Legal
Privacy policy
Effective
This privacy policy explains how Corpshore Vietnam, the Vietnamese subsidiary of Corpshore Solutions Corporation, collects, uses, discloses and protects personal data through corpshore.vn and related services. It is written to align with Vietnam's Personal Data Protection Decree (Decree 13/2023/ND-CP), the EU General Data Protection Regulation (GDPR) for European users, and the California Consumer Privacy Act (CCPA and CPRA) for California residents.
Who we are
Corpshore Vietnam is the data controller for personal data processed through this website. Corpshore Vietnam is part of Corpshore Solutions Corporation, headquartered in Toronto, Canada, which operates across more than 20 countries. Where Corpshore Vietnam processes personal data on behalf of a client, it acts as a data processor under that client's instructions and the applicable data processing agreement.
Personal data we collect
We collect data you provide directly through our forms, including your name, email address, phone number, company, job title, message content, and, for job applicants, your CV, work history, right-to-work status and related application data. We also collect standard technical data automatically, including IP address, device and browser type, pages viewed, referring pages, and interaction events, through analytics and cookies as described in our cookie policy.
How we use personal data
We use personal data to respond to inquiries and provide proposals, to process and evaluate job applications, to operate, secure and improve the website, to send communications you have requested such as our newsletter, and to meet legal and regulatory obligations. We do not sell personal data, and we do not use it for automated decision-making that produces legal or similarly significant effects without human involvement.
Lawful basis and consent
We process personal data on one or more lawful bases: your consent, the performance of a contract or steps taken at your request before entering a contract, our legitimate interests in operating and promoting our services where these are not overridden by your rights, and compliance with legal obligations. Under Vietnam's PDPD and the GDPR, where we rely on consent you may withdraw it at any time, without affecting processing carried out before withdrawal.
Disclosure and sharing
We share personal data with service providers who process it on our behalf under contract, including cloud hosting, customer relationship and recruitment platforms, analytics providers and email providers. We may share data with other Corpshore group entities where necessary to deliver services or manage an engagement. We may disclose data where required by law, regulation or valid legal process, and to protect our rights, users and the security of our systems.
International transfers
Because Corpshore operates globally, personal data may be transferred to and processed in countries other than your own, including Canada and Vietnam. For transfers subject to the GDPR we rely on recognized transfer mechanisms such as standard contractual clauses. For transfers of Vietnamese personal data we apply the impact assessment and safeguards required by PDPD. See our data processing agreement and PDPD notice for detail.
Data retention
We retain personal data only for as long as necessary for the purposes described in this policy, to comply with our legal obligations, resolve disputes and enforce agreements. Inquiry data is retained for the period needed to manage the relationship and a reasonable follow-up window. Application data is retained for the recruitment cycle and a limited period afterwards, unless you ask us to delete it sooner or you consent to a longer talent-pool retention.
Your rights
Depending on your location, you have rights to access, correct, update, delete, restrict and object to the processing of your personal data, to data portability, and to withdraw consent. California residents may request disclosure of the categories and specific pieces of personal information collected, request deletion, and opt out of any sale or sharing, which we do not conduct. To exercise any right, contact us using the details below; we will respond within the timeframes set by the applicable law.
Security
We protect personal data with encryption in transit and at rest, least-privilege access controls with multi-factor authentication, endpoint protection, logging and monitoring, and a defined incident response process. No method of transmission or storage is completely secure, but we maintain controls proportionate to the sensitivity of the data and review them regularly.
Children
This website and our services are directed to businesses and professionals and are not intended for children. We do not knowingly collect personal data from children. If you believe a child has provided us personal data, contact us and we will delete it.
Changes to this policy
We may update this policy to reflect changes in our practices, technology or the law. We will post the updated version here with a revised effective date. Material changes will be highlighted where appropriate.
Contact us
For privacy questions or to exercise your rights, contact Corpshore Vietnam through the contact page or by email. Our Data Protection Officer point of contact is available for data subject requests and is published in engagement documentation.