Policy Privacy

1. Scope and applicability

This policy applies to the processing of personal data of existing clients, prospective clients, suppliers, and other third parties (hereinafter collectively referred to as "Clients") through HM&P’s online transaction channels, including its website, email, and other digital platforms.

2. Definitions

• “Personal Data”: Information in the form of symbols, text, numbers, images, audio, or similar formats in an electronic environment associated with or identifying a specific individual. Personal data includes both basic personal data and sensitive personal data.
• “Basic Personal Data”: Includes name, date of birth, gender, address, phone number, email, account information, personal image, marital status, information about family relationships, and other basic personal data as prescribed by Vietnamese law.
• “Sensitive Personal Data”: Personal data linked to an individual's privacy that, if compromised, could directly affect their rights and lawful interests. This includes political opinions, health status, racial or ethnic origin, physical attributes, biometric data, sexual orientation, criminal records, geolocation data obtained through location services, and other types of sensitive personal data as prescribed by Vietnamese law.
• “Company” or “We”: Refers to HM&P Law Firm.
• “Third Party”: Refers to organizations or individuals other than the Company and the Data subject.

3. Clients’ rights regarding personal data

Clients have the following rights: (i) Right to be informed; (ii) Right to consent; (iii) Right to access; (iv) Right to withdraw consent; (v) Right to erasure; (vi) Right to restrict processing; (vii) Right to data portability; (viii) Right to object to data processing; (ix) Right to file complaints, denunciations, and lawsuits; (x) Right to claim damages; (xi) Right to self-protection and other related rights as provided by law. The interpretation and exercise of these rights shall be in accordance with personal data laws.

Clients may exercise their rights by contacting the Company using the contact details provided in Article 13 of this Policy. Clients acknowledge and agree not to exercise any rights in a manner that may cause harm, affect, or potentially lead to harm/impact on the Company’s activities or lawful interests.

The Company will only fulfill Clients’ requests within the timeframes prescribed by law when such requests are lawful, complete, valid, and upon the Client’s payment of related processing fees (if any). We reserve the right to apply any exemptions and/or exceptions as permitted by law when processing Client requests.

If a Client withdraws their consent for data processing, requests data deletion, or exercises other rights related to personal data, we may consider discontinuing service provision if quality cannot be ensured or if data collection is legally required. This may affect the legal validity of contracts and agreements between the Client and the Company and could result in costs or damages for the Client or third parties. We will continue to use personal data within the scope permitted by law or as per any remaining Client requests (if applicable).

4. Methods of personal data collection

HM&P collects personal data through the following means:

• From HM&P’s website: Personal data is collected when Clients fill out forms on the HM&P website;
• Through service provision and contractual obligations: Personal data is collected when Clients use legal services or enter into contracts with HM&P;
• From interactions and communications with Clients: Personal data is gathered through interactions between HM&P and Clients (in person, via mail, phone, online platforms, call centers, electronic communications, or other means), including surveys;
• From social media: Personal data is collected through Clients’ interactions with HM&P’s social media pages;
• From official sources: HM&P may collect personal data from publicly available and official sources;
• Other means.

Additionally, we may collect information from third parties such as business partners if permitted by law and with the Client’s consent. We may also receive information from competent authorities when fulfilling legal obligations.

5. Storage of personal data

Clients' personal data will be stored, managed, and protected in accordance with HM&P’s internal regulations. We implement reasonable measures to protect personal data and ensure compliance with this Policy and legal requirements throughout the storage period.

Personal data will be retained for the period necessary to fulfill the purposes outlined in agreements, contracts, or documents signed with Clients, as well as per this Policy. The storage period may be extended with the Client’s consent or as required by law.

6. Purpose of personal data processing

We collect personal data to provide and manage our services, including but not limited to litigation, arbitration, mergers & acquisitions, investment, finance & banking, pharmaceuticals & cosmetics, labor & employment, taxation, and other legal services.

