Terms and policies

This Privacy Policy (the "Policy") describes how E-START collects, uses, stores, shares and protects Your personal data when You access, register for and use the E-START Platform at estart.vn. This Policy forms an integral part of the Platform's Terms of Use.

1. GENERAL PROVISIONS

1.1. Data Controller

The entity responsible for processing personal data collected through E-START is the CanTho Startup And Innovation Center (CASIC).

Address: 118/3 Tran Phu Street, Cai Khe Ward, Can Tho City
Phone: 02923.836.677
Email: Support@estart.vn

1.2. Scope of Application

This Policy applies to Users' personal data collected through accessing, registering for and using the estart.vn Platform. It does not apply to Third-Party websites or applications linked from the Platform.

2. PERSONAL DATA COLLECTED

• Basic identification information: full name, email address, phone number, date of birth.
• Account information: username, password (stored in encrypted form).
• Platform activity information: learning history, posted Content, interactions on E-Connect.
• Account verification information: OTP codes.
• Information generated when posting Content (materials, courses, space information) and related data.

E-START does not collect biometric data in its standard account registration/verification process. Data is collected directly from You when You register an account, use the Platform's functions, or contact E-START. E-START does not collect personal data from third-party sources beyond the scope set out in this Policy, unless permitted by law or with Your consent.

3. PURPOSES AND LEGAL BASES FOR DATA PROCESSING

3.1. Purposes of Processing

• Identification and account information: to create and manage accounts and authenticate Users.
• Platform activity information: to provide and improve the E-Learning, E-Book, E-Connect and E-Hub functions.
• Verification information (OTP): to ensure account security and prevent unauthorized access.
• Information generated when posting Content: to operate the review mechanism, display Content and handle violation complaints.
• Additional information in case of complaints/transactions: to verify and resolve complaints and fulfill obligations related to paid transactions (if any).

3.2. Legal Bases

The processing of Your personal data is based on one or more of the following grounds, in accordance with the Law on Personal Data Protection No. 91/2025/QH15: Your consent when registering for or using the services; the necessity of performing a contract or providing services at Your request; compliance with legal obligations; and other grounds as prescribed by applicable law.

4. RESPONSIBILITIES OF E-START

4.1. Method of Data Processing

Data is processed by electronic means through E-START's systems, including: collection, storage, use, modification (at Your request), and deletion of data upon a lawful request or upon expiry of the retention period.

4.2. Parties with Access to Data

Personal data may be accessed by: authorized CASIC personnel responsible for system administration and Platform operation; technical infrastructure service providers (hosting/storage) and email/SMS-OTP service providers for verification purposes; and payment intermediaries, for data necessary to process payment transactions (if any). These parties may only access data to the extent necessary to perform services for E-START and are obliged to maintain confidentiality in accordance with their agreements and applicable law.

4.3. Transfer of Data to Third Parties

E-START does not sell or rent Your personal data to third parties for commercial purposes. Data sharing with third parties is limited to the technical/payment service providers listed in Section 4.2, or where required by law (see Section 4.5).

4.4. Retention Period and Data Protection Measures

In principle, personal data is retained for as long as the account remains active and for a reasonable period after the account is deleted or deactivated, for the purposes of reconciliation, complaint resolution, or compliance with sector-specific legal retention requirements. Thereafter, the data will be deleted or anonymized. E-START applies appropriate technical and organizational measures to protect personal data against unauthorized access, use, disclosure, modification or destruction, including (but not limited to) role-based access control and password encryption.

4.5. Incident Handling and Provision of Data at the Request of State Authorities

In the event of an incident affecting Your personal data, E-START will promptly take remedial measures and fulfill its obligation to notify the competent state authorities and/or You in accordance with the procedures and time limits prescribed by the Law on Personal Data Protection No. 91/2025/QH15 and Decree No. 356/2025/ND-CP. E-START may provide personal data to competent state authorities upon lawful request in accordance with the laws of Vietnam.

5. YOUR RESPONSIBILITIES AND RIGHTS

5.1. Your Responsibilities

You are responsible for providing truthful and accurate personal data when registering for and using the Platform, keeping your login information secure, and promptly updating your information when it changes.

5.2. Your Rights

As a data subject, You have the rights set out in the Law on Personal Data Protection No. 91/2025/QH15, including: the right to be informed about the processing of your data; the right to give or refuse consent; the right to withdraw consent; the right to access, view and request correction of your data; the right to request deletion of your data where permitted by law; the right to restrict data processing where prescribed by law; the right to lodge complaints, denunciations and lawsuits; and the right to claim compensation for damages as prescribed by law. For children or persons who have lost or have limited civil legal capacity, these rights are exercised through their legal representatives.

5.3. How to Exercise Your Rights

You may exercise the rights set out in Section 5.2 through the account management functions on the Platform (if available) or by submitting a request to E-START's contact point. E-START will receive, verify and respond to requests within a reasonable time as prescribed by law.

6. COMPLAINTS AND CONTACT INFORMATION

You may submit complaints or inquiries regarding the processing of your personal data via https://estart.vn/lien-he. E-START will receive, verify and respond in accordance with its internal procedures and applicable law.

7. UPDATES TO THIS PRIVACY POLICY

This Policy may be updated to reflect changes in the Platform's functions or in applicable law. Updated versions will be published on the Platform together with their effective date.