Privacy policy

2. What we collect

When you send the inquiry form:

• Your name, centre name, area and phone / Zalo number (required).
• Your email address and message (optional).
• Your agreement to this policy, the time you sent the form and the page you sent it from.

To block spam, the form uses Cloudflare Turnstile. Turnstile loads only when you start filling in the form; it checks technical signals from your browser to tell people from bots, and your IP address is passed to Cloudflare to verify the check. We do not store the result.

When you contact us directly by email or Zalo: your email address or phone number and what you send us.

When you browse the website: we use Cloudflare Web Analytics, a cookieless statistics tool. It records aggregate information such as pages viewed, referring page, browser and device type, country and page-load speed. It uses no cookies or browser storage, and we do not use it to identify you.

The website is hosted on Cloudflare. To deliver pages and protect the site, Cloudflare processes the IP address and technical details of each request (for example browser, time and page requested).

3. What we don't do

• Our website sets no cookies.
• No advertising pixels or ad trackers (no Meta Pixel, Google Analytics or Google Ads).
• We do not sell or rent your personal data.
• No marketing emails unless you separately agree.
• The intro video uses YouTube's privacy-enhanced mode (youtube-nocookie.com) and loads only when you press play. YouTube/Google then receives data under its own policy.

4. Why we use it

• To reply to your inquiry, discuss the pilot and our services, and prepare a proposal if you want one.
• To protect the website and form from spam and abuse.
• To understand how the website is used (aggregate figures) and improve it.

The basis for processing is your consent (the consent box on the form, or contacting us yourself). You can withdraw consent at any time; this does not affect processing already carried out. We make no automated decisions about you.

5. Who processes data with us

• Cloudflare, Inc.: website hosting, security, Turnstile, Web Analytics, and delivering form submissions to our inbox (Cloudflare Email Routing).
• Google LLC: the hello@nexusgrowthlabsvn.com inbox runs on Google Workspace, where emails and form inquiries are stored.
• We may use software tools, including AI assistants, to help manage the inbox; they are used only to help us reply to you.

These providers' servers may be outside Vietnam, so your data may be transferred abroad for these purposes. We disclose data to authorities only when the law requires it.

6. How long we keep it

• Form inquiries and email conversations: up to 24 months after our last contact if you do not become a client, then deleted.
• If you become a client: for the length of our work together, plus any period the law requires (for example accounting records).
• Web Analytics figures are aggregate and kept in Cloudflare under Cloudflare's retention period.
• You can ask us to delete your data sooner at any time (see section 8).

7. Your rights

Under Vietnam's Law on Personal Data Protection No. 91/2025/QH15 and Decree 356/2025/ND-CP (in force from 1 January 2026, replacing Decree 13/2023/ND-CP), you have the right to:

• Be informed about the processing of your personal data.
• Give or refuse consent, and withdraw it.
• View, access and ask us to correct your data.
• Ask for a copy of your data.
• Ask us to delete your data.
• Ask us to restrict processing, and object to processing.
• Complain, report, take legal action and claim compensation as provided by law.

8. How to request access or deletion

Email hello@nexusgrowthlabsvn.com with the subject “Personal data request”, say whether you want to see, correct or delete your data, and give the email address or phone number you contacted us from. We may ask you to confirm from that same email address or number. We will act within the time limits set by law and let you know when it is done. When deleting, we remove the emails and notes related to your inquiry.

9. Security

The website uses encrypted HTTPS connections only. The Turnstile verification key is kept secret on the server, and form data is sent straight to our inbox, not stored in any other database.

10. Changes to this policy

If this policy changes, we will update this page and the “Last updated” date above.