacy.vn@crif.com