Privacy Policy — ARIS Vietnam

1. Our privacy principles

ARIS is committed to protecting personal data entrusted by customers and collected through our website and business activities. We follow these principles: lawful and fair collection, use limited to stated purposes, strong security safeguards, compliance with applicable laws, timely handling of requests/complaints, and continuous improvement of our data protection management system.

2. Scope

This Privacy Policy applies to:

• our website, landing pages, and forms (Contact, Free Consultation 30 minutes, Request Quotation, Request Documents, Collaboration/Partnership),
• communications with prospects, customers, partners, and job applicants,
• personal data processed in service delivery where ARIS acts as a processor/service provider under contract.

3. Information we collect

4. How we use your information (purposes)

We use personal data to:

• respond to inquiries and provide requested information/materials,
• schedule and conduct consultations (e.g., 30-minute free consultation),
• prepare quotations/proposals and conduct pre-sales activities,
• deliver contracted services (development, QA/testing, maintenance & SLA, cloud/DevSecOps, AI/automation, security support),
• manage projects and quality (status reporting, risk/issue management),
• protect security and prevent abuse (fraud, attacks, incident response),
• recruitment (application processing, interview coordination),
• marketing to business contacts (newsletters/events) where permitted by law and/or with consent.

5. Legal basis (where applicable)

We process personal data based on one or more of: your consent, contract performance/pre-contract steps, legal obligations, and legitimate interests (security, service improvement), as permitted by applicable laws.

6. Sharing and disclosure

We do not sell personal data. We may share data with:

• Service providers (hosting, email, CRM, ticketing, analytics) for business operations, under appropriate contracts.
• Group companies/affiliates where necessary for service delivery (e.g., ARIS Japan) and permitted by law/contract.
• Professional advisors (legal, audit) when needed.
• Authorities if required by law.

7. International data transfers

Your data may be stored/processed in Vietnam or other countries depending on infrastructure and service provider locations. Where required, ARIS will apply appropriate safeguards and follow applicable cross-border transfer requirements.

8. Security measures

We implement organizational and technical measures to protect personal data against unauthorized access, leakage, loss, or damage, and take corrective actions if issues are identified.

9. Data retention

We retain personal data only as long as necessary for the purposes described, and as required by law/contract. Typical retention examples:

• Sales inquiries/material requests: [12–36] months from last interaction,
• Contract/project records: per contract and statutory requirements,
• Recruitment: [6–24] months unless you request deletion earlier (where applicable).

10. Your rights

Depending on applicable law, you may request access, correction, deletion, restriction, objection, data portability, or withdrawal of consent. To submit a request, contact: privacy@aris-vn.com. We may verify identity before processing.

11. Cookies and analytics

We use cookies and similar technologies in the categories below. On your first visit a banner lets you accept or decline the optional categories; you can change your choice at any time via “Cookie settings” in the footer or in your browser settings.

• Strictly necessary (always on): language, display theme, security checks (reCAPTCHA) and your cookie choice itself.
• Analytics (optional): Google Analytics 4 cookies (_ga, _ga_*) to measure traffic and page usage, retained for up to 13 months. Without your consent Google Analytics runs in cookieless mode and receives no personal identifiers.
• Marketing (optional): Google Signals, which lets Google link visits across devices and personalise ads. Off unless you enable it.
• Our own servers also log page views, IP address and approximate location for security and service improvement, and we use Ahrefs Web Analytics, which is cookieless. Neither identifies you personally nor is shared with advertisers.

12. Children's data

Our website and services are intended for business audiences. We do not knowingly collect children's personal data.

13. Changes to this policy

We may update this policy periodically. Updates will be posted on our website with the revised "Last updated" date.