Privacy Policy
Supplier Connect
Effective Date: 15 July 2026
This Privacy Policy explains how Start-Vietnam Company Ltd. (Vietnamese: Công ty Trách nhiệm Hữu hạn Start-Vietnam; “Company,” “we,” “us,” or “our”), a single-member limited liability company incorporated in Vietnam under Enterprise Code 0110996016, the operator of the Supplier Connect platform at www.supplier-connect.io (the “Platform”), collects, uses, shares, and protects personal information.
1. Scope
This Policy applies to personal information collected through the Platform, related websites, and communications with us (collectively, “Services”), from Buyers, Suppliers, their contact persons, and visitors, wherever they are located. It does not cover information collected by third-party sites we link to.
1.1 Your Rights May Depend on Where You Are
Vietnam: rights under the Law on Personal Data Protection (Law No. 91/2025/QH15) and its implementing decree (Decree No. 356/2025/ND-CP).
European Economic Area / UK: rights under the GDPR and UK GDPR.
United States: rights under applicable state privacy laws (e.g. CCPA/CPRA and similar laws), where they apply to our processing.
Other Southeast Asian and Asia-Pacific jurisdictions: rights under locally applicable personal data protection laws.
Where local law grants you stronger or additional rights than described generally below, that local law governs.
2. Information We Collect
2.1 Account and Contact Information
Name, job title, business email and phone number, company affiliation, and login credentials, provided when you register or are added as a contact by your organization.
2.2 Business and Supplier Data
For Suppliers (and where relevant, Buyers), we collect business registration details, tax and enterprise identification numbers, financial and insurance information, certifications, compliance and quality documentation, and related company data submitted for validation and display purposes.
2.3 Technical and Usage Data
IP address, device and browser type, log data, and usage patterns on the Platform, collected automatically via cookies and similar technologies (see our Cookie Policy).
2.4 Data From Public and Partner Sources
We may supplement submitted data with information from public business registries or verification partners, to validate Supplier Data, where permitted by law.
2.5 Sensitive Data and Children
We do not intentionally collect sensitive personal data (e.g. health, biometric, or financial account credentials) beyond what is strictly necessary for account security and Supplier verification, and only with appropriate safeguards. The Services are intended for business use by adults and are not directed at children. If we learn we have inadvertently collected a child’s personal data, we will delete it.
3. How We Use Personal Information (Purposes and Legal Bases)
3.1 Providing the Services
Operating Accounts, validating Supplier Data, enabling Buyer discovery and search, billing Subscriptions. Legal basis: performance of a contract with you; consent, where required under Vietnamese or EU law.
3.2 Business Operations
Analytics, service improvement, communicating with you about the Platform. Legal basis: legitimate interests, balanced against your rights, or consent where required.
3.3 Marketing
Sending product updates or marketing communications, with an opt-out available in every message. Legal basis: consent, or legitimate interests where permitted.
3.4 Legal and Security
Fraud prevention, enforcing our Terms, complying with legal and regulatory obligations, including requests from competent Vietnamese authorities. Legal basis: legal obligation and legitimate interests.
We do not sell personal information. This is both a policy commitment and, in respect of Vietnamese personal data, a legal requirement — Vietnam’s PDPL prohibits the trading of personal data.
4. Cookies and Tracking
We use essential, analytics, marketing, and preference cookies. Full detail, including how to manage your preferences, is set out in our Cookie Policy at www.supplier-connect.io/cookie-policy.
5. Sharing and Disclosure
We share personal information with:
- Service providers who host, secure, and support the Platform (e.g. cloud infrastructure, payment processors, analytics), bound by confidentiality and data protection obligations;
- Other Users, where you choose to display information (e.g. a Supplier’s validated profile shown to Buyers);
- Competent authorities, where required by law or to protect our rights or the safety of others;
- A successor entity, in the event of a merger, acquisition, or sale of assets, subject to equivalent protections.
We maintain a list of current sub-processors, available on request to privacy@supplier-connect.io.
6. International and Cross-Border Data Transfers
Our primary infrastructure is hosted in Vietnam. Depending on the service providers we use, personal information may also be processed outside Vietnam.
Where we transfer personal data of Vietnamese data subjects outside Vietnam, or process it using systems located outside Vietnam, we do so in accordance with Vietnam’s cross-border data transfer requirements, including preparing and, where required, filing a Data Transfer Impact Assessment with the Ministry of Public Security.
Where we transfer personal data originating in the EEA/UK outside those regions, we rely on Standard Contractual Clauses or another recognized transfer mechanism.
[To finalize once your hosting and sub-processor stack, including payment processors, is confirmed — this section should list actual transfer destinations and safeguards.]
7. Data Retention
We retain personal information only as long as necessary for the purposes described in this Policy, including to meet legal, accounting, or reporting requirements. As a general matter: business and contract-related records are retained for a reasonable period (typically at least three (3) years); general service usage logs for at least one (1) year; and Account data is retained for the duration of your Account plus a reasonable period thereafter, or as otherwise required by applicable law. We securely delete or anonymize data once it is no longer needed.
8. Data Security
We apply administrative, technical, and physical safeguards appropriate to the risk, including encryption in transit, access controls, and monitoring. If a personal data breach occurs, we will assess and, where required, notify the affected data subjects and the competent authority (in Vietnam, within 72 hours of becoming aware, per the PDPL) without undue delay.
9. Your Rights
Depending on your location, you may have the right to: access the personal data we hold about you; request correction or deletion; object to or restrict certain processing; withdraw consent; request data portability; and lodge a complaint with your local data protection or competent authority (in Vietnam, the Ministry of Public Security’s Cybersecurity and High-Tech Crime Prevention Department, “A05”).
To exercise these rights, contact privacy@supplier-connect.io. We will verify your request and respond within the timeframe required by applicable law.
10. Personal Data Protection Contact
Email: privacy@supplier-connect.io
Postal address: 12B, Ha Tri 1 Street, Ha Dong Ward, Hanoi City, Vietnam
11. Third-Party Links
The Platform may link to third-party websites or services. We are not responsible for their privacy practices; please review their policies separately.
12. Changes to this Policy
We may update this Policy from time to time. Material changes will be notified via the Platform or by email at least [14] days before taking effect, and the effective date above will be updated.
13. Contact Us
Start-Vietnam Company Ltd.
Email: privacy@supplier-connect.io — General inquiries: info@supplier-connect.io
Registered office: 12B, Ha Tri 1 Street, Ha Dong Ward, Hanoi City, Vietnam
Enterprise registration number: 0110996016