Personal data protection policy

Version 2.0 · Updated: 21/10/2026 · Effective from the date of official publication on the website.

This policy explains how KIM PHU VINH INTERNATIONAL COMPANY LIMITED (“KPV Group”, “KPV”, “we”) collects, uses, shares, stores and protects your personal data when you visit the KPV Group website, submit a consultation request form, reserve a seat in a class, apply for a programme, take a quiz or contact us. The policy has been drawn up in accordance with the Law on Personal Data Protection No. 91/2025/QH15 and Decree 356/2025/NĐ-CP detailing the Law (both effective from 01/01/2026).

Please read carefully before ticking the consent box in the form. If you do not agree, you can still browse the website and contact us directly via the hotline 0866 214 579 or 0867 325 631.

1. Data controller

• KIM PHU VINH INTERNATIONAL COMPANY LIMITED (CÔNG TY TNHH KIM PHÚ VINH INTERNATIONAL) – Business registration number 3603875631.
• Head office: Số 7 đường Nguyễn Du, KP Bình Thành, P. Trấn Biên, TP. Đồng Nai.
• Consultation office: 30 Nguyễn Du, P. Trấn Biên, TP. Đồng Nai.
• Personal data enquiries: [email protected] · Hotline 0866 214 579 or 0867 325 631.

2. Personal information we collect

2.1. Device information (collected automatically)

When you visit the website, the system may record: your device type, operating system and browser; the pages you view and the page from which you submit a form; the traffic source (referring page, advertising campaign parameters such as utm_source, gclid, fbclid); cookies and similar technologies (see section 10). The IP address of anyone who submits a form is stored only as a one-way hash to prevent duplicate submissions and spam – we do not store the original IP address with your record.

2.2. Information you provide through forms

• Required: full name, phone number/Zalo.
• Optional (if you fill them in): email, year of birth, who you are (student, parent, discharged soldier, worker, business/school), area of interest, country/market, foreign language level, preferred time for a call, the language you wish to be tested in, and what you need advice on.
• The class, programme or event you register for; your answers and career quiz results if you submit them.
• Proof of consent: the time, wording and version of the consent you ticked.

2.3. Information when you contact us directly

When you call the hotline, message us on Zalo or Facebook, or visit our office, an adviser may record your name, phone number and needs in the consultation management system – after asking for and obtaining your consent. Notes on what was discussed are used only to follow up on your consultation.

2.4. Data the website does not collect

The website does not ask for your citizen ID card/passport number, photos of documents, health status, financial or banking information, or any other sensitive personal data. When you prepare application documents for study abroad, technical intern trainee or employment programmes, the necessary documents are collected only in person, together with a notice and a separate written consent stating the purpose, the recipients and the retention period.

3. Purposes of use

• Contacting you with advice on the needs you registered, by phone, Zalo or email.
• Reserving class seats, class placement, scheduling level tests, and receiving event registrations and programme applications.
• Suggesting a suitable pathway (foreign languages, study abroad, technical intern training, jobs) based on the information you select.
• Customer care and reminders about classes and appointments directly related to your request.
• Aggregated internal statistics (number of registrations by channel and by programme) to improve our services – without identifying individuals.
• Sending information about programmes, course schedules, events and new offers – ONLY if you separately tick the box “I agree to receive information…” (optional). If you do not tick this box, you will still receive advice as normal.

If we need to use your data for any purpose other than those listed above, we will notify you and ask for your fresh consent.

4. Legal bases for processing

• Your consent under the Law on Personal Data Protection No. 91/2025/QH15: given expressly by ticking the consent box in the form yourself. Consent boxes are never pre-ticked; each box relates to a specific purpose (box 1 – processing data to provide advice, required to submit the form; box 2 – receiving marketing information, optional). We store the time, wording and version of your consent as proof.
• Performance of a contract when you enrol on a course or sign a service contract with KPV.
• Legal obligations of KPV (accounting, tax, providing information at the request of competent state authorities) and other cases in which the law permits processing without consent.

Silence or failure to respond is not regarded as consent.

