Privacy Statement

PRIVACY POLICY 

(Code: 03-2026/CS/PDP Version: 2.0)  

1. Introduction

FPT Smart Cloud Company Limited (“FPT Smart Cloud”, “We”, “Us”) is committed to respecting and protecting the privacy and personal data of our customers, partners, and users throughout the process of interacting with, accessing, and using our products, services, platforms, and websites. This Privacy Statement (“Statement”) is designed to provide you with a comprehensive, transparent, and systematic view of how we collect, process, use, store, share, and protect personal data. 

This Statement also helps you understand your rights regarding personal data in accordance with the law. It is issued and implemented in compliance with current Vietnamese legal regulations, including but not limited to Personal Data Protection Law No. 91/2025/QH15, Decree 356/2025/ND-CP, and related guiding documents, while referencing international data protection practices and standards. 

2. Scope of Application

This Privacy Statement applies to all individuals interacting with FPT Smart Cloud, including but not limited to: 

• Visitors and users of the website; 

• Customers using products and services; 

• Business partners; 

• Individuals contacting, exchanging, or interacting with us. 

The scope covers all interaction channels, including websites, digital service platforms, applications, and other online communication methods operated or managed by FPT Smart Cloud. 

3. Personal Data Processing Roles

Depending on the specific relationship with you and the type of service provided, FPT Smart Cloud may act as: 

• Personal Data Controller: When we decide the purposes and means of data processing; 

• Personal Data Processor: When we process data at the request of customers or partners; 

• Both Controller and Processor of personal data. 

Specific roles will be determined based on the nature of the service and the agreement between the parties. 

4. Types of Personal Data Collected

We may collect and process the following types of personal data: 

4.1. Data Provided by you includes information you actively provide, such as: 

• Full name; 

• Email address; 

• Phone number; 

• Organization/Business information; 

• Content of exchanges, requests, or feedback. 

4.2. Automatically Collected Data Technical information collected when you access our website or services: 

• IP address; 

• Device type, operating system, and browser; 

• Access behavior data; 

• Cookies and similar tracking technologies. 

4.3. Data Arising During Service Use  

• System logs; 

• Usage history; 

• Interaction information with the platform. 

5. Purposes of Processing Personal Data

Personal data is processed for specific, legal, and transparent purposes, including: 

• Providing, operating, maintaining, and improving the quality of products and services; 

• Establishing, performing, and managing contractual relationships; 

• Receiving and responding to requests, inquiries, or complaints; 

• Ensuring system safety, security, and fraud prevention; 

• Fulfilling legal obligations as required by law; 

• Analyzing, researching, and enhancing user experience; 

• Conducting marketing and communication activities (subject to your consent). 

Note: We commit not to use your personal data to train Artificial Intelligence (AI) models without valid consent or unless the data has been anonymized according to regulations. 

6. Legal Basis for Processing

The processing of your personal data is based on one or more of the following: 

• Your explicit and valid consent; 

• Contractual performance obligations between you and FPT Smart Cloud; 

• Legal obligations we must comply with; 

• Legitimate interests of FPT Smart Cloud, provided they do not affect your legal rights and interests. 

7. Sharing and Disclosure of Personal Data

When necessary, your data may be shared with: 

• Affiliates and member units within the FPT ecosystem; 

• Partners and service providers supporting operations (e.g., technology infrastructure, technical support); 

• Competent state authorities as required by law; 

• Other relevant parties to protect the legal rights and interests of FPT Smart Cloud. 

We ensure that all data recipients are obligated to maintain confidentiality and only process data for the specified purposes. 

8. International Data Transfer

Personal data may be transferred outside the territory of Vietnam if necessary for service provision. In such cases, we commit to: 

• Fully complying with Vietnamese legal regulations on overseas data transfer; 

• Performing impact assessments and necessary legal procedures; 

• Applying appropriate protection measures to ensure data safety; 

• Fulfilling reporting obligations to competent authorities as required. 

9. Data Retention Period

Your personal data will be stored for the period necessary to fulfill the identified processing purposes or as required by applicable law. Upon expiration of the storage period, data will be deleted, anonymized, or destroyed using appropriate technical and organizational measures. 

10. Personal Data Security

We apply appropriate technical and organizational security measures to protect personal data from risks such as unauthorized access, loss, disclosure, or alteration. These include: 

• Access control; 

• Data encryption; 

• Intrusion monitoring and detection; 

• Security awareness training for personnel. 

11. Handling Personal Data Incidents

In the event of a personal data incident, FPT Smart Cloud will proactively take measures to control and rectify the situation. We will: 

• Notify competent authorities as required by law; 

• Notify the data subject when necessary to minimize risks. 

12. Your Rights

You have full rights related to your personal data as prescribed by law, including the right to be informed, access, correction, deletion, restriction or objection to processing, withdrawal of consent, and the right to complain. Detailed procedures are available in our Data Subject Rights Performance Policy published on our website. 

13. Cookies and Tracking Technologies

We use cookies to ensure website operation, analyze user behavior, personalize experiences, and support marketing activities (with your consent). Detailed usage is governed by our Cookie Policy. 

14. Third-Party Links

Our website may contain links to third-party websites or services. We do not control and are not responsible for the content or data protection policies of these parties. You should consult their privacy policies before providing personal data. 

15. Contact Information

For any questions, requests, or complaints regarding personal data processing, please contact: 

• Data Protection Officer (DPO): Pham The Minh 

• Company: FPT Smart Cloud Company Limited  

• Address: No 10 Pham Van Bach Street, Cau Giay ward, Hanoi, Vietnam 

• Email: support@fpt.ai  

• Hotline: 1900 638 399  

16. Statement Updates

FPT Smart Cloud reserves the right to modify or update this Privacy Statement periodically to ensure compliance with legal regulations and operational practices. Updated versions will be published on the website and take effect from the time of posting. Continued use of our services after an update signifies that you have read, understood, and agreed to the revised content.