Privacy Policy

This policy explains which personal data the cntech.vn website and CNTech collect from you, what we use it for, where it is stored and what rights you have.

1. Data controller

Công ty TNHH Công nghệ CNTech Việt Nam

• Address: Số 15/172 An Dương Vương, tổ dân phố Phú Mẫn, Phường Yên Phong, Thành phố Bắc Ninh, Vietnam
• Email: cntech024@gmail.com
• Phone: 0868 158 658

In this policy, "CNTech", "we" or "us" means Công ty TNHH Công nghệ CNTech Việt Nam.

2. Data we collect

When you submit the contact form on the website: your name, phone number, email, company name, the service you are interested in and your message. You type this information yourself; name and either a phone number or an email are required, the other fields are optional.

Technical data sent with a form submission:

• IP address: used to block spam and limit how often the form can be submitted. In the enquiry record we store only a one-way hash of the IP (SHA-256 with a secret key), never the original IP address.
• Browser information (user agent, e.g. browser type and operating system): stored with the submission, up to 300 characters, to recognise automated submissions.

Server logs: like most websites, the reverse proxy in front of our server may keep technical logs with the IP address, time, page requested and browser type. These logs are used only for security and troubleshooting.

Data received from Meta (Facebook), when CNTech connects its Facebook Page or runs ads:

• your public name and page-scoped ID, and the messages you send to CNTech's Page;
• the information you fill in on CNTech's lead generation ad forms (Lead Ads).

3. Cookies and tracking

The website does not use advertising cookies, the Facebook Pixel or Google Analytics. The contact section embeds a Google Maps map; that map is provided by Google and is subject to Google's privacy policy.

4. How we use your data

We use your data only to:

• contact you back, advise you and send quotes at your request;
• manage customer information in CNTech's internal system;
• block spam and keep the website secure.

We do not sell your data and do not share it with third parties for their advertising.

5. Legal basis

We process personal data under Vietnam's Law on Personal Data Protection No. 91/2025/QH15 and Decree No. 356/2025/NĐ-CP detailing that law (both in force since 1 January 2026), on the basis of your consent when you actively send information through the contact form, a message to our Page or a Lead Ads form.

6. Who can see your data

• Only CNTech staff who need it for their work (the director and sales staff), according to role-based permissions in our internal system. Notifications about a new enquiry go only to these people, inside the internal system.
• The server provider CNTech rents from in Vietnam, only as the provider of the hosting infrastructure.
• Competent state authorities, when required by law.

7. Storage and security

• Data in our internal system is stored on servers CNTech rents in Vietnam. Emails you send us are kept in CNTech's mailbox.
• Messages and ad forms you send through Facebook are also kept by Meta under Meta's policies; we do not control the copy Meta keeps.
• Retention: until the purposes in section 4 end or you ask us to delete it, unless the law requires us to keep it longer (e.g. accounting records if you become a customer).
• Data is backed up periodically; old backups are deleted automatically on rotation.
• Connections to the website are encrypted with HTTPS. Our internal system uses role-based access; only staff who need the data can access it.

8. Your rights

Under Article 4(1) of the Law on Personal Data Protection, you have the right to:

• be informed about the processing of your personal data;
• consent or refuse consent, and request withdrawal of your consent to the processing of your personal data;
• view, correct or request correction of your personal data;
• request the provision, deletion or restriction of processing of your personal data; object to the processing of your personal data;
• complain, denounce, file a lawsuit and claim compensation for damage as provided by law;
• request the competent authority or the parties involved in processing to take measures to protect your personal data.

9. How to make a request

Email cntech024@gmail.com with your name, the phone number or email you used when contacting us, and what you would like us to do. Under Article 5 of Decree No. 356/2025/NĐ-CP, we reply within 2 working days and complete the request within:

A complex request is extended once, by at most 10 days (view, correct, provide), 15 days (withdraw consent, restrict, object, protective measures) or 20 days (delete); we will then tell you why. How to request deletion, including data received through Facebook: User Data Deletion Instructions.

10. Changes to this policy

When we change this policy, we publish the new version on this page and update the date at the top.