5. Sharing personal information

KPV does not sell, rent or trade your personal data. Data is shared only in the following cases:

• Authorised KPV staff: advisers can see only the records assigned to them or not yet assigned to anyone; administrators and the technical team operating the system can see all records. Every data export is logged.
• Website hosting servers: form data is stored on servers located in Vietnam, operated by an infrastructure service provider under a contract with KPV – the provider processes data only on KPV’s instructions and does not use it for its own purposes.
• Email and internal notification services: when a new registration comes in, the system sends an internal email/message to advisers; phone numbers in internal messages sent via messaging apps are partially masked.
• Google Analytics, Google Ads, Meta Pixel (if enabled by KPV): receive device data, page views and the “form submitted” event in order to measure advertising effectiveness. These tools do not receive your name, phone number, email or form content.
• Zalo: when you tap the Zalo button or message KPV’s Zalo Official Account, the conversation takes place on the Zalo platform and is subject to Zalo’s policy. Advisers may contact you on Zalo using the phone number you provided.
• Anti-spam service (if KPV enables Cloudflare Turnstile): processes device data to distinguish real people from bots when you submit a form.
• Schools, receiving organisations and recruitment partners: ONLY when you give consent for each specific programme, through a separate document/form when preparing your application. KPV does not send lists of people who request consultations to its partners.
• Competent state authorities when required by law.

Some providers of measurement and advertising tools (Google, Meta) may store and process data outside Vietnam. KPV shares with them only the technical and statistical data described above, and completes the procedures for transferring personal data abroad as required by law.

6. Behavioural advertising

When KPV enables Google Analytics, Google Ads or Meta Pixel, these services’ cookies record the pages you have viewed on the website in order to: measure how many people are interested in each programme; and show you more relevant KPV ads on Google, YouTube, Facebook and Instagram (remarketing). KPV does not upload lists of registrants’ phone numbers or email addresses to advertising platforms.

How to opt out of behavioural advertising:

• Google: My Ad Center · Google Analytics opt-out browser add-on · How Google uses advertising cookies.
• Facebook/Instagram: Ad preferences (login required) · Meta Privacy Policy.
• Delete or block cookies in your browser settings, or use private browsing mode.
• Send KPV an objection to the processing of your data for advertising purposes, as described in section 9.

7. Data retention

• Consultation request data is kept for 24 months from the last contact (the last time you submitted a form or an adviser updated your record). When this period expires, the system automatically deletes or anonymises it (removing your name, phone number, email and notes, and keeping only statistics that cannot identify you).
• If you have enrolled on a course or signed a service contract, your records are kept for the term of the contract and for the document retention period required by law (accounting, tax), and are then deleted or anonymised.
• When you withdraw your consent or request deletion, we stop processing and delete/anonymise your data within the time limit stated in section 9, except for data that the law requires us to keep.
• Proof of consent is kept with your record throughout the retention period to demonstrate that the processing is lawful.

8. Automated decision-making

KPV does not use automated systems to make decisions that have legal effects on you or significantly affect you (for example, accepting or rejecting an application). The website carries out only the following automated processing:

• Spam prevention: a hidden honeypot field, a check on how long the form takes to complete, and a limit on the number of submissions within a few minutes from the same network; suspicious submissions may be temporarily blocked. If you are blocked by mistake, you can resubmit after a few minutes or call the hotline.
• Pathway suggestions and quiz results: for reference only; an adviser will discuss them with you to make a realistic assessment.
• Adviser assignment based on the needs/country you select, or on a rotating basis – so that we can contact you sooner.

9. Your rights and how to exercise them

Under the Law on Personal Data Protection No. 91/2025/QH15, you have the right to:

• Be informed about the processing of your personal data.
• Give or withhold consent to the processing of your personal data, and request the withdrawal of consent – including unsubscribing from marketing communications at any time.
• Access and correct your personal data, or request its correction.
• Request the provision or deletion of your personal data or the restriction of its processing; and object to the processing of your personal data (including for advertising purposes).
• Lodge complaints, denunciations or lawsuits, and claim compensation for damage in accordance with the law.
• Request competent authorities or relevant organisations or individuals to take measures to protect your personal data in accordance with the law.

9.1. KPV’s timeframes for handling requests

If more time is needed, KPV may extend the timeframe once only and will inform you of the reason. Timeframes run from when KPV has received a complete request and verified that the requester is the data subject (or their lawful representative).

