Privacy Policy

Effective Date: May 13, 2026Last Updated: May 13, 2026

At Haposoft JSC ("Haposoft," "we," "our," or "us"), we are committed to protecting your privacy and ensuring that your personal information is handled securely, transparently, and responsibly. This Privacy Policy ("Policy") explains how we collect, use, disclose, and safeguard your personal information when you access our website (haposoft.com), software development services, and related solutions (collectively, the "Services").

This Policy applies to all personal information processed by Haposoft JSC, a joint stock company incorporated under the laws of Vietnam, with its registered office in Hanoi, Vietnam.

By accessing or using our Services, you agree to the collection, use, and disclosure of your personal information in accordance with this Policy. We encourage you to read this Policy carefully and contact us at info@haposoft.com if you have any questions.

1. Information We Collect

We collect personal information in the following ways:

1.1 Information You Provide to Us

When you interact with our Services, contact us, request a quote, subscribe to our communications, or engage us for software development services, we may collect:

Identity information: full name, job title, company name
Contact information: email address, phone number, business address
Commercial information: payment information, billing address, tax identification (for invoicing purposes)
Communication content: the contents of messages, inquiries, or documents you send us
Recruitment information: if you apply for a position, we may collect your CV, work history, educational background, and references

1.2 Information Collected Automatically

When you visit our website, we automatically collect:

Technical information: IP address, browser type and version, operating system, device identifiers
Usage information: pages visited, time spent on pages, referral source, clickstream data
Location information: approximate geographic location derived from your IP address

1.3 Information from Third Parties

We may receive information about you from:

Business partners and service providers who refer you to us
Publicly available sources such as LinkedIn or company websites
Analytics providers (e.g., Google Analytics)

2. How We Use Your Information

We use your personal information for the following purposes, based on the legal grounds described in Section 3:

To provide and improve our Services, including responding to inquiries, delivering proposals, and managing client relationships
To communicate with you regarding our Services, including project updates, technical support, invoicing, and customer service
To process payments and issue invoices
To send marketing communications, where you have consented or where permitted by law, including newsletters, service updates, and information about our products
To recruit and evaluate candidates for employment opportunities at Haposoft
To analyze and improve our website, Services, and user experience
To comply with applicable laws and regulations, including tax, accounting, and corporate obligations
To prevent fraud, abuse, or security incidents and to protect our legal rights
For other purposes with your explicit consent

3. Legal Basis for Processing (for EU/EEA Users)

If you are located in the European Economic Area (EEA), United Kingdom, or other jurisdictions with similar data protection laws, we process your personal information on the following legal bases:

Performance of a contract: to deliver Services you have requested or to take steps prior to entering into a contract
Legitimate interests: to operate and improve our business, secure our systems, and conduct B2B marketing, provided these interests are not overridden by your rights
Consent: where you have given explicit consent (e.g., for marketing communications or non-essential cookies)
Legal obligation: to comply with applicable laws and regulatory requirements

You have the right to withdraw consent at any time where processing is based on consent.

We do not sell or rent your personal information to third parties. We share your information only in the following circumstances:

Service providers and partners who assist us in delivering the Services, including cloud hosting providers (e.g., Amazon Web Services), email and communication platforms, payment processors, and analytics providers. These parties are contractually bound to protect your information and process it only on our instructions.
Professional advisors such as lawyers, accountants, and auditors, where necessary for legitimate business purposes
Government authorities and regulatory bodies as required by applicable laws, court orders, or legal processes
Successors or assignees in the event of a merger, acquisition, restructuring, or transfer of our business or assets
Other parties with your consent or at your direction

5. International Data Transfers

Haposoft operates internationally and serves clients in Japan, Germany, Singapore, Hong Kong, and other jurisdictions. As a result, your personal information may be transferred to, stored in, or processed in countries outside your country of residence, including Vietnam and Japan.

