Privacy Policy
How iPlus Solution collects, uses, and protects personal data of customers, partners, employees, and website visitors.
Introduction
iPlus Solution Co., Ltd. ("iPlus", "we", "our") is committed to protecting the privacy of every individual who interacts with our services or website. This Privacy Policy explains what personal data we collect, why we collect it, how we use it, and the rights you have over that data.
This policy applies to visitors of iplus.com.vn, our clients and prospective clients, business partners, current and former employees, and job applicants. If you have a separate signed agreement with us that addresses data processing, that agreement governs in case of conflict.
Information we collect
Depending on how you interact with us, we may collect the following categories of personal data:
- Identity data — full name, job title, company name.
- Contact data — email address, telephone number, country, business address.
- Technical data — IP address, browser type and version, device identifiers, operating system.
- Usage data — pages visited, time on page, navigation paths, referral source.
- Marketing preferences — newsletter subscription status, content preferences, communication consent.
We do not knowingly collect sensitive personal data (race, religion, health, biometric) through our website. If such data is required for a specific engagement, we will request explicit written consent.
How we collect it
We collect personal data in three ways:
Direct from you
When you fill out a contact or quote form, subscribe to our newsletter, apply for a job, sign a contract, or correspond with us by email or phone.
Automatically
Our website servers and analytics tools collect technical and usage data automatically through cookies, server logs, and similar technologies. See section 6 for cookie details.
From third parties
We may receive personal data from referral sources, business partners, recruitment platforms, or publicly available business directories.
How we use your information
We use the personal data we collect for the following purposes:
- To respond to inquiries, prepare quotations, and deliver the services you request.
- To perform our contractual obligations under signed MSAs, SOWs, and labo agreements.
- To send marketing communications about our services where you have opted in, with the option to unsubscribe at any time.
- To evaluate and process job applications, including for record-keeping after an unsuccessful application.
- To comply with legal, regulatory, and tax obligations under applicable Vietnamese and Japanese law.
- To analyze website usage in aggregate, improve content quality, and prevent fraud or abuse.
Lawful basis for processing
We process personal data only when we have a lawful basis to do so. Depending on jurisdiction (Vietnam Decree 13/2023/NĐ-CP on Personal Data Protection or Japan's Act on the Protection of Personal Information / APPI), one or more of the following bases applies:
- Your consent — for marketing communications and optional cookies.
- Performance of a contract — for service delivery and account management.
- Legitimate interests — for security, fraud prevention, and aggregate analytics, balanced against your rights.
- Legal obligation — for tax records, labor regulations, and lawful disclosure requirements.
International data transfers
Our primary infrastructure is located in Singapore (DigitalOcean, Cloudways) with content delivery via Cloudflare's global network. Personal data may be transferred between Vietnam and Japan in the course of providing services to clients in either country.
When we transfer personal data internationally, we apply appropriate safeguards including encryption in transit (TLS 1.2+), contractual data processing clauses with recipients, and limitation of access to personnel with a legitimate need to know.
Data retention
We keep personal data only as long as necessary for the purposes for which it was collected, or as required by law:
| Category | Period | Trigger for deletion |
|---|---|---|
| Inquiry & contact form data | 24 months | No further communication |
| Newsletter subscriptions | Until withdrawn | Unsubscribe action |
| Project & client data | SOW term + 5 years | Statutory retention period |
| Recruitment applications | 12 months | Unsuccessful application + 12 months |
| Server logs | 90 days | Rolling deletion |
Your rights
Subject to applicable law, you have the following rights regarding your personal data:
- Right of access — request a copy of the personal data we hold about you.
- Right to rectification — ask us to correct inaccurate or incomplete data.
- Right to erasure — request deletion when the data is no longer necessary.
- Right to portability — receive your data in a structured, machine-readable format.
- Right to restriction — ask us to limit how we use your data.
- Right to object — object to processing based on legitimate interests or for direct marketing.
- Right to withdraw consent — at any time, where processing is based on consent.
To exercise any of these rights, contact us via the channels in section 12. You also have the right to lodge a complaint with the relevant supervisory authority — the Ministry of Public Security (MIC, Vietnam) or the Personal Information Protection Commission (PPC, Japan).
Security measures
We apply industry-standard safeguards to protect personal data. These include TLS 1.2 or higher encryption for data in transit, role-based access controls and least-privilege principles for our internal systems, mandatory confidentiality agreements and security training for all personnel, and due-diligence assessments of vendors and sub-processors.
In the event of a personal data breach that is likely to result in risk to your rights, we will notify the relevant supervisory authority within 72 hours where required by law, and notify affected individuals without undue delay.
No method of online data transfer or storage is completely secure. While we strive to apply commercially acceptable safeguards, we cannot guarantee absolute security.
Updates and contact
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or business operations. We will indicate the "Last updated" date at the top of this page. For material changes, we will provide additional notice (such as an email to subscribers) where appropriate.
For questions about this Privacy Policy, to exercise your rights, or to report a concern, please contact our compliance team via our contact page or by writing to [email protected].
Have a question about this policy?
Reach our compliance team — we typically reply within 1 business day.
This document is provided for informational purposes only and does not constitute legal advice. For binding terms applicable to your engagement, please refer to your signed MSA/SOW with iPlus Solution.