Privacy Policy

1. Introduction

Ngọc Luật ("we", "us", "our") is committed to handling personal data with care and transparency. This Privacy Policy explains what information we collect, how we use it, who we share it with, and what rights you have regarding your personal data. This policy applies to all individuals who contact us, use our website, or engage our services.

Our office is located at 15 Hàng Trống, Hoàn Kiếm District, Hanoi 100000, Vietnam. For privacy-related enquiries, contact us at [email protected].

2. Data We Collect

We may collect the following categories of personal data:

• Contact information: name, email address, phone number
• Business information: company name, role, industry
• Matter-related information: details you share when describing a legal matter
• Website usage data: pages visited, browser type, device type (via cookies, where consented)
• Communication records: correspondence with our office

We collect data through: our website contact form, direct email or telephone contact, in-person meetings, and documents you provide in connection with an engagement.

3. How We Use Your Data

We use personal data for the following purposes:

• Responding to enquiries and scheduling consultations
• Providing legal services in connection with a client engagement
• Maintaining records required by Vietnamese professional rules
• Sending relevant regulatory or practice updates to retainer clients
• Improving our website and understanding how it is used

Legal basis for processing (in accordance with Vietnamese law and applicable international standards): performance of contract or pre-contractual steps; compliance with legal obligations; and legitimate interests — where we have assessed that our interests do not override your rights.

4. Data Retention

We retain client matter records for a minimum of 10 years following the conclusion of an engagement, as required by Vietnamese professional regulations. Enquiry records from individuals who do not become clients are retained for 12 months before deletion. Website usage data collected through analytics cookies is retained according to the applicable third-party provider's settings, typically 14–26 months.

5. Data Sharing

We do not sell personal data. We may share data in the following limited circumstances:

• With government authorities, courts, or registries where required by your matter or by law
• With service providers who assist our operations (e.g., email hosting, document management) under confidentiality agreements
• Where required by Vietnamese law or a valid legal process

6. Security Measures

We protect personal data through access controls limiting file access to authorised staff, encrypted storage and email transmission for sensitive documents, regular internal review of data handling practices, and a policy of minimal data collection — we do not retain more than is needed for the purpose stated.

7. Cookies

Our website uses cookies. Essential cookies are required for basic site operation. Optional analytics and preference cookies are only placed with your consent. For full details on the cookies we use, see our Cookie Policy.

8. Your Rights

Under Vietnamese data protection law and applicable international standards, you have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of data, subject to our legal retention obligations
• Object to processing based on legitimate interests
• Withdraw consent for optional data uses (e.g., analytics cookies)
• Receive a copy of your data in a portable format
• Lodge a complaint with the Ministry of Public Security (Vietnam) or the relevant data protection authority in your jurisdiction

To exercise your rights, contact us at [email protected]. We will respond within 30 days.

9. Third-Party Links

Our website may contain links to external websites. We are not responsible for the privacy practices of those sites and encourage you to review their policies independently.

10. Children's Privacy

Our services are directed to adults (18 years and over). We do not knowingly collect personal data from minors. If you believe we have received data from someone under 18, contact us and we will delete it promptly.

11. Changes to This Policy

We may update this policy from time to time. The updated version will be posted on this page with a revised "Last Updated" date. We will notify active clients of material changes by email.

12. Contact