Privacy policy
Last updated
In short: We collect only what we need to answer your enquiry and supply you, we tell you why, and we do not sell it to anyone.
Template, not legal advice. This document shows the shape a compliant policy takes and marks every value that must be supplied with [square brackets]. Have it reviewed by someone qualified in your jurisdiction before publishing.
Who is responsible for your data
PHUC NGUYEN HUONG COMPANY LIMITED, business registration number 0000 000 000, of [registered address], is the controller of personal data collected through this website.
Questions about this policy, or requests relating to your data, go to [privacy contact email] or to the postal address above.
What we collect and why
We collect personal data in two situations: when you contact us, and when you use the site.
- Enquiry data — your name, company, email address, telephone number and the content of your message, so that we can respond to you and, if we go on to supply you, administer that relationship.
- Consent records — the fact that you agreed to be contacted, and when, so that we can demonstrate we had permission.
- Technical data — pages requested, referring page and general location derived from your IP address, so that the site works and we can see which pages are useful.
Lawful basis
Enquiry data is processed on the basis of your consent, given when you submit a form, and thereafter on the basis of legitimate interest in responding to and administering a commercial enquiry.
Where a supply relationship follows, the relevant data is processed on the basis of performance of a contract, and where documents must be kept for tax or customs purposes, on the basis of a legal obligation.
[Confirm the lawful bases that apply in your jurisdiction before publishing.]
How long we keep it
Enquiries that do not lead to a supply relationship are deleted after [retention period]. Records relating to an actual supply are kept for [retention period] to meet accounting, tax and customs obligations.
[Set real periods. "As long as necessary" is not a retention policy.]
Who we share it with
We do not sell personal data and we do not share it for advertising.
We share it only where necessary to do what you asked: with our hosting provider, with a freight forwarder or carrier where a delivery requires it, and with professional advisers or authorities where the law requires it.
[List your actual processors, and where they are located.]
Your rights
You may ask us for a copy of the personal data we hold about you, ask us to correct it, ask us to delete it, object to how we are using it, or withdraw a consent you previously gave.
Write to [privacy contact email]. We will respond within [statutory period]. If you are not satisfied with our response, you may complain to [name of the supervisory authority].
Security
The site is served over HTTPS. Access to enquiry data is limited to staff who need it to do their job. No system is perfectly secure, and we will tell you promptly if a breach affects your data.