PRIVACY STATEMENT

1. Introduction and Scope

This Privacy Statement explains how we (“we”, “us”, or “our”) handle your Personal Data in the course of:

  • Providing or receiving services from you (“Services”);
  • Establishing, performing, or maintaining any contractual or pre-contractual relationship with you, excluding employment relationships (“Relations”);
  • Delivering services to, or interacting with, the organisation you represent or work for (“Your entity”);
  • Responding to your requests as a data subject in accordance with applicable Vietnamese data protection requirements.

For the purposes of this Statement, “Personal Data” refers to any information-regardless of format-that is connected to, describes, or can identify an individual, including both basic and sensitive personal information as recognised under Vietnamese law.

This Privacy Statement applies to the processing of Personal Data of individuals who are clients, prospective clients, vendors, service providers, or other business partners for which we act as the responsible data controller-meaning we decide the purposes and methods of processing.

We collect Personal Data through various channels such as discussions during service negotiations, telephone calls, online or paper forms, email exchanges, business events, or other communication platforms. Personal Data may be obtained directly from you or indirectly through your entity.

This Statement does not cover purely corporate information unless such information contains or allows identification of an individual under applicable local laws.

Where we operate as a data processor on behalf of another organisation, our processing activities are governed by our internal Personal Data Protection Policy. A separate Website Privacy Statement applies to the collection and use of your data when you interact with our website.

2. Who We Are

References to “we”, “us”, or “our” in this Statement mean Investment Insights, acting as the Personal Data Controller under Vietnamese law.

The responsible entity will be the one with which you or your entity interact, enter into agreements, or initiate Services or Relations.

3. Personal data we process

The Personal Data we process in connection with providing Services or managing Relations may include the following:

3.1. Your contact details

  • Name;
  • Address;
  • Telephone number;
  • Email address;
  • Any additional information you voluntarily provide.

3.2. Your personal characteristics

Details such as gender, occupation, title, association with your entity, or other identifying characteristics required to establish your identity as a client, vendor, or representative. This may include information available in public business registries where it constitutes Personal Data under local laws.

3.3. Recording of video footage (CCTV)

When you visit our premises, you may appear in images or recordings captured by video surveillance systems. You may also be included in footage recorded during seminars or similar events. Location-specific information regarding such processing is made available at each relevant site. In some cases, building owners or authorised third parties may also process these recordings.

3.4. Your Communication Data

Information contained in your communications with us, including requests, inquiries, feedback, or complaints, whether submitted directly by you or through your authorised representative.

3.5. Compliance and KYC Information

To meet legal and compliance obligations, we collect information from ultimate beneficial owners, executives, or authorised representatives of our clients. This may include names, nationalities, identification details (including ID/passport number, dates, issuing authority, and photograph), CVs where required, tax information, residential addresses, contact details, birth details, marital status, professional role, estimated financial information, source of funds or wealth, and taxpayer identification numbers when applicable.

Providing the Personal Data necessary for identity verification is required for entering into contracts with us. If such data is not provided, we may be unable to proceed with or continue our engagement due to legal compliance requirements.

Providing Personal Data for communication purposes is optional, but failure to do so may delay our ability to respond or provide Services. Providing Personal Data for marketing purposes is voluntary and has no impact on other interactions with us.

4. Purposes for which we use your personal data

We process your Personal Data for the following purposes and under lawful bases recognised by Vietnamese data protection legislation:

4.1. Performance of services or contracts

To:

  • Fulfill obligations under agreements with you or your entity;
  • Manage service delivery;
  • Administer your requests or complaints;
  • Support your investments where applicable.

4.2. Marketing (based on consent)

For prospective clients, we may send marketing materials-such as newsletters or service updates-via electronic means or telephone after obtaining your consent, unless otherwise permitted under applicable laws. You may withdraw your consent at any time.

4.3. Compliance With Legal Obligations

We use Personal Data to meet obligations imposed by law, including anti-money laundering checks, record-keeping duties, responses to lawful requests from competent authorities, risk assessments, and compliance reporting.

4.4. Our Legitimate Interests

For existing clients, vendors, partners, or their representatives, Personal Data may be used for:

  • Administration service contracts or business relationships;
  • Improving service quality and understanding customer needs;
  • Conducting internal management, analysis, and operational support;
  • Security and fraud prevention;
  • Website operation and maintenance;
  • Supporting corporate transactions such as mergers, reorganisations, or transfers of business;
  • Internal management, troubleshooting, testing, and research.

