Privacy policy

Who we are

Hoahwa Agency Limited ("Hoahwa", "we") is a web design, development, and growth agency based at DHT6, Tan Hung Thuan, Ho Chi Minh City, Vietnam. For the purposes of GDPR we are the data controller for personal data collected through this website. You can reach us about anything in this policy at hello@hoahwa.com.

What we collect and why

We collect only what we need to respond to you and to run this site:

• Contact and project enquiries — name, phone number, email address, the services and budget range you select, and anything you write in the message field. We use this to reply to your enquiry and prepare a proposal (legal basis: steps prior to a contract, GDPR Art. 6(1)(b), and our legitimate interest in responding to business enquiries).
• Newsletter — your email address, used only to send the updates you signed up for (legal basis: consent, which you can withdraw in any email or by writing to us).
• Cookie preferences — a record of the consent choices you make in our cookie banner, stored on your device (legal basis: legal obligation to demonstrate consent).
• Analytics and marketing data — page views, approximate location, and device information, collected only if you opt in to the Analytics or Marketing cookie categories. See the Cookie policy for the exact tools and lifetimes.

What we do not do

• We do not sell personal data, and we do not share it for cross-context behavioural advertising unless you have opted in to Marketing cookies.
• We do not run analytics, advertising pixels, or other non-essential trackers before you consent.
• We do not knowingly collect data from children under 16; this site is aimed at businesses.

Who we share data with

We use a small number of service providers to operate the site, and they only process data on our instructions:

• Website hosting and content delivery for serving this site.
• A form-processing service that delivers your contact enquiry to our inbox.
• Analytics and advertising platforms (such as Google Analytics, Meta, or LinkedIn) — only when you have opted in to the matching cookie category.
• Professional advisers or authorities where the law requires it.

International transfers

We are based in Vietnam and our team works from Vietnam, so data you send us is processed there. Some of our service providers (hosting, analytics) operate globally, including in the United States and the EU. Where data of EU/EEA visitors is transferred outside the EEA, we rely on providers that offer recognised safeguards such as the EU Standard Contractual Clauses or an adequacy decision. Transfers of Vietnamese personal data abroad are handled in line with Vietnam's cross-border transfer requirements.

How long we keep data

• Contact enquiries — up to 24 months after our last exchange, or longer if we enter into a contract.
• Newsletter emails — until you unsubscribe.
• Cookie consent records — 12 months, after which we ask again.
• Analytics data — per the retention configured with the provider, at most 24 months.

Your rights (GDPR — EU/EEA and UK visitors)

You can ask us at any time to:

• Access the personal data we hold about you, and receive a copy.
• Correct inaccurate data or complete incomplete data.
• Delete your data ("right to be forgotten").
• Restrict or object to processing, including any direct marketing.
• Receive your data in a portable format.
• Withdraw consent at any time, without affecting processing that happened before withdrawal — for cookies, use the cookie icon in the bottom-left corner of any page.
• Complain to your local supervisory authority if you believe we have mishandled your data.

Your rights (California — CCPA/CPRA)

If you are a California resident, you have the right to know what personal information we collect, to access and correct it, to request deletion, and to opt out of the sale or sharing of personal information. We do not sell personal information. To opt out of sharing for cross-context behavioural advertising, switch on "Do Not Sell or Share My Personal Information" in our cookie preferences, or email us. We honour opt-out preference signals such as Global Privacy Control. We will never discriminate against you for exercising these rights.

Your rights (Vietnam — personal data protection law)

If you are in Vietnam, you have the rights set out in Vietnam's personal data protection rules, including the right to be informed, to give and withdraw consent, to access and correct your data, to request deletion, to restrict or object to processing, to complain and claim damages, and to request data provision. Requests can be sent to the contact below and we will respond within the statutory time limit.

Security

The site is served over HTTPS, form submissions are encrypted in transit, and access to enquiry data is limited to the team members who need it. No method of transmission or storage is 100% secure, but we take proportionate measures to protect your data and will notify you and the relevant authority of any breach where the law requires it.

Changes to this policy

When we change this policy we will update the date at the top, and for significant changes we will flag it on the site. Earlier versions are available on request.

Contact us

Hoahwa Agency Limited, DHT6, Tan Hung Thuan, Ho Chi Minh City, Vietnam. Email: hello@hoahwa.com. We aim to answer all privacy requests within 30 days (or sooner where local law requires).