This is an English translation provided for your convenience. The Vietnamese version is the legally binding original. In case of any discrepancy, the Vietnamese version prevails.
View in Tiếng ViệtThis Privacy Policy explains how Mr. Vũ Minh Tùng — the individual operating Venglish (hereafter "Venglish", "we", "our", or "us") — collects, uses, shares, and protects information you provide when you visit venglish.space, app.venglish.space, and related services (the "Services"). It is written to align with the EU General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA/CPRA), and Vietnam's Decree 13/2023/NĐ-CP on Personal Data Protection.
1. Scope of this policy
This policy applies to personal data we process when you visit our marketing website, submit our contact form, sign in to administrative tooling, or otherwise interact with the Services. It does not apply to third-party websites linked from the Services.
2. Data controller
The data controller responsible for your personal data is Mr. Vũ Minh Tùng, a Vietnamese citizen residing in Hanoi who operates Venglish as an individual. You may contact us at contact@venglish.space for any privacy enquiry.
3. Data we collect
We collect only what we need to operate, improve, and secure the Services.
- Contact-form data: your name, email address, subject, and message — when you submit the form on the Contact page.
- Account data: this public marketing site has no sign-in and collects no account credentials or authentication data.
- Usage data: page views, scroll depth, language changes, button clicks, and similar interaction events — collected via Google Analytics 4 in pseudonymous form.
- Device & technical data: IP address (truncated by Google Analytics), user agent, screen size, locale, time zone — collected automatically when you load any page.
- Local preferences: your language preference is stored in your browser's local storage under the key venglish.locale.preauth so the site remembers it on your next visit.
We do not knowingly collect special-category data (health, biometric, racial, religious, political, or sexual orientation data). Please do not include such data in the contact form.
4. Why we use your data
- To respond to your enquiries and provide customer support.
- To operate, secure, and improve the Services and develop new features.
- To analyse aggregate usage patterns and measure marketing effectiveness.
- To comply with legal obligations and to enforce our Terms of Service.
- To detect, prevent, and respond to security incidents, abuse, or fraud.
5. Legal basis for processing (GDPR)
Where GDPR applies, we rely on the following legal bases: (a) your consent for non-essential cookies and marketing communications; (b) the necessity to take pre-contractual or contractual steps when you submit the contact form or use the platform; (c) our legitimate interests in operating, securing, and improving the Services, balanced against your rights; (d) compliance with a legal obligation.
6. Who we share data with
We do not sell your personal data. We share it only with the following processors, each under written agreement:
- Contact email: the contact form composes a message in your own email client addressed to contact@venglish.space. We do not store form submissions on a server.
- Google Analytics 4 (Google LLC / Google Ireland): processes pseudonymous usage data to measure and improve the Services. IP addresses are truncated by Google before storage.
- Cloudflare, Inc. (hosting, CDN & analytics): serves this site over Cloudflare's global network and receives standard server access logs (IP, user-agent, timestamps); Cloudflare Web Analytics is cookieless.
- Authorities and law-enforcement: only when compelled by valid legal process and where we are obliged to disclose.
7. International data transfers
Our processors may store and process data outside Vietnam, including in the United States and the European Economic Area. Where we transfer personal data from the EEA, the United Kingdom, or Switzerland to a country without an adequacy decision, we rely on the European Commission's Standard Contractual Clauses (or equivalent UK/Swiss provisions) and supplementary measures where required.
8. How long we keep your data
- Contact-form submissions: kept for up to 24 months after the last contact, then deleted unless required for ongoing dispute resolution.
- Admin account data: kept while the account is active and for up to 12 months after deactivation.
- Analytics data (Google Analytics 4): retained according to GA4 settings, currently 14 months from collection.
- Server access logs: typically 30 days at the hosting layer.
9. Your rights
Subject to applicable law, you have the right to:
- Access the personal data we hold about you.
- Request correction of inaccurate data.
- Request deletion of your data (right to be forgotten).
- Restrict or object to certain processing.
- Data portability — receive a copy of your data in a machine-readable format.
- Withdraw consent at any time, where processing is based on consent.
- Lodge a complaint with your supervisory authority (e.g. your national data-protection authority in the EU/UK).
To exercise any of these rights, email contact@venglish.space. We will respond within the timelines required by applicable law (typically within 30 days under GDPR; up to 45 days under CCPA).
10. California (CCPA/CPRA) rights
If you are a California resident, you have the right to know what personal information we collect, to request deletion, to correct inaccurate information, and to opt out of any sale or sharing of personal information. We do not sell or share personal information for cross-context behavioural advertising. To exercise these rights, contact contact@venglish.space.
11. Vietnam (Decree 13/2023/NĐ-CP) rights
If you are located in Vietnam, you have the rights set out in Decree 13/2023/NĐ-CP, including the rights to know, to consent, to access, to withdraw consent, to delete, to restrict processing, to object, to data portability, and to lodge a complaint. To exercise these rights, contact contact@venglish.space.
12. Children's privacy
The Services are not directed to children under 13 (under 16 in jurisdictions where that is the higher minimum age, including most of the EU). We do not knowingly collect personal data from children under that age. If you become aware that a child has provided personal data to us, please contact contact@venglish.space so we can delete it.
13. Security
We use technical and organisational measures appropriate to the risk: TLS encryption in transit, encryption at rest at the database layer, access controls based on least privilege, hardened content-security policy, secure authentication tokens with rotation, and routine review of dependencies and access logs. No system can be guaranteed perfectly secure; we encourage you to use a strong, unique password and to report any suspected vulnerability to contact@venglish.space.
15. Changes to this policy
We may update this policy to reflect changes in our practices or applicable law. The "Last updated" date at the top of this page indicates when the policy was last revised. Material changes will be communicated via the Services or by email where appropriate.
16. Contact us
For any privacy-related question, request, or complaint, contact us at contact@venglish.space or via the Contact page. If you are in the EU/EEA and we cannot resolve your concern, you may also lodge a complaint with your local data-protection authority.
Questions about this document?
Reach our team through the Contact page or email us at contact@venglish.space.