Personal data policy

Who is responsible for your data

LEO Branding decides why and how the data you send through leobranding.net is processed. Questions and requests about personal data go to the contact at the bottom of this page.

What is collected

When you send the contact form: your name, the channel you want a reply on, the matching account, email address or phone number, and your message. The system also records the page language, the page the form was sent from and the time it was sent.

Your IP address is held only in server memory for about 10 minutes to stop repeated form submissions. It is not written to the database or to any log.

The website uses no advertising cookies and no third-party tracking tools. Your light or dark theme choice is stored in your own browser and is never sent to the server.

If you message through Telegram, Zalo, Facebook or email, the conversation happens on that platform and falls under its privacy policy.

Please do not send sensitive data such as health details, bank accounts or identity documents through the form. LEO Branding does not need them to advise you.

What it is used for

Reading and answering your request, asking follow-up questions about the project, and sending a proposal or quote on the channel you chose.

Your data is not sold, not shared for advertising, and you are not added to any newsletter list.

Legal basis

You give consent when you send the form. You can withdraw it at any time by sending a request to the contact at the bottom of this page. Withdrawal does not affect processing carried out before it.

Where it is stored and who else handles it

Form data is stored in a database on a server rented from OVHcloud in Singapore. Backups sit on that server and on backup storage managed by LEO Branding.

When a new request arrives, the system sends a notification containing the form content to LEO Branding's internal Telegram account so it can be answered quickly. Telegram's servers are outside Vietnam.

Your data is therefore transferred and stored outside Vietnam. Apart from these two infrastructure providers, it is not passed to anyone else unless a competent authority requires it by law.

How long it is kept

Contact requests are kept for up to 24 months after the last exchange and then deleted, including from backups as they expire.

If a request leads to a contract, the information needed to perform it is kept for the term of the contract and as required by accounting and record-keeping rules.

Your rights

Under Vietnam's Personal Data Protection Law No. 91/2025/QH15, your rights include: being informed about the processing of your data; giving or withdrawing consent; viewing and asking to correct your data; asking for it to be deleted; asking to restrict or objecting to processing; and filing complaints, denunciations or lawsuits and claiming compensation as provided by law.

When you send a request, include the channel and account you used in the form so the right data can be found. LEO Branding may ask a follow-up question to confirm it is you before acting, then responds within the time limit set by law.

How it is protected

Connections to the website are encrypted with HTTPS. Only LEO Branding's admin account can see submitted requests.

If an incident exposes your data, LEO Branding will notify you and the competent authority as required by law.

When this policy changes

The date at the top of the page changes with every revision. Changes to the purpose of use or to where data is stored are stated on this page before they take effect.