Purpose and category
Describe the user task and minimum information required. Distinguish personal, sensitive, important, business, security, credential, content, and operational-log data as qualified reviewers require.
Notice, choice, and Vietnamese review
Place approved information and choices at the relevant moment. Name the Vietnamese-language owner for clear meaning, diacritics, labels, errors, and support. Do not turn a generic banner into the only privacy control.
Operators and remote access
List who can view, change, export, administer, or support each record, including US-based remote access. Restrict roles, protect credentials, log consequential actions, and avoid copying production data into unapproved tools.
Vendors and locations
Inventory hosting, files, email, analytics, monitoring, payments, messaging, support, backups, and AI services. Record processors, subprocessors, storage, remote access, cross-border questions, contracts, security, and exit plans.
Assessment and filing ownership
Route any required impact assessment, transfer record, filing, local representative, DPO, cybersecurity, or sector conclusion to qualified owners. Engineering provides accurate system facts and implements the approved result.
Retention, rights, and incidents
Set clocks for active, closed, failed, exported, logged, and backed-up records. Define request intake, identity checks, search, correction, deletion, escalation, investigation, recovery, and communication.
Analytics belongs in the ledger.
This microsite has a separate GA4 property and records voluntary phone and email link actions. That improves site-level measurement but does not eliminate any applicable notice, consent, vendor, access, transfer, retention, security, or rights decision. Advertising and profiling are not part of the described setup.