Privacy notice

What personal data does this site collect?

Very little. eorvietnam.co is a set of static pages served through our hosting provider's network: no cookies, no analytics, nothing loaded from third-party servers. Everything personal EOR Vietnam actively collects comes from what you choose to send us — through the four-field quote form or by email. Separately, our hosting provider records standard technical logs (covered below), and simply browsing creates no account or profile. The table summarises what is involved; for what an enquiry leads to, see how an employer of record works.

What do we receive when you contact us, and why?

When you use the quote form we receive four things: your full name, company, email address and the message describing what you need, such as a role, location and salary. When you email info@eorvietnam.vn instead, we receive your email address and whatever you choose to put in the message. We use these details only to reply and to prepare an Employer of Record quote, applying published rules such as payroll and statutory contributions to your figures.

Once you tick the consent box and send the form, the four fields are saved in a private database on our hosting provider's platform, which only we can open through a password-protected page, and are sent to info@eorvietnam.vn as an email. Nothing is kept in your browser, and no other visitor can see what you sent. Our employer-cost calculator is different again: it runs entirely in your browser and its figures are never sent to us.

Our lawful basis is your consent — the tick box on the form — together with your own request to be contacted. Vietnam's Personal Data Protection Law (PDPL) requires clear notice and consent to process personal data, and "legitimate interest" is not a standalone basis.1

What is in the technical logs?

Like any website, eorvietnam.co is delivered by a hosting and content-delivery provider, which records basic technical data in its server logs — your IP address, browser user-agent and the request time — to serve pages and keep the site secure. The small program that handles the quote form runs on the same provider's platform with its standard operational logging switched on; if a submission ever fails to send, it records a technical error code, never the contents of your enquiry. We do not use any of this to identify you, combine it with your emails, or build a visitor profile.

What does this site not do?

A deliberately minimal set-up, so there is less to go wrong. This site has:

• No cookies, first-party or third-party.
• No analytics, tracking pixels or advertising tags.
• No third-party embeds, fonts or scripts.
• No selling, renting or sharing of your data.

If we ever add privacy-friendly analytics or any data-collecting feature, we will update this notice first and, where the law requires it, ask for your consent before it runs.

How long do we keep your data, and can you delete it?

We do not set a fixed deletion date. Your enquiry — the form submission (in our private database and as an email to info@eorvietnam.vn) or the email you sent — and our replies are kept for as long as they serve the purposes above: answering you, preparing your quote, and any work or follow-up enquiry that comes from it, so we can pick up where we left off if you come back. You can ask us to delete your details at any time by emailing info@eorvietnam.vn, and we will, unless a legal obligation requires us to keep something. We keep no marketing database or mailing list. The technical logs above expire on the hosting provider's own schedule.

What are your rights under Vietnam's data-protection law?

Vietnam's Personal Data Protection Law (Law 91/2025/QH15) and its implementing Decree 356/2025/ND-CP, both in force since 1 January 2026, set out your rights and replaced the earlier Decree 13/2023.12 Under the PDPL you can ask what we hold, have it corrected or deleted, withdraw a consent you gave, and object to or complain about the processing. To exercise any of these, email info@eorvietnam.vn; because we hold so little, most requests are simple to meet. For a fuller account of how the PDPL and Decree 356/2025 apply to employee and HR data — the controller and processor roles, consent, and cross-border transfers — see our guide to the PDPL and HR data in Vietnam.

Where is your data handled?

Our hosting provider and the email services that carry and hold our messages may process your data on servers outside Vietnam, so contacting us can involve a cross-border transfer. Vietnam's PDPL regulates this: an organisation sending Vietnamese personal data abroad must file a cross-border-transfer impact assessment with the data-protection authority — the Ministry of Public Security — within 60 days of the first transfer (PDPL Article 20; Decree 356/2025/ND-CP).12 Separately, for some employee-data flows that arise when EOR Vietnam provides its service, Decree 356/2025 may offer an exemption from that assessment where the transfer manages personnel within a multinational group under labour rules and agreements; whether it applies depends on the structure and must be confirmed case by case — see the legal basis for EOR in Vietnam.23

How will this notice change?

We may update this notice as the site or the law changes — for example, if we add analytics or change provider — and will change the "last updated" date above; this version is dated 5 October 2026. We review it against the PDPL and Decree 356/2025 and will revise it if guidance changes. The general terms for using this site are in our terms of use.