Privacy Policy

Version 2026-10-23. This policy covers lamhongmedia.site: the pages, the contact and quote forms, the chat, and the optional account with social sign-in. It follows Vietnam's Decree 13/2023/ND-CP on personal data protection and the basic principles of the EU GDPR.

Who is responsible

LAM HONG Media, legal name CÔNG TY CỔ PHẦN TRUYỀN THÔNG VÀ ĐẦU TƯ THƯƠNG MẠI LAM HỒNG (LAM HONG Media Investment Joint Stock Company). Office: 12 Nguyễn Văn Mai, Tân Bình, Ho Chi Minh City, Vietnam. Email: info@lamhongmedia.com. Hotline: +84 919 196 690.

• Tax code: [TODO: tax code, to be supplied by the company]
• Registered address, if different from the office: [TODO: registered address]
• Person responsible for personal data protection: [TODO: name and role]

What we collect

• Social sign-in (only if you choose it): the provider (Google, Facebook or Zalo), your account ID at that provider, your name, email address, profile picture link, and whether the provider verified the email. We never receive your password.
• Your account: the policy version you accepted and when, sign-in sessions (created, last used, expiry) and the requests you send through the account page.
• Contact and quote forms: name, email, phone (optional), message, page language and page address.
• Chat: a question the scripted chat cannot answer, with its language and page. The chat never asks for your name.
• Security: a salted one-way hash of your IP address for rate limits and abuse review. We do not store the raw IP. Our hosting provider keeps its own server logs under its policy.

We do not use analytics, advertising or tracking tools. We do not buy data and we do not sell yours.

Why we use it

• To create and run your account, with your consent (Decree 13, Art. 11; GDPR Art. 6(1)(a)).
• To answer enquiries and prepare quotes you ask for (steps before a contract; GDPR Art. 6(1)(b)).
• To improve the chat script, keep the site secure and prevent abuse (legitimate interest; GDPR Art. 6(1)(f)).
• To meet legal obligations when Vietnamese law requires it.

How long we keep it

• Account data: until you delete the account. A pending sign-in that was not accepted is discarded after 15 minutes.
• Sessions: 30 days at most. Sign-out ends a session at once.
• Chat questions: 6 months.
• Security log: 12 months, without your user ID after the account is deleted.
• Form enquiries and account requests: as long as needed to reply and follow up, and deleted when you ask.

Where it is stored and who receives it

Data is stored in a database on the server of our hosting provider (Hostinger), outside the public web folder. Server location: [TODO: hosting data-centre region; if outside Vietnam, this is a cross-border transfer under Decree 13]. Our team reads enquiries to reply. Google, Facebook and Zalo process your sign-in under their own privacy policies. We share data with authorities only when the law requires it.

Your rights

You may access, export, correct or delete your data, withdraw consent, object to processing, and complain to a supervisory authority: in Vietnam, the Department of Cybersecurity and High-Tech Crime Prevention (A05), Ministry of Public Security; in the EU, your local data protection authority.

• Export: the account page has a "Download my data" button (JSON).
• Delete: the account page has a "Delete my account" button. It removes your profile, sign-in identities, sessions, consents and requests at once.
• Anything else: write to info@lamhongmedia.com. We reply within 72 hours where Decree 13 requires it, and in any case within one month.

Withdrawing consent does not affect processing that already took place.

Security

The site is served over HTTPS. Session cookies are Secure, HttpOnly and SameSite. Only a hash of each session token is stored. Forms and account actions are protected against cross-site requests, and requests are rate limited. The database sits outside the public web folder. If a breach affects personal data, we notify the authority within 72 hours as Decree 13 requires, and inform the people affected.

Children

The account is not intended for anyone under 16. Do not sign in if you are under 16.

Cookies

See the Cookie notice. We use strictly necessary cookies only.

Changes

Each version has a date. When the policy changes, you are asked to accept the new version the next time you sign in.