This is a demo site. Sổ Sách Sáng is a fictional business built by THE NEXOVA to show what a small firm’s website can look like. The forms on it exist only to demonstrate how they work. Please do not enter your real tax ID, phone number or other real details. The policy below is written as it would be for a real office.

Who is responsible

The data controller is Công ty TNHH Dịch vụ Kế toán Sổ Sách Sáng, 3rd floor, 116 Trần Quang Khải, Tân Định ward, Ho Chi Minh City. Send any request about personal data to xinchao@sosachsang.demo. The person responsible is Nguyễn Thị Hạnh, our chief accountant.

This policy follows Vietnam’s Personal Data Protection Law No. 91/2025/QH15, in force since 1 January 2026, and Decree 356/2025/ND-CP, which implements it. Decree 356 replaced Decree 13/2023/ND-CP, the rule that applied before 1 January 2026.

What we collect

Contact and quote form

Name and phone number (required), so we can call you back.
Email (optional), to send a quote and confirm we received your request.
What you need, your type of business, tax ID and any notes you type, so the accountant can prepare before calling.
The time you ticked the box agreeing to be contacted.

Booking form

Name, phone, email and notes.
The date, time and accountant you chose.

Technical details sent with each form

Your IP address and browser type. We use the IP address to limit how many requests can be sent in an hour, which blocks spam and automated submissions. We do not use it to identify you or follow you across other sites.
If Cloudflare Turnstile spam protection is switched on, your browser sends a check token to Cloudflare to confirm the sender is not a bot.

We do not collect sensitive personal data through the website. Please do not send ID cards, bank statements or tax passwords through a form. Those are exchanged only after a contract is signed, through the channel your accountant sets up.

Why we use it

To call you back, send a quote and arrange the consultation you asked for.
To send a confirmation email, if you gave an address.
To stop duplicate submissions and spam.

We do not sell, rent or share your details for advertising. We do not send promotional messages unless you sign up for them.

We process this data on the basis of your consent, given when you tick the box before sending. You can withdraw consent at any time by email; that does not affect anything already processed.

How long we keep it

Requests that do not lead to a contract: deleted 12 months after you sent them, together with the IP address and technical details.
Past bookings: deleted after 12 months.
If you become a client, your details move into the client file and are kept for the length of the contract plus whatever retention period accounting and tax law requires.
If you ask us to delete earlier, we do, except for anything the law obliges us to keep.

Who can see it

The five accountants in the office. New requests arrive as notifications in the office mailbox.
Cloudflare, Inc., which hosts the website, stores the form database and provides spam protection. Cloudflare processes data on our instructions; its servers may be outside Vietnam.
The provider of our office email, which carries notifications and confirmation emails.
Competent state authorities, where the law requires it.

Cookies and analytics

The website uses no tracking or advertising cookies. We count page views with Cloudflare Web Analytics, which sets no cookies and builds no user profiles. We do not use Google Analytics, the Facebook Pixel or any advertising tags.

Your rights

Under the Personal Data Protection Law you can ask how your data is processed, see it, have it corrected or deleted, restrict or object to processing, withdraw consent, and complain. Email xinchao@sosachsang.demo and include the phone number you used on the form so we can find the record. We acknowledge within 2 working days and respond within 10 working days, and never later than the law allows.

If a breach exposes personal data, we will tell the people affected and the competent authority as the law requires.

Changes

When this policy changes, the date at the top changes with it. If we want to use data for a materially different purpose, we will ask for your consent again.

Sources: Personal Data Protection Law 2025, No. 91/2025/QH15 (Vietnamese); Decree 356/2025/ND-CP (Vietnamese). Updated 4 October 2026.