Privacy Policy

1. Data controller

[Registered company name — to be filled in], of [Registered office address — to be filled in], tax code [Tax code — to be filled in], is the controller of personal data collected through this site.

2. What we collect

When you submit the enquiry form we collect:

• Full name
• Phone number / Zalo
• Email address
• Whether you already have a site
• Which package interests you
• Whether you have invested in a franchise before
• Expected capital
• How you heard about us
• Campaign parameters in the link you arrived by (utm_source, utm_medium, utm_campaign), if present
• Your messages, if you use the chat assistant on the site

3. Why we use it

We do not sell your personal data, and we will not use it for purposes beyond those above without your agreement.

• To contact you about the franchise opportunity you asked about.
• To assign an advisor for your area and track the progress of your enquiry.
• To survey and assess a site when you ask us to.
• For internal, aggregated reporting on marketing performance.

4. Legal basis

We process the data you choose to give us when you ask to be contacted, and to take pre-contract steps at your request.

You can withdraw your enquiry and ask us to stop processing at any time — see section 7.

5. Who sees it

Your data is accessible to:

• Đô Thị sales and management staff, under internal role-based permissions.
• Zalo (VNG) — used to notify advisors and to contact you.
• Our hosting and website infrastructure providers.

6. Storage and retention

Data is held on access-controlled cloud infrastructure, and the system keeps an audit log of actions taken on customer records.

We keep your data for as long as needed for the consultation, and at most 24 months from your last contact, unless the law requires longer or you ask us to delete it sooner.

7. Your rights under Decree 13/2023/NĐ-CP

You have the following rights over your personal data:

• To be informed about the processing.
• To give or withhold consent to processing.
• To access, view and correct your data.
• To withdraw consent.
• To have your data deleted.
• To restrict processing.
• To request a copy of your data.
• To object to processing.
• To complain, report, or bring legal proceedings.
• To claim compensation for damage.
• To self-protection as provided by law.

8. How to exercise your rights

Write to [Contact email — to be filled in] or call [Hotline — to be filled in]. We respond within 72 hours of receiving a valid request.

We may need to verify your identity first, in order to protect your own data.

9. Security

We apply appropriate technical and organisational measures: role-based access control, encryption in transit, and an audit log of actions on customer records.

No system is perfectly secure. If an incident affects personal data, we will notify you and the authorities as required.

10. Cookies

The site uses a strictly necessary cookie to keep the internal admin system's session. It sets no third-party advertising cookies.

If you arrive by a link carrying campaign parameters, those are stored with your enquiry for internal reporting.

11. Children's data

The site is aimed at adult investors and we do not knowingly collect data from anyone under 16. If we learn we have, we will delete it promptly.

12. Changes to this policy

We may update this policy. The revision date is shown at the top of the page, and material changes will be announced on the site.