Personal data processing serves the following purposes:

• Provision of legal services: We use personal information to provide legal advice and services tailored to Clients’ specific needs.
• Client relationship management: Personal data helps maintain and develop relationships between us and Clients, including communication, responding to inquiries, and providing updates on relevant services or events.
• Service quality improvement and user experience enhancement: We analyze personal data to improve service quality, optimize Client experience, and develop new products and services.
• Compliance with legal obligations and internal management: Personal data processing ensures compliance with legal requirements, such as record-keeping and reporting obligations.

We commit to processing personal data only within the stated purposes and will notify Clients of any changes to data usage.

7. Methods of personal data processing

Personal data will be processed directly through electronic operations, including but not limited to: collection, recording, analysis, verification, storage, modification, disclosure, combination, access, retrieval, encryption, decryption, copying, sharing, transmission, transfer, deletion, or destruction.

HM&P may process personal data using manual, automated, or other appropriate methods depending on the type of personal data and the applicable storage format, in compliance with legal requirements and our economic and financial conditions.

8. Commencement and termination of personal data processing

We will retain Clients' personal data for the period necessary to fulfill the purposes stipulated in the agreements, contracts, or documents executed with the Clients, as well as in accordance with this Policy. The retention period may be extended with the Client’s consent or as required by applicable laws and regulations.

Personal data processing shall commence from the moment HM&P lawfully receives the personal data and has established a legitimate legal basis for its processing in compliance with applicable laws. Personal data shall be processed until the purposes for which it was collected have been fully achieved.

HM&P may be required to retain personal data even after the termination of contractual relationships between the parties in order to fulfill legal obligations and/or comply with requests from competent regulatory authorities.

9. Data security measures

HM&P is committed to implementing stringent security measures to ensure that personal data is not accessed unlawfully, lost, or altered without authorization. Our security system includes tools and technical measures in accordance with Vietnamese law to safeguard data and control access strictly.

10. Sharing of personal data

Data sharing is conducted with the utmost caution to ensure Clients’ privacy is protected. We commit not to share data for commercial purposes without explicit Client consent.

• Internal sharing within HM&P: To enhance management efficiency, service provision, trend analysis, and product optimization. Only authorized personnel have access, complying with strict security policies.
• Sharing with third parties: Data may be shared with service providers for data storage, payment processing, or Client support. These parties must adhere to confidentiality agreements and use the data solely for contractual purposes. Additionally, data may be disclosed to competent authorities or courts as required by law.
• Emergency sharing: Data may be shared to protect Clients’ lives, health, or rights in emergencies such as natural disasters, pandemics, or other serious threats.

11. Miscellaneous provisions

This Privacy Policy may be updated periodically to reflect changes in applicable laws or HM&P’s internal regulations. We will publish any updates on our official website and encourage Clients to review the policy regularly to stay informed of the latest revisions.

We endeavor to implement robust security measures; however, the processing and storage of personal data inherently carry certain risks for both HM&P and Clients, particularly in cases of cyberattacks or system failures.

We acknowledge that unintended consequences, such as personal data breaches, may arise due to cyberattacks or system incidents, potentially causing harm to both Clients and HM&P. We are committed to implementing necessary protective measures and appropriate data handling procedures as stipulated in this Policy.

The processing of personal data commences when HM&P lawfully accesses and/or collects a Client’s personal data. The processing period concludes once HM&P has fulfilled the intended purposes of data processing, subject to the type of data and specific processing activities, while ensuring compliance with applicable legal requirements.

12. Effectiveness

This Policy shall take effect immediately upon obtaining the Client’s consent or approval. The implementation of this Policy is also governed by other internal regulations issued by HM&P. In the event of any inconsistency between this Policy and other internal regulations, this Policy shall prevail.

For matters not expressly addressed in this Policy, the applicable law shall be the laws of Vietnam.

13. Contact information

For any inquiries regarding this Privacy Policy, please contact us at:

HM&P Law Firm

• Address: 7th Floor, ITAXA Building, 126 Nguyen Thi Minh Khai Street, Vo Thi Sau Ward, District 3, Ho Chi Minh City
• Phone: +84 28 73080839
• Website: https://hmplaw.vn/
• Email: counsel@hmplaw.vn

HM&P is always ready to address any concerns related to Clients' personal data protection.