We ensure that our legitimate interests do not override your rights and freedoms.

5. How we share your personal data

Your personal data may be shared with the following parties:

5.1. Internal entities

For administrative, management, analytical, and operational purposes.

5.2. Service providers and processors

Including:

  • IT and software service providers;
  • Marketing and advertising partners;
  • Legal, audit, and compliance partners;
  • Subcontractors engaged to support Services.

All such parties must process data only under our instructions and must comply with applicable Vietnamese personal data protection laws.

5.3. Regulatory or legal bodies

Where disclosure is:

  • Required by law;
  • Necessary for investigations or legal proceedings;
  • Needed to protect rights, safety, or security.

5.4. Corporate Transactions

In case of mergers, acquisitions, restructuring, or sale of assets subject to confidentiality protections.

5.5. Other Third Parties (With Consent)

Disclosure to third parties at your request or with your express consent.

6. International Transfers of Your Personal Data

If your Personal Data is transferred outside Vietnam:

  • We will implement appropriate safeguards as required by the personal data protection regulations (“PDPR”);
  • We will notify or register cross-border transfers with authorities when needed;
  • We may use contractual protections such as data transfer agreements;
  • We will obtain your consent where legally required.

You may request information about applied safeguards at any time.

7. Cookie Policy

Our website uses cookies and similar technologies, including browser analytics tools, server logs and web beacons, to collect information about how users interact with our website.

Cookies are small text files containing alphanumeric identifiers that are transmitted to and stored on your device through your web browser. Subject to your consent where required, cookies help us recognise your browser, remember certain settings or preferences, and understand how frequently and in what manner our website is used. This information assists us in improving website performance and detecting abnormal or potentially fraudulent activities.

We may use the following categories of cookies:

  • Strictly necessary cookies: These cookies are essential for the operation and security of the website, including enabling access to secure areas or core functionalities.
  • Analytical or performance cookies: These cookies allow us to recognise and count website visitors and to analyse how users navigate the website, helping us improve its structure, content and usability.
  • Functionality cookies: These cookies enable the website to remember your preferences, such as language or regional settings, in order to provide a more personalised user experience.
  • Targeting cookies: These cookies may record information about your visit to the website, including pages viewed and links followed, in order to make website content or advertising more relevant to your interests.

You may configure your browser settings to block or restrict cookies, including strictly necessary cookies. However, please note that doing so may limit your ability to access certain parts of the website or use certain functions.

You may also control or delete cookies stored on your device through your browser settings. Disabling or deleting cookies may require you to manually adjust certain preferences on subsequent visits, and some services or functionalities of the website may not operate properly.

Where information collected through cookies or similar technologies is associated with your personal data, such information will be processed in accordance with this Privacy Policy and applicable data protection laws.

8. Security

We apply technical, organisational, and physical measures to protect your Personal Data, including:

  • Encryption (where appropriate);
  • Access controls and identity verification;
  • Employee training and confidentiality obligations;
  • Secure systems aligned with confidentiality, integrity & availability principles;
  • Monitoring and safeguards to prevent unauthorised access.

Third-party processors must implement equivalent protections.

9. Data Retention

We retain personal data only for as long as necessary to:

  • Fulfil the purposes described in this statement;
  • Satisfy legal or regulatory requirements;
  • Defend legal claims.

Unless a different period is required by law or internal policy, consistent with business and regulatory practice in Vietnam.

Upon expiry, data is erased, anonymised, or otherwise processed in accordance with legal requirements.

10. Your Rights

Under Vietnamese law, you have the right to:

  • Be informed about data processing;
  • Access your personal data;
  • Request correction;
  • Request deletion;
  • Restrict processing;
  • Object to processing;
  • Withdraw consent;
  • Request data portability;
  • File complaints with authorities;
  • Claim damages (if applicable).

To exercise your rights, contact us using the information below. We will respond within the period required by law.

Withdrawal of consent does not affect data processed before your withdrawal.

11. Changes to This Privacy Statement

We may update this Privacy Statement due to legal, operational, or policy changes. If the updates significantly affect your rights, we will notify you before they take effect.

12. Contact Us

If you have questions about this Privacy Statement or wish to exercise your data rights, please contact us at:

INVESTMENT INSIGHTS COMPANY LIMITED

Email: contact@investment-insights.vn

Phone: 033 931 9800

Address: Enterprise Tower, Floor 4, 290 Ben Van Don, Vinh Hoi, HCMC, Vietnam

Click here to view a PDF of Privacy Statement