Personal Data Privacy Policy

Article 1. Scope

1. This Policy sets out how FC Legal Law Company Limited (“FC Legal”, “we”, “us”) collects, uses, stores, shares and protects the personal data of visitors to and users of the website spclegal.vn (“users”, “you”).
2. This Policy applies to data collected through the website, online forms, email, the hotline, Zalo and other contact channels linked from the website.
3. Data arising when FC Legal provides legal services under a contract is processed in accordance with that contract, this Policy and the lawyer’s duty of professional confidentiality.
4. This Policy is made in accordance with the Law on Personal Data Protection No. 91/2025/QH15, Decree No. 356/2025/ND-CP, the Law on Lawyers and other relevant laws.

Article 2. Data controller and processor

1. Personal data controller and processor: FC Legal Law Company Limited.
2. Contact point for personal data requests: email fclegal159@gmail.com; hotline +84 879 230 727; website spclegal.vn.

Article 3. Personal data we collect

1. Data you provide: full name, phone number, email address, company name, job title, the content of your question or request for advice, and booking information.
2. Data collected automatically when you visit the website: IP address, device and browser type, pages viewed, time of visit, traffic source, and cookies (see Article 9).
3. Sensitive data: the website does not request and does not actively collect sensitive personal data. Please do not send identity documents, health information, bank account details or case documents through the forms on the website. If such information is needed for the advice, the lawyer will tell you a secure channel for sending it after discussing your matter with you.
4. If you provide data about other people (for example employees, business partners or parties involved in a matter), you confirm that you have a lawful basis for providing it and you are responsible for providing it.

Article 4. Purposes of processing

Personal data is processed only for the following purposes:

1. Responding to questions, arranging consultations, and sending quotations and service proposals.
2. Entering into, performing, handling payment under and managing legal services contracts.
3. Checking for conflicts of interest under the rules of professional conduct for lawyers before accepting a matter.
4. Sending documents, newsletters and legal information that you have signed up to receive.
5. Compiling statistics on and analysing website traffic to improve the website’s content and user experience.
6. Keeping our systems secure and preventing fraud, spam and cyberattacks.
7. Complying with legal obligations and lawful requests from competent state authorities.

If we need to process data for any other purpose, we will notify you and ask for your consent, except where the law permits processing without consent.

Article 5. Legal basis for processing and consent

1. FC Legal processes data on one of the following bases: (a) your consent; (b) performance of a contract or agreement between you and FC Legal; (c) compliance with legal obligations; (d) other cases permitted by law.
2. Consent must be given clearly, for example by ticking a confirmation box or clicking the submit button after being informed of this Policy. Silence or a lack of response is not treated as consent.
3. You may give consent in part (for example, agreeing to be contacted but not to receive the newsletter) and may withdraw your consent at any time under Article 12. Withdrawal does not affect the lawfulness of processing carried out before it.
4. If you do not consent, or withdraw your consent, to the processing of necessary data, FC Legal may be unable to contact you or provide services to you.

Article 6. Lawyers’ professional confidentiality

1. Information you share with FC Legal lawyers to obtain advice is kept confidential under the Law on Lawyers and the Code of Ethics and Professional Conduct for Vietnamese Lawyers, even if the two parties have not yet signed a contract, unless you consent or the law provides otherwise.
2. Sending information through the website does not automatically create a lawyer–client relationship (see the Website Terms of Use).

Article 7. Data sharing

1. FC Legal does not buy, sell or rent out personal data.
2. Data is shared only to the extent necessary with:
   1. Providers of operational support services: the website design and operation provider, server hosting, email, web analytics (Google Analytics) and messaging (Zalo). These parties process data only on FC Legal’s instructions.
   2. Third parties involved in handling a matter, with your consent or under the services contract (for example bailiffs (thừa phát lại), expert assessment organisations and registration authorities).
   3. Competent state authorities, when they make a lawful request under the law.
3. Some providers (such as Google) may store data on servers located outside Vietnam. FC Legal uses only providers with appropriate confidentiality commitments and, where applicable, carries out the related procedures under the rules on transferring personal data abroad.

