Information We Collect

When you use our platform, we gather different types of information. Some you provide directly, some we collect automatically as you interact with our courses and tools.

Information You Give Us

This includes data you share when signing up, enrolling in courses, or contacting our support team:

• Full name and contact details including email address and phone number
• Account credentials and security information you create
• Payment information processed through our secure payment partners
• Course progress, quiz responses, and educational feedback
• Messages you send through our contact forms or support channels
• Preferences for course topics, notification settings, and learning goals

Information Collected Automatically

Our systems log certain technical data to improve service quality and troubleshoot issues:

• Device information like browser type, operating system, and screen resolution
• IP address and general location data (city or region level, not precise coordinates)
• Pages visited, time spent on content, and navigation patterns
• Referral sources that brought you to our website
• Course completion rates and learning engagement metrics

How We Use Your Information

We don't collect data just to have it. Everything we gather serves specific purposes that directly benefit your learning experience.

• Processing your course registrations and managing your account access
• Delivering educational content and tracking your progress through programs
• Sending important updates about courses you're enrolled in or changes to our services
• Responding to your questions and providing customer support
• Analyzing how students use our platform to identify areas for improvement
• Detecting and preventing fraudulent activity or unauthorized access
• Meeting legal obligations under Vietnamese law and educational regulations

We occasionally send optional newsletters about new courses or budget education tips. You can opt out anytime through your account settings or the unsubscribe link in emails.

Legal Basis for Processing

Under Vietnamese Personal Data Protection Decree 13/2023-ND-CP, we process your data based on these legal grounds:

Sharing Your Information

We're selective about who gets access to your data. We don't sell personal information to third parties, period.

Service Partners

Some trusted companies help us run our platform. They only access what's necessary for their specific role:

• Payment processors who handle transactions securely (they never see your full card details)
• Cloud hosting providers that store course content and user data with encryption
• Email service providers that send course notifications and updates
• Analytics tools that help us understand how students use our platform
• Customer support software that helps our team respond to your questions efficiently

Legal Requirements

We might share information if Vietnamese authorities require it through proper legal channels, or if necessary to protect rights, safety, or property. This is rare and we review each request carefully.

Business Transfers

If SoftOnListOn merges with another company or gets acquired, your data would transfer to the new entity. We'd notify you beforehand and explain any changes to how your information is handled.

Your Privacy Rights

Vietnamese data protection law gives you specific rights over your personal information. Here's what you can do and how to exercise these rights:

Data Security

Protecting your information isn't optional for us. We've implemented multiple layers of security to prevent unauthorized access, disclosure, or loss.

Technical Safeguards

• Industry-standard encryption for data transmission (TLS 1.3) and storage (AES-256)
• Regular security audits and vulnerability assessments by independent experts
• Multi-factor authentication options for account access
• Automated backup systems with encrypted off-site storage
• Intrusion detection and prevention systems monitoring network traffic
• Secure payment processing that never stores complete card numbers on our servers

Organizational Measures

• Staff access limited strictly to those who need it for their job functions
• Mandatory privacy training for all team members handling user data
• Confidentiality agreements with employees and contractors
• Incident response procedures ready if a security breach occurs

No system is completely bulletproof. While we work hard to protect your data, we can't guarantee absolute security. You play a role too – use strong passwords and don't share your login credentials.

Data Retention

We keep your information only as long as needed for legitimate purposes or legal requirements.

Retention Periods

• Active account data: Stored while your account remains active plus 90 days after closure
• Course completion records: Retained for 7 years to provide certificates and verify credentials
• Financial transaction records: Kept for 10 years as required by Vietnamese accounting law
• Marketing consent records: Maintained until you withdraw consent plus 2 years for proof of compliance
• Support communications: Deleted after 3 years unless needed for ongoing disputes
• Technical logs and analytics: Anonymized after 18 months and retained in aggregate form

When we delete data, it's gone from active systems within 30 days. Backup copies are purged within the next backup cycle (typically 90 days).

Cookies and Tracking

Like most websites, we use cookies and similar technologies. These are small files stored on your device that help our platform function properly and remember your preferences.

Types of Cookies We Use

• Essential cookies: Required for basic functions like logging in and accessing course content. Can't be disabled.
• Preference cookies: Remember your settings like language choice and course display options
• Analytics cookies: Help us understand which features students use most and where improvements are needed
• Performance cookies: Monitor site speed and technical issues to maintain quality service

You control non-essential cookies through our cookie settings panel or your browser preferences. Blocking certain cookies might limit some platform features.

International Data Transfers

Our servers are located in Vietnam, but some service providers we work with operate internationally. When data leaves Vietnam, we ensure appropriate safeguards are in place.

Cloud storage partners maintain data centers across Asia-Pacific with equivalent security standards. Payment processors use globally recognized security certifications. We verify that all international partners comply with Vietnamese data protection requirements through contractual agreements.

If you're accessing our platform from outside Vietnam, your information will be transferred to and processed in Vietnam under Vietnamese law.

Children's Privacy

Our services target adults seeking budget education. We don't knowingly collect information from anyone under 16 years old without parental consent.

If a parent discovers their child has provided us with personal information without permission, contact us immediately at [email protected]. We'll delete the account and associated data promptly.

For users aged 16-18, we recommend discussing enrollment with a parent or guardian, though it's not legally required in Vietnam.

Changes to This Policy

We update this policy occasionally to reflect new practices, legal requirements, or service changes. When significant changes occur, we'll notify active users by email at least 30 days before the new policy takes effect.

Minor updates like clarifications or contact information changes won't trigger notifications. The "Last Updated" date at the top shows when we last modified this document.

Continuing to use our services after policy updates means you accept the changes. If you disagree with modifications, you can close your account before they take effect.

Third-Party Links

Our platform occasionally links to external resources for supplementary learning materials or reference. We're not responsible for the privacy practices of these third-party websites.

When you click external links, you leave our platform and enter sites with their own privacy policies. Read their terms before sharing personal information. We don't control or endorse third-party content.

Your Responsibilities

Privacy is a shared effort. While we protect data on our end, you need to do your part:

• Keep your password secure and don't share login credentials with others
• Log out from shared or public computers after accessing your account
• Update your contact information so we can reach you about important account matters
• Report suspicious activity or potential security issues immediately
• Review your account settings regularly to ensure preferences are current
• Be cautious about what personal information you share in course forums or discussion areas