Welcome to the interactive consultation system of Enviapac Research & Consulting Co., Ltd. (“Enviapac,” “we,” or “us”). We are committed to respecting your privacy and protecting users’ personal data in accordance with Vietnamese law. In our capacity as a Personal Data Controller and Processor, we issue this Policy to explain transparently how personal data is collected, used, stored, and protected when you access and interact with our website.

1. Types of Personal Data Collected

We collect personal data through the following two methods:

• Data voluntarily provided by you through forms:
  • Full name;
  • Email address and contact telephone number;
  • Name of agency, organization, or company; department; job title or position;
  • Field of operation and contact address;
  • Content of inquiries, messages, or specific consultation requests.
• Technical data collected automatically through cookies:
• Information about your device, browser type, IP address, and basic interaction history or browsing behavior on the website.

2. Purposes of Data Processing

Personal data is processed solely for the following lawful purposes:

• Receiving and verifying information, and contacting you to respond to inquiries and consultation requests;
• Conducting a preliminary assessment of your needs in order to provide relevant materials, company credentials, and proposals for suitable service solutions;
• Optimizing the user experience, maintaining technical security, and preventing fraud or cyberattacks on the website;
• Sending periodic newsletters on specialized legal policies and standards relating to the environment, chemicals, energy, climate change, occupational health and safety, and fire prevention and firefighting. Such communications will be sent only with your explicit consent.

3. Security Measures and Relevant Third Parties

• Internal protection measures: Data submitted through forms is securely stored on the website’s administrative server and protected by SSL/TLS encryption, firewalls, and strict access-control mechanisms. Only authorized personnel may access the data for the purposes described in Section 2.
• Third-party security and analytics tools:
  • Google reCAPTCHA: Integrated into forms to distinguish human users from automated software and spam.
  • Google Analytics 4 (GA4): Uses cookies, including the _ga cookie, to collect anonymized data for performance measurement and website improvement.
  • Use of these tools is subject to Google LLC’s Terms of Service and Privacy Policy.
• Commitment: Enviapac does not sell, exchange, or transfer your personal data to any third party for commercial purposes.

4. Data Retention Period

Personal data will be retained only for as long as necessary to receive, respond to, and process your requests. It will then be deleted, destroyed, or anonymized when it is no longer required for those purposes, unless applicable law or a lawful agreement with you requires a longer retention period.

5. Rights and Obligations of Users

• Rights of data subjects: You have rights concerning your personal data under applicable law, including the rights to be informed about data processing; to give or withdraw consent; to request information about personal data processed by Enviapac; to request correction or deletion; to restrict or object to processing; and to exercise other statutory rights.
• User obligations: You are responsible for protecting your personal data, respecting the personal data of others, and ensuring that information submitted through the website is accurate and truthful.

6. Transitional and Applicable Provisions

• This Policy applies uniformly to all interactions with, and data submissions through, Enviapac’s website.
• If you and Enviapac enter into a Consulting Services Contract, the collection, processing, and protection of personal data arising throughout the performance of the services will comply with applicable personal data protection laws and the confidentiality provisions of that contract, taking into account the nature of the services and the scope of the data processed. In the event of any inconsistency, mandatory personal data protection laws will prevail.

7. Policy Updates and Contact Information

This Policy may be amended to reflect legal or technical changes. The date of the latest update will always be displayed at the top of the page.

For requests concerning the exercise of data-subject rights or complaints relating to information security, please contact:

• Contact: Enviapac Research & Consulting Co., Ltd.
• Email: contact@enviapac.com
• Hotline: (+84) 24 8586 2368