Privacy Policy

1. Who Is Responsible for Your Data

HR4U JSC is the personal data controller (and, where applicable, the controller-processor) for the data described in this Policy. When we recruit or provide HR services on behalf of a client, the client may also act as a controller of your data, and we process it under our agreement with that client.

2. Information We Collect

• Basic personal data: full name, date of birth, gender, contact details (phone, email, address), nationality, education, qualifications, work history, CV/resume, job title, company information, and the content of your communications with us.
• Recruitment and employment data: desired position, salary expectations, references, interview notes, assessment results and other information you choose to provide during the hiring process.
• Technical data: IP address, browser type, device information, pages visited, and data collected through cookies and similar technologies.
• Sensitive personal data: we do not intentionally collect sensitive personal data (such as health information, religious beliefs, political opinions or financial account details). If a recruitment process or legal obligation requires such data, we will collect it only with your explicit consent or where the law permits, and we will apply enhanced protection measures. Please do not include sensitive data in your CV unless it is necessary.

3. How We Use Your Data

We process personal data only for specific, lawful purposes that we have notified to you, including:

• responding to enquiries and requests;
• providing HR, recruitment, headhunting and related services to our clients;
• evaluating job applications and introducing suitable candidates to employers;
• managing relationships with clients, candidates and partners;
• sending service-related communications and, with your consent, marketing information (you may unsubscribe at any time);
• operating, securing and improving our website and services;
• complying with legal obligations and requests from competent authorities.

We will not use your data for purposes beyond those notified to you without your further consent, unless the law permits otherwise.

4. Legal Basis for Processing

We process personal data on the basis of your consent. Consent must be voluntary, clear and specific, and given in a form that can be verified (for example, ticking a consent box or submitting your CV after reading this Policy). Silence or inaction is not consent. We may also process data without consent in the cases permitted by law, such as to perform a contract with you, to comply with legal obligations, or to protect life and health in emergencies.

5. Sharing Your Data

We do not sell or trade personal data. We share personal data only when necessary and lawful:

• with client employers, to introduce you as a candidate for a position you applied for or agreed to be considered for;
• with service providers (such as IT, hosting, email or recruitment platforms) who process data on our behalf under written agreements that require them to protect it;
• with competent state authorities, when required by law.

6. Cross-Border Transfer

Some service providers or clients may store or access data outside Viet Nam. In those cases we transfer personal data only in compliance with Vietnamese law, including preparing and maintaining the required cross-border data transfer impact assessment, and applying appropriate safeguards.

7. Data Security

We apply appropriate organizational and technical measures to protect personal data against unauthorized access, loss, alteration or disclosure, including access controls, confidentiality obligations for staff, and secure storage. If a personal data breach occurs, we will notify the competent authority and, where required, affected individuals, within the timeframes set by law.

8. Data Retention

We keep personal data only for as long as necessary to fulfil the purposes stated above or as required by law. Candidate data is kept for up to 24 months after our last contact with you so we can consider you for future opportunities, unless you ask us to delete it sooner. After that, we delete or anonymize the data.

9. Cookies

Our website uses cookies to make the site work and to understand how it is used. You can manage or disable cookies in your browser settings. Disabling some cookies may affect certain website features.

10. Your Rights

Under the Law on Personal Data Protection, you have the right to:

• be informed about how your personal data is processed;
• give or withhold consent, and withdraw consent at any time (this does not affect processing carried out before withdrawal);
• access, view and obtain a copy of your personal data;
• request correction of inaccurate or incomplete data;
• request deletion of your data;
• request restriction of processing, or object to processing (including for marketing);
• file complaints, denunciations or lawsuits, and claim damages as provided by law;
• take self-protection measures as provided by law.

To exercise these rights, contact us using the details below. We may need to verify your identity before acting on your request, and we will respond within the time limits required by law. Some rights may be limited where the law requires us to keep certain data.

11. Children’s Data

Our services are not intended for children. We do not knowingly collect personal data of persons under 16 without consent from a parent or legal guardian, as required by law.

12. Changes to This Policy

We may update this Policy from time to time. The updated version will be posted on this page with a new “Last updated” date. Material changes will be notified to you where appropriate.

13. Contact Us

For privacy-related questions or requests, please contact: