Privacy Policy

1. Data controller

Primary responsible entity: VNForest — contact: support@vnforest.org.

2. Scope

The policy applies to visitors of public pages (home, about, contact), users who register or sign in to business features, and technical communication channels (support email, contact forms).

3. Data we may collect

Depending on the features you use, information may include:

• Account information: name, email, phone, organisation name, user role, password stored hashed / encrypted (not in plain text).
• Contact submissions: message content, subject and fields you enter in the website “Contact” form (sent via our servers to support mail).
• Operational data: lot codes, product codes, process notes, uploads and activity logs within the scope you or your organisation enter on the platform.
• Technical logs: transient IP address, browser type, access timestamps, system error codes, for security and operations.

4. Purposes and legal bases

We process data to:

• Provide, operate and maintain the aGreen / VNATrace platform;
• Authenticate identity, manage accounts and provide technical support;
• Respond to contact, partnership and support requests via email;
• Meet legal obligations, prevent fraud and protect information security;
• Improve performance, security and user experience (aggregate analytics where appropriate).

Main legal bases include: (i) your consent where the law requires it (e.g. explicit consent before submitting contact forms); (ii) performance of a contract or pre-contract steps with you or the organisation you represent; (iii) legitimate interests in running the service without overriding your fundamental rights; (iv) legal obligations.

5. Cookies and similar technologies

The website may use cookies or browser storage to keep sessions, remember preferences or measure traffic in aggregate. You can adjust your browser to refuse cookies, though some features may be limited.

6. Sharing data

We do not sell personal data. Sharing occurs only when necessary, for example:

• Infrastructure providers under confidentiality commitments (cloud storage, transactional email, security monitoring);
• Technical integration partners when you or your organisation request system connectivity;
• Competent authorities when there is a lawful decision or request.

7. Retention

Data is kept as long as needed for the purposes in section 4, per accounting / record-keeping rules where applicable, or until you request deletion where the law allows and mandatory retention duties are not affected.

8. Security

We apply appropriate technical and organisational measures (access control, transport encryption where used, internal authorisation, backups). No system is perfectly secure; if an incident affects privacy, we follow internal procedures and notify where the law requires.

9. Your rights

Under applicable law, you may:

• Request access to, or correction of, inaccurate personal information;
• Request deletion or restriction of processing where the law permits;
• Withdraw consent for processing based on consent (if withdrawal affects service use, we will explain case by case);
• Lodge a complaint with a competent authority if you believe your rights were violated.

Send requests via support@vnforest.org — please include your registered email and a short description for verification.

10. Children

The service targets businesses and users with full civil capacity. We do not knowingly collect data from children under 13 (or the local minimum age) without guardian consent.

11. Cross-border transfers

Servers or cloud services from partners may be located in Vietnam or other countries. When data leaves Vietnam, we apply appropriate safeguards (contracts, data-processing clauses) with providers.

12. Policy changes

We may update this Privacy Policy; the effective date is shown at the top. For material changes, where the law requires, we will also notify via email or on-site notices.

13. Contact

Questions about privacy and personal data: support@vnforest.org.

See also: Terms of service.