Privacy Policy

Last updated:

This policy explains which personal data is processed when you use the VNFactory Compliance website (vnfactorycompliance.com), why, and your rights under Vietnam’s 2025 Personal Data Protection Law and its implementing regulations. If this English version differs from the Vietnamese version, the Vietnamese version prevails.

1. Data controller

The website is operated by the VNFactory Compliance team in Hanoi, Vietnam. Send any personal-data request to vnfactorycompliance@gmail.com.

2. Data we collect

  • When you register: name (optional), email, phone number with country code, and password (stored only as a bcrypt hash; we cannot read it).
  • When you comment: the comment text, posting time and the posting account.
  • When you reset a password: the recipient email and a single-use, time-limited reset token.
  • Technical data: IP address, browser type and access logs recorded by Cloudflare infrastructure for security and abuse prevention (for example registration rate limits).

3. Purposes and legal basis

  • Creating and maintaining your account, sign-in and commenting — based on the consent you give when registering.
  • Sending password-reset emails and essential account notices.
  • Protecting the website, detecting abnormal access and moderating comments.
  • We do not use data for advertising and do not sell or share it with third parties for marketing.

4. Processors

  • Cloudflare (hosting, D1 database, R2 file storage, network security). Data may be stored or routed outside Vietnam.
  • Resend (transactional email such as password resets).
  • These providers process data only on our instructions to run the service.

5. Retention

  • Account data is kept until you ask us to delete the account.
  • Password-reset tokens expire quickly and cannot be reused.
  • Comments stay with the article; when an account is deleted its comments are deleted or anonymised.
  • Technical logs follow the infrastructure provider’s default retention.

6. Your rights

You may be informed, give or withdraw consent, access, correct, request deletion, restrict or object to processing, and lodge a complaint as provided by law. Send requests to vnfactorycompliance@gmail.com; we respond within the statutory time limit. Withdrawing consent does not affect processing carried out before.

7. Security

Connections use HTTPS, passwords are hashed, admin rights are checked on the server and admin actions are logged. No system is perfectly secure; if an incident affects personal data we will notify as required by law.

8. Children

The website is intended for people working in factory compliance and is not directed at children. Do not register if you are under 18.

9. Changes

When this policy changes, the date at the top is updated. Material changes to processing purposes will be announced and consent requested again where needed.