Privacy Policy

1. Introduction

HRLife recognizes the importance of the personal data you entrust to us and is responsible for managing, protecting and processing it appropriately. This Privacy Policy helps you understand how we collect, use, disclose and/or process your personal data, so that you can make informed decisions before providing it.

“Personal data” means information in the form of symbols, letters, numbers, images, sound or the like in the electronic environment that is associated with, or helps identify, a specific individual. Common examples include full name, personal identification/citizen ID number, email address and phone number.

On consent: processing of your personal data is carried out on the basis of your clear, specific and voluntary consent (expressed by ticking the consent box on the registration/contact form) and/or to perform the service contract between the parties. Continued use of the website or silence is not deemed consent. If you do not agree with this Policy, please do not provide data or use the service.

2. Information We Collect

• Information you provide directly: full name, email, phone number when filling in contact forms, registering for consultation or enrolling in courses.
• Training needs information: areas of interest, individual/corporate training needs that you share.
• Payment information: transfer details, vouchers (HRLife does not store card numbers or banking passwords).
• Technical information: IP address, browser type, pages viewed and access time — collected automatically via cookies and analytics tools.

3. Legal Basis for Processing

We process your personal data based on: (i) your consent; (ii) performance of the service contract to which you are a party; and (iii) compliance with our legal obligations (tax, accounting, requests from competent authorities).

4. Purposes of Using Information

• Contact and advise you on training programs suited to your needs.
• Process course registration, create accounts and send related materials.
• Issue vouchers and fulfill tax – accounting obligations.
• Improve content and user experience on the website.
• Send information on new courses and professional articles (only if you have subscribed; you may unsubscribe at any time).
• Respond to support requests and inquiries.

We do not use your data beyond the stated scope and do not sell your data to third parties.

5. Cookies and Analytics Tools

The website uses cookies — small text files stored on your device — to improve browsing experience, remember preferences and analyze traffic. We use Google Analytics to understand how users interact with the website; data is collected in aggregated, anonymized form.

For non-essential (analytics) cookies, we request your consent via a cookie notice when you visit the website. You can change your choice or refuse cookies at any time by adjusting your browser settings.

6. Sharing Information with Third Parties

We do not sell, rent or share your personal data with third parties, except:

• With your explicit consent;
• Where necessary to provide the service (e.g., learning management platform, payment support providers, email tools);
• Where required by competent State authorities under the laws of Vietnam.

7. Cross-Border Data Transfer

Some tools we use (e.g., Google Analytics, the online learning platform, email services) may store and process data on infrastructure located abroad. In such cases, the transfer of personal data abroad is carried out in compliance with the Personal Data Protection Law No. 91/2025/QH15, including preparing an impact assessment dossier as required. We apply reasonable measures to ensure your data is adequately protected.

8. Data Retention

Personal data is retained for the duration of your use of the service and for the period necessary to fulfill the stated purposes or as required by law (e.g., tax and accounting vouchers). When the period expires, or when you withdraw consent and there is no longer a legal basis to retain it, we will delete or anonymize your data.

9. Information Security

We apply appropriate technical and organizational measures to protect data against unauthorized access, loss or disclosure, including:

• HTTPS encryption across the entire website;
• Restricting internal access on a “need-to-know” basis;
• Not storing sensitive payment information on our system.

10. Your Rights over Personal Data

You have full rights over your personal data in accordance with the law (the Personal Data Protection Law No. 91/2025/QH15 and related regulations). To exercise these rights or to unsubscribe from marketing emails, please contact us using the information in Section 15.

11. Children’s Data

The service and website are intended for persons aged 18 and over. We do not knowingly collect data of persons under 16 without the consent of a parent or guardian. If we discover that we have collected a child’s data without valid consent, we will delete it. Parents or guardians may contact us to request access to or deletion of a child’s data.

12. Data Breach Handling

In the event of a personal data breach, loss or compromise, we will notify the competent authority within the statutory timeframe (within 72 hours) and notify affected individuals where necessary, while applying timely remedial measures.

13. Links to External Websites

The website may contain links to external websites. We are not responsible for the content or privacy policies of those websites. We encourage you to read the privacy policy of any website you visit.

14. Changes to This Policy

We may update this Privacy Policy to reflect changes in operations or legal regulations. For material changes, we will give at least 07 days’ prior notice on the website and state the new effective date.

Your continued use of the website after the new effective date constitutes acceptance of the updated Policy.

15. Contact

For any questions regarding this Privacy Policy or to exercise your data rights, please contact our personal data protection focal point: