In short
- This website has no forms, no analytics and sets no cookies.
- We only receive personal data when you email us or become a client.
- We never sell your data or use it for advertising.
- You can ask us to access, correct or delete your data at any time.
01Who we are
Minh The Software is a sole proprietorship registered in Vietnam (tax code 8506666511-001). We design and build websites, web applications and related software for businesses. In this policy, “we”, “us” and “our” refer to Minh The Software.
For personal data described in this policy, we decide why and how it is processed, which makes us the data controller under the EU General Data Protection Regulation (GDPR) and the party responsible for processing under Vietnam’s personal data protection law.
02Scope
This policy applies to:
- visitors to this website;
- people who contact us by email or other channels; and
- contacts at our clients, prospective clients and suppliers.
It does not cover personal data we process on behalf of a client inside software we build or operate for them — for example, the end users of a client’s booking system. In that case the client is the controller, we act as their processor, and the processing is governed by our agreement with that client and the client’s own privacy notice.
Our product Fotocaja may be subject to separate terms and privacy information presented within that product.
03Data we collect
When you visit this website
The website itself does not ask you for any information, does not use analytics or advertising tools, and does not set cookies. Like any website, the server that delivers it may automatically record standard technical data in its logs — your IP address, the date and time of the request, the page requested, and your browser and device type.
The website loads fonts from Google Fonts, which means your browser connects to Google’s servers and Google receives your IP address and browser information. See our Cookie Policy for details.
When you contact us
If you email us, we receive your name, email address and anything you choose to include in your message — such as your company, role, phone number and project details.
When you become a client
To deliver a project and run our business we process contact details of your team, billing and invoicing details (company name, address, tax code), contract records, and project communications. We may also receive access credentials to your systems, which we treat as confidential and use only to perform the work.
We do not intentionally collect sensitive personal data (such as health, political or biometric data). Please do not send it to us unless a project specifically requires it and we have agreed how it will be handled.
04How we use it
| Purpose | Data used | Legal basis |
|---|---|---|
| Replying to enquiries and preparing proposals | Contact details, message content | Your request / steps before entering a contract; your consent |
| Delivering projects and support | Client contact details, project communications, access credentials | Performance of a contract |
| Invoicing, accounting and tax | Billing details, contract and payment records | Legal obligation |
| Keeping the website secure and working | Server log data | Legitimate interests (security and reliability) |
| Handling disputes and legal claims | Relevant records | Legal obligation; legitimate interests |
We do not sell personal data, use it for advertising, or make decisions about you based solely on automated processing.
06International transfers
We are based in Vietnam and work with clients in other countries, including in the European Union. Some of our service providers store data on servers outside Vietnam. As a result, your data may be transferred to and processed in countries other than your own.
When we transfer personal data across borders we comply with the requirements of Vietnamese law on cross-border transfers. Where the GDPR applies, we rely on an adequacy decision or appropriate safeguards such as the European Commission’s Standard Contractual Clauses.
07Retention
- Enquiries that do not lead to a project: up to 24 months after our last contact, then deleted.
- Client and project records: for the duration of our relationship and for as long as needed afterwards to handle support, warranty or legal claims.
- Invoices and accounting records: for the period required by Vietnamese accounting and tax law.
- Access credentials: deleted or returned when the work that required them is finished.
- Server logs: kept only as long as our hosting provider retains them for security and operational purposes.
08Security
We use technical and organisational measures appropriate to the risk, including encrypted connections (HTTPS), access limited to people who need it, multi-factor authentication on our accounts, and secure storage of credentials. No method of transmission or storage is completely secure, but we work to protect your data and will notify you and the relevant authorities of a personal data breach where the law requires.
09Your rights
Depending on where you live, you have rights over your personal data, including the right to:
- be informed about how your data is processed;
- access a copy of your data;
- correct inaccurate or incomplete data;
- have your data deleted;
- restrict or object to processing;
- receive your data in a portable format;
- withdraw consent at any time, where processing is based on consent — this does not affect processing that already took place; and
- complain to a data protection authority. In Vietnam this is the authority designated under personal data protection law; in the EU it is the supervisory authority in the country where you live or work.
To exercise any of these rights, email ryan@minhthe.net. We may need to verify your identity before acting on a request. We will respond within the time required by applicable law, and in any case within one month. Some rights are limited where we must keep data to meet a legal obligation.
10Children
Our website and services are intended for businesses and are not directed at children. We do not knowingly collect personal data from anyone under 16. If you believe a child has sent us personal data, please contact us and we will delete it.
11Changes to this policy
We may update this policy when our practices or the law change. The “Last updated” date at the top shows when it was last revised. If we make significant changes that affect our clients, we will let them know directly.
12Contact
For any question about this policy or your personal data, contact us: