1. Scope and data controller
Backend Vietnam (“Backend”, “we”, “us”) is the controller of personal data collected through backend.vn and the contact channels published on it (email, phone, Zalo).
This policy applies when you visit the website, contact us, or take part in an initial consultation. Data processing within a specific project — for example, when we process a client’s data on the client’s behalf — is additionally governed by the contract or data processing agreement between the parties.
2. Legal framework
This policy is based on Vietnam’s Law on Personal Data Protection No. 91/2025/QH15, Decree No. 356/2025/ND-CP detailing and guiding its implementation, and other applicable Vietnamese regulations.
3. Personal data we collect
3.1. Data you provide
- Contact details: name, email address, phone number, Zalo account name.
- Professional details: organization, job title, industry.
- Communication content: descriptions of your needs, attachments, feedback, and notes from our conversations.
3.2. Technical data collected automatically
When you visit the website, our servers and hosting providers may record your IP address, browser and device type, pages visited, time of access, and error codes. This data is used to operate, troubleshoot, and protect the website — not to build individual behavioural profiles.
3.3. Sensitive personal data
We do not request or intentionally collect sensitive personal data (such as health, personal financial, biometric, religious, or political information). Please do not send such data unless specifically requested under an appropriate confidentiality agreement.
4. Purposes of processing
Personal data is processed only to:
- Respond to your enquiries and arrange calls or meetings.
- Assess your needs and prepare proposals, quotations, and contracts when you request them.
- Maintain the history of our communication and working relationship.
- Operate and secure the website, and detect and prevent unauthorized access or abuse.
- Comply with legal obligations.
We only send service information with your consent, and you can opt out at any time. We do not sell, rent, or trade your personal data.
5. Legal bases for processing
- Your consent: when you voluntarily send us your contact details for consultation. You may withdraw consent at any time; withdrawal does not affect the lawfulness of processing carried out before it.
- Preparing and performing a contract: when data is needed to negotiate, sign, or perform a contract with you or your organization.
- Legal obligations: when the law requires us to retain or provide data, for example for accounting or tax purposes.
- Other cases in which the law permits processing without consent.
6. Cookies and third-party services
backend.vn does not set its own cookies and currently uses no analytics, advertising measurement, or behavioural tracking tools. Some content is loaded from third-party services, in which case your browser connects to them directly:
- Google Fonts (all pages): provides typefaces; Google receives your IP address and browser information.
- Simple Icons (home page): provides technology logos; the service’s servers receive your IP address.
- Google Maps (Contact page): the embedded map loads only when you scroll to it; Google may set cookies and process data under Google’s policies.
- Zalo: you are taken to Zalo’s service only if you click “Chat via Zalo”.
These providers process data under their own privacy policies. You can block or delete third-party cookies in your browser settings. If we add analytics or non-essential cookies, we will update this policy and ask for your consent before using them.
7. Sharing personal data
Data is shared only as far as necessary with:
- Service providers that support our operations, such as hosting, email, and cloud storage, acting as data processors under contractual confidentiality obligations.
- Backend staff and specialists directly involved in the conversation or project, who are bound by confidentiality.
- Partners or subcontractors involved in a project, only after you have been informed and agreed.
- Competent authorities when legally required.
8. International data transfers
Some service providers (for example email, cloud storage, and Google) may store or process data on servers outside Vietnam. Such transfers are carried out in accordance with Vietnamese personal data protection law, including preparing impact assessment dossiers where required, and we favour providers with appropriate data protection safeguards.
9. Retention
- Consultations that do not lead to an engagement: up to 24 months after our last communication.
- Contract-related data: for the term of the contract and the retention period required by accounting and tax law.
- Technical logs: for the short period needed for operations and security.
After these periods, data is deleted or anonymized unless the law requires longer retention or you agree otherwise.
10. Security measures
We apply technical and organizational measures appropriate to the nature of the data, including:
- Encryption in transit with HTTPS/TLS.
- Least-privilege, need-to-know access controls.
- Protected administrator accounts, security updates, and regular backups.
- Confidentiality commitments from staff and partners with data access.
In the event of a personal data breach, we will notify the competent authority and affected data subjects within the time limits and in the manner required by law. No method of electronic transmission or storage is completely secure; please avoid sending sensitive information over public channels.
11. Your rights
As a data subject, you have the right to:
- Be informed about the processing of your personal data.
- Give or refuse consent, and withdraw consent you have given.
- Access, view, and correct your data, or request its correction.
- Request that your data be provided, deleted, or its processing restricted.
- Object to processing for service marketing purposes.
- Lodge complaints, file denunciations or lawsuits, and claim compensation as provided by law.
- Protect your own rights as provided by law.
Some rights may be limited where the law provides otherwise, for example when data must be retained to meet a legal obligation.
12. Exercising your rights
Email [email protected] with the subject “Personal data request”, stating the right you wish to exercise and information that helps us identify the relevant communication. We may ask you to verify your identity before acting, to protect your data. We respond within the time limits set by law and free of charge, except where the law permits a fee.
13. Children’s personal data
The website is intended for businesses and organizations, not children. We do not knowingly collect personal data from anyone under 16. If we learn that we have received such data without valid consent as required by law, we will delete it.
14. Changes to this policy
We may update this policy to reflect changes in our operations, third-party services, or the law. The update date is always shown at the top of this page. For material changes that affect your rights, we will give clear notice on the website before they take effect.
15. Privacy contact
- Data controller
- Backend Vietnam (Backend)
- Address
- 20th Floor, T&T Building, 120 Dinh Cong Street, Phuong Liet, Hanoi, Vietnam
- [email protected]
- Phone
- +84 942 551 088