Legal ·
Privacy policy
What we collect when you visit this website or contact us, why we need it, who else sees it, how long we keep it and how you can see, change or delete it.
We collect only what you send us and, if you allow it, how you use this website. We use it to answer you and to improve the site. We never sell your data and we don't build advertising profiles. You can ask us at any time to see, correct or delete your data by emailing [email protected].
Who is responsible for your data
This website is run by Atelier ATTN. Company Limited (Công ty TNHH Atelier ATTN.), which trades as Atelier ATTENTION. We decide how the personal data described here is used, which makes us the data controller.
- Enterprise and tax code: 0316192107
- Registered office: No. 08, Street 66, An Khanh Ward, Ho Chi Minh City, Vietnam
- Email: [email protected]
- Phone: +84 35 31 32 100
More company details are on our legal notice page.
What we collect and why
When you fill in a form
Our contact, quote, appointment and free check forms ask for your name and email address, plus what you choose to tell us: your phone number, website, company or hotel, and your message. With the form we also receive the page and language you sent it from, your IP address and the time.
We use this to answer your request, prepare an offer and, if we work together, to run the project. The IP address and time help us block spam and abuse. Forms are sent to our mailbox by email. The website itself does not keep a copy in a database.
When you apply for a job
Job applications include your name, email address and, if you add them, your phone number, LinkedIn or portfolio link, CV and message. We use them only to assess your application.
When you use the AI chat
The "Ask Atelier ATTENTION" chat sends your messages, and the address of the page you're on, through our server to xAI, the company behind Grok, which writes the answers. Please don't share sensitive information such as passwords, health details or payment data in the chat.
The conversation is kept in your own browser while the tab is open, so it stays when you move to another page. It disappears when you close the tab. We don't store chats on our server. If you give the assistant your contact details and ask us to follow up, it sends your name, contact details, request and the conversation to our mailbox, and we treat it like a form request.
When you book a call, email, phone or message us
The "Choose a time" button opens our booking page at Appointlet, which asks for your name and email address to schedule the call. When you email, phone or message us on WhatsApp or Zalo, we receive the details you share there. We use them to answer you. Appointlet, WhatsApp (Meta) and Zalo also process your data under their own privacy policies.
When you browse the website
Like every website, our hosting provider and Cloudflare, which delivers and protects the site, record technical data for each visit: your IP address, browser, the page you asked for and the time. They use it to deliver the website and keep it secure. Cloudflare also counts page views for us (Cloudflare Web Analytics), without cookies and without recognizing you on later visits. To stop the forms and chat from being flooded, our server briefly keeps a coded (hashed) version of your IP address with the times of your recent messages. It cannot be read back as your IP address.
Our fonts and images load from our own server, so opening a page doesn't send your data to font services.
Analytics, only with your permission
If you click Accept in the cookie banner, we use two tools to understand how visitors use the site:
- Google Analytics (loaded through Google Tag Manager) counts visits and shows which pages are read, how visitors arrive, which device and browser they use, their approximate location (country and city) and which buttons they click. Google Analytics doesn't store IP addresses.
- Hotjar shows how visitors scroll, click and move through pages, as heatmaps and recordings of visits. Hotjar's standard settings hide what you type into form fields.
If you click Decline, or don't choose, neither tool loads. You can change your choice at any time under "Cookie settings" at the bottom of each page. Our cookie policy lists the cookies they use.
Requests from the Arabic website
Our work in Saudi Arabia is led by our partner Charisma Visions Advertisement Est. (Charisma) in Riyadh. Requests sent through the forms and chat on the Arabic website go to both our team and Charisma, so that Charisma can contact you.
Why we're allowed to use your data
If you're in the European Union, the GDPR (in the Netherlands: AVG) asks us to name a legal basis for each use:
- Taking steps at your request and running our agreement (Article 6(1)(b)): answering requests for a quote or a call, preparing offers and doing the work.
- Legitimate interest (Article 6(1)(f)): answering general questions, the chat, keeping the website secure and blocking spam.
- Consent (Article 6(1)(a)): Google Analytics and Hotjar. You can withdraw it at any time.
- Legal obligation (Article 6(1)(c)): keeping invoices and accounting records.
Vietnam's personal data protection law and Saudi Arabia's Personal Data Protection Law (PDPL) apply to visitors there. We use your data on the same bases, and we ask for your consent where those laws require it.
Who else receives your data
We share personal data only with the companies that help us run the website and answer you:
- our hosting provider and Cloudflare, which deliver the website;
- our email provider, where form requests, chat follow-ups and emails arrive;
- xAI, for the chat;
- Google and Hotjar, only after you click Accept;
- Appointlet, when you book a call;
- Charisma in Riyadh, for requests from the Arabic website.
We don't sell personal data and we don't share it for advertising. We give it to authorities only when the law requires it.
Data outside your country
We're based in Vietnam, and some of the services above store data in other countries: Google and xAI in the United States, Hotjar in the European Union. When personal data from the European Union goes to a country without an EU adequacy decision, we rely on the safeguards these providers offer, such as the EU Standard Contractual Clauses or the EU-U.S. Data Privacy Framework.
How long we keep your data
- Form requests, chat follow-ups and emails: as long as we need them to answer you and follow up. If you become a client, for as long as we work together, and invoices and accounting records for as long as tax law requires.
- Job applications: until the position is filled, unless you agree that we keep your CV for future openings.
- The chat conversation: in your browser until you close the tab.
- Google Analytics: detailed data for at most 14 months.
- Hotjar: recordings and heatmap data for at most 365 days.
- Your cookie choice: 12 months in your browser. After that, we ask again.
- Spam protection records: one hour.
Your rights
You can ask us to:
- show you which personal data we hold about you, and give you a copy;
- correct data that is wrong or incomplete;
- delete your data;
- limit how we use it, or stop using it (objection);
- send your data to you or another company in a common format;
- withdraw your consent, for example for analytics.
Email [email protected]. We may ask you to confirm who you are before we act. We reply within one month at the latest, sooner where your local law requires it.
If you're unhappy with how we handle your data, please tell us first so we can put it right. You can also complain to a data protection authority:
- Netherlands: Autoriteit Persoonsgegevens
- Other EU countries: the data protection authority in your country
- Saudi Arabia: the Saudi Data and AI Authority (SDAIA)
- Vietnam: the Department of Cybersecurity and High-Tech Crime Prevention (A05) of the Ministry of Public Security
How we protect your data
The website, forms and chat only work over an encrypted connection (HTTPS), and form emails are sent over an encrypted connection too. Only our team can open the mailbox where requests arrive. Spam protection on the forms works without CAPTCHAs or tracking.
Children
This website is for businesses. It isn't meant for children under 16, and we don't knowingly collect their data. If you believe a child has sent us personal data, email us and we'll delete it.
Changes to this policy
We update this policy when the website or the way we work changes. The date at the top shows the last update. When a change affects cookies or analytics, we ask for your choice again.
Contact
Questions about this policy or your data: [email protected], or by post to Atelier ATTN. Company Limited, No. 08, Street 66, An Khanh Ward, Ho Chi Minh City, Vietnam.