Article 8. Storage and retention period

1. Personal data is stored for as long as necessary to fulfil the purposes in Article 4 and for the periods required by law (including the rules on personal data protection, lawyers, accounting and tax).
2. Data provided to sign up for newsletters and documents is kept until you unsubscribe or withdraw your consent.
3. At the end of the retention period, data is deleted or destroyed so that it cannot be recovered, unless the law requires it to be kept longer or the data is needed to resolve an ongoing dispute.

Article 9. Cookies and analytics tools

1. The website uses cookies to remember your preferences, keep the website running reliably and count visits through Google Analytics.
2. Analytics cookies are not used to identify you personally.
3. How to turn off cookies: you can block or delete cookies under Settings → Privacy in your browser, or install Google’s Google Analytics opt-out add-on. Some website features may not work fully if cookies are turned off.

Article 10. Data protection measures

1. FC Legal applies appropriate management and technical measures: encrypted connections (HTTPS), access rights granted on a need-to-know basis, confidentiality undertakings from staff, backups, and system access controls.
2. No system for transmitting or storing data over the Internet is completely secure. To the extent permitted by law, FC Legal is not responsible for risks beyond its reasonable control, including faults in users’ devices, networks or accounts.
3. If a data breach occurs, FC Legal will remedy it, notify the specialised personal data protection authority no later than 72 hours after discovering it, as required by law, and notify affected users where the law requires.

Article 11. Children’s personal data

FC Legal’s services are intended for businesses and adults. We do not actively collect data of persons under 16 years of age through the website. Where children’s data needs to be processed in a matter, FC Legal does so in accordance with the specific rules of law and with the consent of the child’s legal representative.

Article 12. Your rights and how to exercise them

1. You have the rights provided by the Law on Personal Data Protection: to be informed about processing; to give or withdraw consent; to view and correct your data; to request deletion or restriction of processing; to object to processing for advertising and marketing purposes; and to make complaints and denunciations, bring lawsuits and claim compensation in accordance with the law.
2. How to make a request: send an email to fclegal159@gmail.com with the subject line “YÊU CẦU VỀ DỮ LIỆU CÁ NHÂN” (Personal data request), stating: (a) your full name and the phone number/email address you provided; (b) your request (view, correct, delete, withdraw consent, unsubscribe from the newsletter, etc.); (c) the information to be corrected (if any).
3. Verification: to protect you, FC Legal may verify your identity through the phone number or email address you provided before handling the request.
4. Time limits for handling a request (from receipt of a complete and valid request, under Decree No. 356/2025/ND-CP):

   Request	Time limit	If coordination with a third party is needed
   View or correct data	10 days	15 days
   Withdraw consent	15 days	20 days
   Delete data	20 days	30 days

5. Unsubscribing from the newsletter: click the “Hủy đăng ký” (Unsubscribe) link in the email, or reply to the email with the word “HỦY” (Cancel).
6. FC Legal may refuse or restrict a request in cases provided by law (for example, data that must be kept to meet accounting or tax obligations or to resolve a dispute) and will state the reasons.

Article 13. User responsibilities

1. Provide truthful and accurate information, and update it when it changes.
2. Do not provide other people’s data without a lawful basis.
3. Protect your own devices, email and messaging accounts; notify FC Legal immediately if you notice signs that someone is impersonating FC Legal to collect information or to request money transfers.

Article 14. Amendments to this Policy and contact

1. FC Legal may update this Policy to reflect legal requirements and actual operations. A new version takes effect from the date it is posted and clearly states its version number and effective date. Changes that introduce a new processing purpose will be notified, and consent will be requested again where the law requires.
2. For any questions about this Policy, please contact: FC Legal Law Company Limited · Email: fclegal159@gmail.com · Hotline: +84 879 230 727 · Website: spclegal.vn.