This Privacy Policy explains how VNBG collects, uses, shares and protects your personal data when you visit vietnambusinessgateway.com, contact us, or use our services. VNBG (Vietnam Business Gateway) is a brand of Iris International [full legal name, enterprise code], with its office at 7F, Harmony Building, 47 Phung Khac Khoan Street, Tan Dinh Ward, Ho Chi Minh City, Vietnam.
If you do not agree with this policy, please stop using the website and do not send us your personal data.
1. Key definitions
- “VNBG”, “we”, “us”, “our” mean Iris International, the owner of the VNBG brand.
- “You”, “user” mean any person who visits the website, contacts us, or uses our services, including the representatives and staff of our clients.
- “Personal data” means any information that identifies, or can identify, a specific person.
- “Data controller” means the party that decides why and how personal data is processed. For data collected through this website, VNBG is the data controller.
- “Data processor” means a party that processes personal data on behalf of the data controller.
- “Data subject” means the person the personal data is about.
- “PDP Law” means Vietnam’s Law on Personal Data Protection No. 91/2025/QH15 and its guiding Decree No. 356/2025/ND-CP.
- “GDPR” means the EU General Data Protection Regulation (EU) 2016/679.
- “Cookies” mean small files that a website stores on your device.
2. Our data protection principles
We handle personal data in line with the PDP Law and, where it applies to you, the GDPR. We follow these principles:
- Lawful, fair and transparent: we process data on a legal basis and tell you how we use it.
- Purpose limitation: we use data only for the purposes we state.
- Data minimisation: we collect only what we need for those purposes.
- Accuracy: we keep data correct and update it when you tell us of a change.
- Storage limitation: we keep data only as long as we need it.
- Integrity and confidentiality: we protect data against loss, misuse and unauthorised access.
- Accountability: we can show how we comply with these principles.
We do not sell or buy personal data.
3. What data we collect and how we use it
3.1 Data you give us
You give us data when you fill in a contact or consultation form, chat with our consultants, send us an email, subscribe to our newsletter, or sign a service agreement. This data may include:
- Full name, job title and company name.
- Email address, phone number and messaging app ID (for example WhatsApp or Zalo).
- Country, city and business address.
- Details of your business plan and the services you need.
When you become a client, the service itself (company formation, accounting, payroll, recruitment, work permits, import and export) may need more data. This can include passport or ID copies, date of birth, nationality, residential address, CVs, salary and tax details, and documents of shareholders, directors and employees. We use this data only to deliver the service you ordered and to file it with the competent authorities.
3.2 Data we collect automatically
When you visit our website, we collect usage data such as your IP address, approximate location, browser type and language, device type, the pages you visit, and the time and length of your visit.
3.3 Cookies and tracking technologies
We use cookies, tags and scripts to make the website work, to remember your settings, to measure traffic, and to support our marketing. Our cookie banner groups them as follows:
| Category | Purpose | Can you refuse? |
|---|---|---|
| Functional | Makes the website work and keeps it secure | No, these are always active |
| Preferences | Remembers your choices | Yes |
| Statistics | Measures visits and how the site is used | Yes |
| Marketing | Shows relevant ads and measures campaigns | Yes |
You can accept, refuse or change your cookie choices at any time through Manage consent on our website. You can also delete cookies in your browser settings. If you refuse some cookies, parts of the website may not work as expected.
3.4 How we use your data
- To reply to your questions and give you a consultation, quote or plan.
- To deliver, manage and invoice the services you order.
- To carry out client identity checks (KYC) and anti-money-laundering checks.
- To send you notices about your services, deadlines and changes in law that affect you.
- To provide customer support.
- To analyse and improve our website and services.
- To detect, prevent and fix technical issues, fraud and security risks.
- To send you newsletters, market updates and offers, if you agree. You can unsubscribe at any time.
- To comply with our legal obligations.
4. Legal basis for processing
Our legal basis depends on the data and the context in which we collect it. We process personal data when:
- You give your consent, for example when you submit a form, subscribe to our newsletter or accept cookies. Your consent must be clear and specific, and you can withdraw it at any time.
- We need it to perform a contract with you or your company, or to take steps you ask for before signing one.
- The law requires it, for example tax, accounting, labour, immigration and anti-money-laundering rules.
- We have a legitimate interest, such as keeping our website secure or improving our services, and this interest does not override your rights.
- It protects life, health or property in an emergency, or another case allowed by the PDP Law.
When you give us data about other people (for example shareholders, directors or employees), you confirm that you have informed them and obtained any consent that the law requires.
5. Sharing your data
We share personal data only when we need to, and only the data that is needed. We may share it with:
- Government authorities, such as business registration, tax, social insurance, labour, immigration and customs offices, when we file documents for your service.
- Service providers that work on our behalf, such as website hosting, CRM and form tools (for example HubSpot), analytics and advertising tools (for example Google Analytics, Google Ads, Meta/Facebook and LinkedIn), live chat, email delivery, cloud storage and payment providers.
- Professional partners that help deliver your service, such as law firms, auditors, banks, notaries, translators, recruiters, logistics and customs brokers. We share data with them only with your consent or when the service requires it.
- Other parties when the law, a court or a competent authority requires it, or to protect our rights and safety.
These parties may use your data only for the task we give them. They must keep it confidential and protect it.
Transfers outside Vietnam
Some of our service providers store data on servers outside Vietnam. When we transfer personal data abroad, we do so in line with the PDP Law, including the required impact assessment, and we take steps to make sure your data stays protected.
6. How long we keep your data and how we protect it
We keep personal data only as long as we need it for the purposes in this policy. After that, we delete it or make it anonymous.
- Enquiries and leads: up to [24] months after our last contact, unless you become a client.
- Client and service records: for the term of the service and then for the period that Vietnamese law requires, for example accounting and tax records.
- Newsletter data: until you unsubscribe.
We may keep some data longer if we need it to meet a legal obligation, resolve a dispute or enforce our agreements.
We protect your data with technical and organisational measures. These include access control, encrypted connections (HTTPS), secure storage, staff confidentiality obligations and regular reviews. No system is completely secure. If a data breach happens, we will act quickly to limit the harm and will notify the competent authority and the affected people as the PDP Law requires.
7. Your rights
Under the PDP Law, and the GDPR where it applies to you, you have the right to:
- Be informed about how we process your data.
- Access the data we hold about you and get a copy.
- Correct data that is wrong or incomplete.
- Delete your data, unless the law requires us to keep it.
- Restrict or object to certain processing, including direct marketing.
- Withdraw your consent at any time. This does not affect processing done before you withdraw.
- Data portability, where it applies.
- Not be subject to decisions made only by automated means, including profiling, that have legal or similar effects on you.
- Complain to the competent authority in Vietnam (the Ministry of Public Security) or, if you are in the EU/EEA, to your local data protection authority.
To use any of these rights, email us at [privacy email]. We may ask you to confirm your identity. We will reply within the time the law requires, normally within [30] days.
8. Email marketing
We send newsletters and offers only to people who agree to receive them, or to clients where the law allows. We send these emails through an email marketing platform. The emails may contain tracked links so we can see opens and clicks and make our content more useful. Every marketing email has an unsubscribe link, and you can also ask us to stop by email.
9. Payments
Some of our services are paid. Payments are made by bank transfer or through third-party payment providers. We do not store your full card details. Card payments are handled by providers that comply with the Payment Card Industry Data Security Standard (PCI DSS).
10. Links to other websites
Our website may link to other websites, such as government portals or partner sites. We are not responsible for their content or privacy practices. Please read their privacy policies.
11. Children
Our website and services are for businesses and adults. We do not knowingly collect data from children under 16. If you believe a child has sent us data, please contact us and we will delete it.
12. Changes to this policy
We may update this policy from time to time. We will post the new version on this page and change the “Last updated” date. If the changes are significant, we will tell you by email or by a notice on the website.
13. Contact us
If you have questions about this policy or your data, please contact us:
- VNBG – Vietnam Business Gateway (a brand of Iris International)
- Address: 7F, Harmony Building, 47 Phung Khac Khoan Street, Tan Dinh Ward, Ho Chi Minh City, Vietnam
- Email: info@iris-international.co (privacy requests: [privacy email])
- Phone: +84 916 442 025 (Monday to Friday, 8:00 to 18:00)
- Data protection contact: [name / DPO]