Privacy Policy

Effective Date: 27 April 2026

Viettonkin Consulting JSC (“Viettonkin”, “we”, “us”, or “our”) respects your privacy and is committed to protecting the personal data we collect about you. This Privacy Policy explains how we collect, use, store, share, and protect personal data in connection with our website https://viettonkinconsulting.com (the “Website”) and our consulting services.

This Policy is issued in accordance with Vietnam’s Personal Data Protection Decree (Decree 13/2023/ND-CP), and applies global standards consistent with the EU General Data Protection Regulation (GDPR) and Singapore’s Personal Data Protection Act (PDPA) where relevant to international clients.

1. Who we are

Viettonkin Consulting JSC is a foreign direct investment (FDI) advisory firm headquartered in Ho Chi Minh City, Vietnam, with offices in Hanoi, Singapore, Bangkok, and Jakarta. We provide market entry, legal, accounting, tax, HR, and audit advisory services to foreign companies investing into Southeast Asia.

• Data Controller: Viettonkin Consulting JSC
• Registered address: No. 29 Road D6, Saigon Pearl, 92 Nguyen Huu Canh Street, Ward 22, Binh Thanh District, Ho Chi Minh City, Vietnam
• Privacy contact: info@viettonkin.com.vn

2. Personal data we collect

We collect personal data in the following ways:

2.1 Information you provide directly

• Contact details (name, job title, company, email, phone) submitted via our contact forms, ebook downloads, newsletter sign-ups, or consultation requests
• Project briefs and engagement information you share with our consultants during scoping and delivery
• Identity, corporate, and financial documents you provide for KYC, incorporation, accounting, tax, or audit engagements
• Correspondence you send us by email, phone, messaging apps, or postal mail

2.2 Information collected automatically

• Device and browser information (browser type, operating system, device model)
• IP address and approximate geographic location
• Pages visited, time on page, referrer URL, and click events on the Website
• Cookies and similar tracking technologies (see Section 6 below)

2.3 Information from third parties

• Public business records (Ministry of Planning and Investment, BKPM, ACRA, DBD) when conducting due diligence on prospective counterparts
• Referrals from existing clients, business partners, or professional networks
• LinkedIn or other professional platforms when you connect with our team

3. How we use your personal data

We use your personal data only for the purposes for which it was collected, including:

• Service delivery: to scope, deliver, and invoice consulting engagements you have requested
• Communication: to respond to enquiries, schedule consultations, send service updates, and send marketing communications you have opted into
• Compliance: to meet our regulatory and statutory obligations in Vietnam and partner jurisdictions, including KYC, anti-money-laundering, and tax reporting requirements
• Website operation: to provide, maintain, secure, and improve the Website and our services
• Analytics: to understand how visitors use the Website and to improve content quality, in aggregate form
• Legal claims: to establish, exercise, or defend legal claims where necessary

4. Legal bases for processing

Where applicable law requires a legal basis for processing personal data, we rely on the following:

• Consent — for marketing communications, non-essential cookies, and processing of sensitive data
• Contractual necessity — for delivery of services you have engaged us to provide
• Legal obligation — for KYC, AML, tax, and statutory reporting requirements
• Legitimate interests — for service improvement, fraud prevention, and security

5. Sharing your personal data

We do not sell your personal data. We share it only with the following categories of recipients, and only where necessary for the purposes set out above:

• Group entities: Viettonkin offices in Vietnam, Singapore, Thailand, and Indonesia, where required to deliver multi-jurisdiction engagements
• Service providers: trusted third parties who process data on our behalf (cloud hosting, email delivery, accounting software, e-signature platforms, customer relationship management) under contractual confidentiality obligations
• Government authorities: tax authorities, business registration agencies, immigration authorities, and other regulators where required by law
• Professional advisors: our auditors, lawyers, and insurers when required for legitimate business purposes
• Successors: in the event of a merger, acquisition, or restructuring of our business

Where personal data is transferred outside Vietnam, we ensure that the transfer is subject to appropriate safeguards, including standard contractual clauses or equivalent mechanisms as required by Decree 13/2023/ND-CP and applicable foreign laws.

6. Cookies and tracking technologies

We use cookies and similar technologies to operate the Website, remember your preferences, analyse usage, and (where you have consented) personalise content. Categories of cookies we use:

• Strictly necessary cookies: required for core Website functionality (login, form submission, security). These cannot be disabled.
• Analytics cookies: Google Analytics 4 and Google Tag Manager, used to understand visitor behaviour in aggregate. IP addresses are anonymised where possible.
• Marketing cookies: used (with your consent) for retargeting and to measure the effectiveness of campaigns.

You can control cookies through your browser settings. Disabling certain cookies may affect Website functionality.

7. Data retention

We retain personal data only for as long as necessary for the purposes for which it was collected, including:

• Client engagement records: 10 years after the engagement closes (statutory tax and accounting record retention under Vietnamese law)
• KYC and AML records: 5 years after the end of the business relationship
• Marketing contacts: until you unsubscribe or withdraw consent
• Website analytics data: aggregated data retained for up to 26 months in Google Analytics, then automatically deleted

8. Your rights

Subject to applicable law, you have the right to:

• Access: request a copy of the personal data we hold about you
• Correction: request correction of inaccurate or incomplete personal data
• Deletion: request deletion of your personal data, subject to our legal obligations to retain certain records
• Restriction: request that we restrict processing of your personal data in certain circumstances
• Objection: object to processing carried out under legitimate interests, including direct marketing
• Portability: request a copy of your personal data in a structured, commonly-used, machine-readable format
• Withdraw consent: where processing is based on your consent, withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal
• Lodge a complaint: with the Vietnam Cybersecurity and High-Tech Crime Department (A05, Ministry of Public Security) or your local data protection authority

To exercise any of these rights, contact us at info@viettonkin.com.vn. We will respond within 30 days.

9. Security

We implement appropriate technical and organisational measures to protect personal data against unauthorised access, alteration, disclosure, or destruction. These include encrypted data transmission (TLS), access controls on internal systems, role-based permissions, and regular security reviews. No method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

10. Children’s data

The Website and our services are not directed at children under 16. We do not knowingly collect personal data from children. If you believe we have collected personal data from a child, please contact us and we will delete it.

11. International data transfers

Your personal data may be transferred to and processed in countries outside your country of residence, including Vietnam, Singapore, Thailand, and Indonesia where our offices operate. Where transfers are made from a jurisdiction with strict cross-border transfer requirements (such as the EU under GDPR, Singapore under PDPA, or Vietnam under Decree 13/2023), we apply the appropriate legal mechanisms (standard contractual clauses, adequacy decisions, or your explicit consent).

12. Third-party links

The Website may contain links to third-party websites and services. This Privacy Policy does not apply to those external sites. We encourage you to review the privacy policies of any third-party sites you visit.

13. Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. The “Effective Date” at the top of this page indicates when the Policy was last updated. We recommend reviewing this page periodically.

14. Contact us

If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us:

• Email: info@viettonkin.com.vn
• Address: No. 29 Road D6, Saigon Pearl, 92 Nguyen Huu Canh Street, Ward 22, Binh Thanh District, Ho Chi Minh City, Vietnam
• Phone: +84 977 093 166