Privacy Policy — ARIS Vietnam

1. Our privacy principles

ARIS is committed to protecting personal data entrusted by customers and collected through our website and business activities. We follow these principles: lawful and fair collection, use limited to stated purposes, strong security safeguards, compliance with applicable laws, timely handling of requests/complaints, and continuous improvement of our data protection management system.

2. Scope

This Privacy Policy applies to:

• our website, landing pages, and forms (Contact, Free Consultation 30 minutes, Request Quotation, Request Documents, Collaboration/Partnership),
• communications with prospects, customers, partners, and job applicants,
• personal data processed in service delivery where ARIS acts as a processor/service provider under contract.

3. Information we collect

4. How we use your information (purposes)

We use personal data to:

• respond to inquiries and provide requested information/materials,
• schedule and conduct consultations (e.g., 30-minute free consultation),
• prepare quotations/proposals and conduct pre-sales activities,
• deliver contracted services (development, QA/testing, maintenance & SLA, cloud/DevSecOps, AI/automation, security support),
• manage projects and quality (status reporting, risk/issue management),
• protect security and prevent abuse (fraud, attacks, incident response),
• recruitment (application processing, interview coordination),
• marketing to business contacts (newsletters/events) where permitted by law and/or with consent.

5. Legal basis (where applicable)

We process personal data based on one or more of: your consent, contract performance/pre-contract steps, legal obligations, and legitimate interests (security, service improvement), as permitted by applicable laws.

6. Sharing and disclosure

We do not sell personal data. We may share data with:

• Service providers (hosting, email, CRM, ticketing, analytics) for business operations, under appropriate contracts.
• Group companies/affiliates where necessary for service delivery (e.g., ARIS Japan) and permitted by law/contract.
• Professional advisors (legal, audit) when needed.
• Authorities if required by law.

7. International data transfers

Your data may be stored/processed in Vietnam or other countries depending on infrastructure and service provider locations. Where required, ARIS will apply appropriate safeguards and follow applicable cross-border transfer requirements.

8. Security measures

We implement organizational and technical measures to protect personal data against unauthorized access, leakage, loss, or damage, and take corrective actions if issues are identified.

9. Data retention

We retain personal data only as long as necessary for the purposes described, and as required by law/contract. Typical retention examples:

• Sales inquiries/material requests: [12–36] months from last interaction,
• Contract/project records: per contract and statutory requirements,
• Recruitment: [6–24] months unless you request deletion earlier (where applicable).

10. Your rights

Depending on applicable law, you may request access, correction, deletion, restriction, objection, data portability, or withdrawal of consent. To submit a request, contact: privacy@aris-vn.com. We may verify identity before processing.

11. Cookies and analytics

We use cookies to operate the website, remember preferences, and measure performance. You can manage cookies via browser settings or our cookie banner (if implemented).

12. Children's data

Our website and services are intended for business audiences. We do not knowingly collect children's personal data.

13. Changes to this policy

We may update this policy periodically. Updates will be posted on our website with the revised "Last updated" date.