authenticated by
iGuide.ai (hereinafter referred to as “iGuide”) is committed to protecting the personal data of its users, customers, partners, employees, and other related data subjects during their access to and use of the Website and services provided by iGuide, in compliance with Vietnamese law on personal data protection.
iGuide is committed to:
- Fully comply with the regulations in Government Decree No. 13/2023/ND-CP on personal data protection and related guiding documents;
- Comply with the provisions of the Law on Personal Data Protection and other relevant legal documents when they are issued and come into effect;
- Update and adjust personal data protection measures, internal procedures, and documents published on the Website to comply with changes in current legislation.
iGuide is committed to:
- Personal data will only be collected and processed on a lawful basis and/or with the valid consent of the data subject, except where otherwise provided by law;
- Personal data will only be processed for specific, lawful purposes, with prior notification or at the time of collection to the data subject and/or as clearly stated in iGuide's applicable policies and terms;
- Personal data will not be used for purposes other than those stated, except in the following cases:
either the data subject has explicitly consented to the new purpose; or
There is a corresponding legal basis that permits such action;
- Ensure that the content of notifications regarding the processing of personal data sent to data subjects is clear, easy to understand, and includes at least the information required by law.
iGuide is committed to:
- Implement appropriate technical and organizational measures, to the extent necessary and reasonable, to prevent the loss, damage, unauthorized access, use, modification, or disclosure of personal data or data contrary to the stated processing purposes;
- Establish and maintain mechanisms for access control, authorization, system logging, data backup, and the use of encryption or equivalent security measures appropriate to the nature and risk level of each type of personal data;
- Issue, implement, and periodically review internal procedures and regulations on information security and personal data protection; train and raise awareness among relevant personnel regarding their obligations to maintain confidentiality and protect personal data;
- Regularly and as needed, assess and update information security and safety measures to comply with legal requirements and actual risk levels;
- Record, assess, and handle any incidents of personal data protection violations (if any) in accordance with the timeframes and procedures prescribed by law, including notifying the competent state agency and/or data subject when there is a basis for doing so.
iGuide is committed to:
- Only carry out personal data processing activities in cases where the law requires consent, after obtaining clear, proactive, specific, and verifiable consent from the data subject, except in cases where exemptions are provided by law;
- Ensure that the process of seeking consent is carried out on the following basis:
The notification content is complete, clear, and distinguishable from other content;
The format allows the data subject to independently choose to agree or disagree;
- Facilitate the convenient and unobstructed withdrawal of consent by data subjects, using a withdrawal method equivalent to the method used to express initial consent, unless otherwise provided by law;
- Respect and ensure the enforcement of other rights of data subjects as stipulated in Decree No. 13/2023/ND-CP and relevant laws; detailed content on rights and how to exercise them is published in the Privacy Policy and Personal Data Protection posted on the iGuide website.
iGuide is committed to:
- Personal data shall not be bought, sold, exchanged, or leased in any form that violates the law;
- Only share or transfer personal data to third parties when:
o There must be a valid legal basis (including but not limited to valid consent from the data subject or where permitted by law without consent); and
Third parties are committed to and/or bound by confidentiality obligations to protect personal data to a degree no lower than iGuide's commitments, through contracts or agreements in accordance with legal regulations;
- Control access to and sharing of personal data within iGuide, allowing only authorized individuals/departments with legitimate work needs and who have been briefed on confidentiality obligations to access personal data;
- Maintain necessary records and documents to prove that the sharing, transfer, and provision of personal data to third parties is carried out for the intended purpose, in accordance with the law, and in compliance with the aforementioned commitments.
This commitment to protecting personal data is applied consistently throughout all of iGuide's service provision on the Website. https://iguide.ai/ and may be reviewed, amended, or supplemented in accordance with legal regulations from time to time. Any amendments or supplements (if any) will be publicly announced on the iGuide Website.