9.2. How to submit a request

• Email: [email protected] – with the subject line “Personal data request”, stating your full name, registered phone number and the details of your request.
• Hotline: 0866 214 579 or 0867 325 631 (during office hours).
• In person or in writing to our head office: Số 7 đường Nguyễn Du, KP Bình Thành, P. Trấn Biên, TP. Đồng Nai; or our consultation office: 30 Nguyễn Du, P. Trấn Biên, TP. Đồng Nai.
• Unsubscribing from marketing communications: reply to KPV’s message/email with “Unsubscribe” (“Hủy nhận tin”), tell your adviser, or contact us via the channels above.

To protect you, KPV may call your registered phone number to verify your identity before providing or deleting data. Exercising your rights is free of charge. Withdrawing consent does not affect the lawfulness of processing carried out before the withdrawal; if you withdraw the consent given in box 1, KPV will stop contacting you for consultation purposes.

10. Cookies and similar technologies

The website uses only a small number of cookies and browser storage items. The full list (name, set by, purpose, duration) and how to change your choices can be found on the Cookie policy page. In summary:

• On your first visit, the website asks whether you Accept or Reject analytics and advertising cookies. When KPV enables measurement (Google Analytics via Google Tag Manager): if you have not yet chosen or have clicked Reject, Google Analytics does not set cookies in your browser but may still receive cookieless measurement signals; the _ga and _ga_* cookies are set only if you click Accept.
• Your choice is remembered for 12 months in the kpv_consent cookie; you can change it at any time via the “Cookie settings” link at the bottom of the page.
• The kpv_utm cookie (30 days; remembers the traffic source, such as utm, gclid and fbclid, so we know which channel you came from when you submit a form; contains no name or phone number) is set only after you click Accept. Before that, this information is held only in the tab’s session storage (deleted automatically when you close the tab).
• WordPress login cookies apply only to KPV staff when they log in to the admin area; visitors do not receive them.

YouTube videos are embedded in privacy-enhanced mode and load only when you click play; Google Maps loads only when you click to view it. You can delete or block cookies in your browser settings; doing so does not affect your ability to view content or submit a consultation request form.

11. Data security and incident notification

• Connections to the website are encrypted with HTTPS; form data can be accessed only through authorised staff accounts, with a separate account for each person.
• Admin logins are temporarily locked after repeated failed attempts; login logs and activity logs for records (view, export, edit, delete) are kept.
• IP addresses are one-way hashed; internal notification messages partially mask phone numbers; regular backups are made and security patches applied.
• If a personal data breach or loss is detected, KPV will act immediately to limit the damage and notify the specialised personal data protection authority and the affected individuals in accordance with the law – no later than 72 hours after detection in the case of a breach or loss of sensitive data.

No measure is completely secure on the Internet. If you suspect that someone is impersonating KPV to request information or ask for money transfers, please call the hotline 0866 214 579 or 0867 325 631 to verify.

12. Children and persons under 18

Many KPV programmes (foreign languages, study abroad, career guidance) are aimed at school students. The processing of children’s personal data is subject to specific legal provisions on the protection of children’s personal data, including the requirement for consent from a parent or guardian.

• KPV applies one rule to everyone under 18: consent from a parent or legal guardian is required. If you are under 18, please ask your parent/guardian to read this policy and submit the form together with you, or have your parent register on your behalf.
• On learning that a registrant is under 18, the adviser will contact the parent/guardian for confirmation before giving detailed advice or accepting application documents.
• If KPV discovers that it has collected data from a person under 18 without the consent of a parent/guardian, KPV will stop processing and delete that data, unless the parent confirms their consent.

13. Links to other websites

The website contains links to, and embedded content from, Zalo, Facebook, YouTube, TikTok, Google Maps and partner websites. When you visit those sites, data processing is governed by the policies of their operators; KPV does not control and is not responsible for those policies.

14. Changes to this policy

KPV may update this policy when the law or the way we operate changes. The version number and date of update are shown at the top of the page. Changes to the purposes of processing or the types of data will be announced on the website, and KPV will ask for your consent again where the law requires. The consent you ticked is stored together with the version of the text in force at that time.

15. Contact

For any questions, requests or complaints about personal data, please contact KIM PHU VINH INTERNATIONAL COMPANY LIMITED: email [email protected] · hotline 0866 214 579 or 0867 325 631 · head office: Số 7 đường Nguyễn Du, KP Bình Thành, P. Trấn Biên, TP. Đồng Nai.

Personal data protection policy – version 2.0, updated on 21/10/2026. Supersedes the previous version drawn up under Decree 13/2023/NĐ-CP.