Privacy notice
How Corriford handles personal data
We collect only what you send us, use it to answer you and prepare a possible engagement, and never sell it. This notice is issued under the Law on Personal Data Protection No. 91/2025/QH15 and Decree 356/2025/ND-CP.
Draft update for approval · effective on publication
01
Who is responsible
The data controller is the Corriford legal entity identified on the Governance page. Privacy requests: please use our contact form.
02
What we collect and why
| Source | Data | Purpose |
|---|---|---|
| Enquiry, investor and project forms | Name, organisation, role, email, phone, country, the project or mandate details you choose to type, your message, consent flag | Reply to you; assess fit, conflicts and scope before any engagement |
| Spam and abuse protection | IP address and submission time, kept only in temporary rate-limit records | Block automated or repeated submissions |
| Hosting server logs | IP address, browser type, pages requested, time — recorded by our hosting provider | Security, availability and troubleshooting |
| Settings in your browser | Language choice (EN/VI/中文) and motion preference, stored only on your device | Remember your preference |
We do not use advertising cookies, analytics trackers or social-media pixels. Typefaces are loaded from Google Fonts, which receives your IP address when the page loads.
Corriford Atlas
No Atlas forms on this website
- Corriford Atlas will operate on its own website, which is coming soon. This website (corriford.com) has no Atlas registration form, needs card or interest form, and collects no personal data for Atlas.
- Once the Atlas website opens, personal data given there will be governed by the privacy notice published on that site.
03
Legal basis and consent
We process form data on the basis of the consent you give by ticking the consent box, and to take steps you request before a contract. You may withdraw consent at any time by writing to us through our contact form; withdrawal does not affect processing already carried out.
Please do not send confidential documents, identity papers or financial account details through website forms. Project documents are received only after a non-disclosure agreement is signed.
05
How long we keep it
- Enquiries that do not lead to an engagement: deleted within 24 months of the last contact.
- Engagement records: for the period required by contract, accounting and tax law.
- Atlas Match submissions: 24 months from your last update, or until you withdraw consent if earlier.
- Consent records: for as long as needed to show that consent was given, and no longer than 5 years after it ends.
- Rate-limit records: automatically overwritten within hours.
06
Your rights
Under Law 91/2025/QH15 you may ask to be informed, to access, correct or delete your data, to restrict or object to processing, to withdraw consent, and to complain to the competent authority. Write to us through our contact form; we answer within the time limits set by law.
07
Security
Encrypted connections (HTTPS), access limited to staff who need it, spam and abuse controls on every form, and no storage of form submissions on the public web server. We do not hold ISO 27001 or SOC 2 certification today; see status transparency.
This website is intended for professional users aged 18 or over. If this notice changes, the new version and its effective date are published on this page.