These countries may have data protection laws that differ from those in your jurisdiction. When we transfer personal information across borders, we implement appropriate safeguards, including:

Standard Contractual Clauses (SCCs) approved by the European Commission for transfers from the EEA
Contractual protections with our partners and service providers
Compliance with cross-border transfer requirements under Vietnam's Decree 13/2023/ND-CP on Personal Data Protection and Japan's Act on the Protection of Personal Information (APPI)

6. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes for which it was collected, including:

Client and contract data: retained for the duration of our business relationship and for up to 10 years thereafter, as required by Vietnamese accounting and tax law
Marketing contacts: retained until you unsubscribe or request deletion
Recruitment data: retained for up to 60 months after the conclusion of the recruitment process, unless you consent to longer retention
Website analytics data: retained for up to 26 months
Legal and compliance records: retained as required by applicable law

When personal information is no longer needed, we will securely delete or anonymize it.

7. Your Rights

Depending on your location, you may have the following rights regarding your personal information:

Right to access: request a copy of the personal information we hold about you
Right to rectification: request correction of inaccurate or incomplete information
Right to erasure: request deletion of your personal information, subject to legal exceptions
Right to restrict processing: request that we limit how we use your information
Right to data portability: receive your information in a structured, machine-readable format
Right to object: object to processing based on legitimate interests or for direct marketing purposes
Right to withdraw consent: withdraw any consent you have previously given, without affecting the lawfulness of prior processing
Right to lodge a complaint with a supervisory authority in your jurisdiction

To exercise any of these rights, please contact us at info@haposoft.com. We will respond to your request within 30 days, or as required by applicable law. We may need to verify your identity before fulfilling your request.

8. How We Secure Your Information

Haposoft is certified to ISO/IEC 27001 (Information Security Management) and ISO 9001 (Quality Management), reflecting our commitment to information security and operational excellence.

We implement appropriate technical, physical, and administrative safeguards to protect your personal information from unauthorized access, use, disclosure, alteration, or destruction. These measures include:

Encryption of data in transit and at rest, where appropriate
Access controls and authentication mechanisms
Regular security assessments and audits
Employee training on data protection and confidentiality
Incident response procedures

While we strive to protect your personal information, no method of transmission or storage is 100% secure. In the event of a data breach that affects your personal information, we will notify you and the relevant authorities as required by applicable law, including within 72 hours where required by GDPR.

9. Cookies and Similar Technologies

Our website uses cookies and similar tracking technologies to enhance your experience, analyze usage, and support our marketing efforts. We use the following categories of cookies:

Essential cookies: required for the website to function properly
Analytics cookies: help us understand how visitors use our website (e.g., Google Analytics)
Marketing cookies: used to deliver relevant content and measure the effectiveness of our campaigns

You can control or disable cookies through your browser settings or our cookie consent banner. Please note that disabling certain cookies may affect the functionality of our website.

10. Links to Third-Party Websites

Our Services and website may contain links to websites operated by third parties, including social media platforms (e.g., LinkedIn, Facebook). We are not responsible for the privacy practices of these third parties. We encourage you to review their privacy policies before providing any personal information.

11. Children's Privacy

Our Services are intended for business users and are not directed at children under the age of 16. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us at info@haposoft.com, and we will take steps to delete such information.

12. Changes to This Policy

We may update this Policy from time to time to reflect changes in our practices, technologies, legal requirements, or business operations. When we make material changes, we will notify you by updating the "Last Updated" date at the top of this Policy and, where appropriate, through additional notice (such as a banner on our website or an email). Your continued use of our Services after any changes constitutes your acceptance of the updated Policy.

13. Governing Law

This Policy is governed by the laws of the Socialist Republic of Vietnam, including Decree 13/2023/ND-CP on Personal Data Protection, without prejudice to mandatory data protection rights you may have under the laws of your country of residence.

14. Contact Us

If you have any questions, concerns, or requests regarding this Policy or our handling of your personal information, please contact us:

Company: Haposoft JSC

Email: info@haposoft.com

Website: haposoft.com

Address: 6th Floor, NHS Complex Office, To Huu Street, Dai Mo Ward, Hanoi, Vietnam

Thank you for trusting Haposoft with your information. We are committed to handling it with the care and professionalism you expect from a certified partner.