Privacy Policy

Effective Date: July 14, 2026

This Privacy Policy describes how BACODO, a brand operated by Công ty Trách nhiệm hữu hạn Kỹ thuật số Lê Sa, a Vietnamese limited liability company ("BACODO", "the Company", "we"), collects, uses, stores, shares, and protects personal information when users access the website, make contact, or use BACODO's services.

By accessing the website, submitting information, requesting a quote, creating a project, or using BACODO's services, users acknowledge that they have read and understood this Privacy Policy.

1. Scope of Application

This Policy applies to information collected through:

BACODO's website.
Contact forms and quote requests.
Payment pages.
Portals or project management areas.
Email, calls, and support channels.
Website, web application, mobile application, and software design services.
Maintenance, hosting, integration, and technical support services.
BACODO's marketing and communication activities.

This Policy does not apply to third-party websites, applications, or services that BACODO does not own or control.

2. Information We Collect

Depending on how users interact with BACODO, we may collect the following types of information:

2.1. Identification and contact information

Full name.
Business or organization name.
Email address.
Phone number.
Mailing or billing address.
Job title and professional information.
Country or region of residence.

2.2. Project information

Project requirements and goals.
Logos, brand assets, and identity guidelines.
Content, images, video, and materials provided by the Customer.
Technical information, integration accounts, and system configuration.
Feedback, revision requests, and communication history.
Files uploaded during project delivery.

2.3. Payment information

BACODO may collect:

Payer name.
Billing address.
Transaction amount and type.
Payment status.
Transaction ID.
The last four digits of a card, if provided by the payment provider.
Invoice and payment history.

BACODO does not directly store full payment card numbers, CVV security codes, or bank account login credentials. Payment transactions are processed by third-party payment service providers.

2.4. Technical and usage information

When users access the website, we may automatically collect:

IP address.
Device type.
Browser and operating system.
Date, time, and duration of visits.
Pages visited.
Referral source.
Website interaction data.
System log information.
Cookie identifiers and similar technologies.

2.5. Communication content

We may retain communication content through:

Email.
Contact forms.
Support systems.
Project management tools.
Business messaging.
Calls or online meetings, where permitted and appropriately disclosed.

3. How We Collect Information

BACODO may collect information:

Directly from users or Customers.
When users fill out a form on the website.
When Customers request a quote or make a payment.
When Customers provide materials for a project.
When users contact the support team.
Automatically through cookies, server logs, and analytics tools.
From payment providers or third-party platforms.
From public sources or legitimate business partners.

4. Purposes of Use

BACODO may use personal information to:

Provide and manage services.
Analyze requirements and prepare quotes.
Initiate and deliver projects.
Verify identity and contact information.
Process payments and issue invoices.
Manage accounts and access rights.
Send notifications about project progress.
Provide technical support.
Respond to requests, complaints, or questions.
Maintain, fix, and improve services.
Detect fraud, abuse, or security incidents.
Comply with legal, tax, and accounting obligations.
Protect BACODO's lawful rights, property, and interests.
Send marketing information where users have consented or as permitted by law.

We only collect and use information to the extent necessary for the purposes stated in this Policy.

5. Legal Basis for Processing

Depending on the applicable jurisdiction, BACODO may process personal information based on one or more of the following:

Performance of a contract or preparation to enter into a contract.
User consent.
BACODO's legitimate business interests.
Compliance with legal obligations.
Fraud prevention and protection of system security.
Establishment or defense of legal claims.

Users may withdraw consent for consent-based activities, but withdrawal does not affect the lawfulness of processing carried out before the withdrawal.

6. Cookies and Tracking Technologies

BACODO may use cookies and similar technologies to:

Keep the website functioning.
Remember user preferences.
Secure login sessions.
Analyze traffic.
Measure the effectiveness of content and campaigns.
Improve user experience.
Detect unusual activity.

Cookie types may include:

Essential cookies.
Functional cookies.
Analytics cookies.
Performance cookies.
Advertising or marketing cookies.

Users may manage or disable cookies through their browser or the cookie management tool on the website. Disabling certain cookies may limit website functionality.

7. Sharing of Information

BACODO does not sell personal information for money.

We may share information with the following parties to the extent necessary:

Authorized employees, developers, and contractors.
Hosting and infrastructure providers.
Payment service providers.
Email and customer support providers.
Analytics tool providers.
Security and anti-fraud providers.
Legal, accounting, and audit advisors.
Government authorities upon lawful request.
A buyer, investor, or successor entity in the event of a restructuring, merger, or business transfer.

Recipients are only permitted to use information to the extent necessary to provide services or fulfill legal obligations.

8. Third-Party Service Providers

BACODO may use third-party providers, including but not limited to:

Cloudflare.
Amazon Web Services.
Vercel.
Google.
Microsoft.
Apple.
Stripe.
PayPal.
Zoho.
Firebase.
Supabase.
OpenAI.
Anthropic.
Gemini.

Processing of information by these providers may be governed by their own privacy policies and terms.

BACODO selects providers suited to its operational needs but does not control the entire independent operations of third parties.

9. Customer Project Data

For some projects, BACODO may process end-user data on behalf of the Customer.

In such cases:

The Customer determines the purpose and means of data processing.
BACODO only processes data according to the Customer's lawful requests and instructions.
The Customer is responsible for ensuring an appropriate legal basis exists for collecting and processing the data.
The parties may enter into a separate Data Processing Agreement if necessary.

BACODO does not use the Customer's end-user data for its own purposes other than providing, maintaining, securing, or supporting the service, unless permitted by law.

10. Data Security

BACODO applies reasonable administrative, technical, and organizational measures to protect personal information, including:

Access controls.
Data encryption where appropriate.
Use of secure connections.
Account authentication.
System backup and monitoring.
Access logging.
Restriction of internal access.
Assessment and remediation of security risks.

However, no electronic system or data transmission method is completely secure. BACODO cannot guarantee that unauthorized access will never occur.

11. Data Incidents

Upon discovering a security incident that may affect personal information, BACODO will:

Investigate and contain the incident.
Take steps to mitigate damage.
Record and assess the scope of impact.
Notify individuals, Customers, or authorities where required by law.

The Customer is responsible for promptly notifying BACODO upon discovering any sign that their account, login credentials, or system may have been compromised.

12. Data Retention Period

BACODO retains personal information only for as long as necessary to:

Provide services.
Complete projects.
Carry out warranty and support.
Maintain payment records.
Comply with accounting, tax, and legal obligations.
Resolve disputes.
Prevent fraud.
Protect the Company's lawful interests.

Retention periods may vary depending on the type of information, the purpose of processing, and legal requirements.

When information is no longer needed, BACODO may delete, anonymize, or securely archive it according to internal procedures.

13. International Data Transfers

Because BACODO operates in Vietnam and may use service providers worldwide, personal information may be processed or stored in a country other than the user's country of residence.

When transferring data internationally, BACODO will apply reasonable measures under applicable law to protect personal information.

14. User Rights

Depending on their place of residence and applicable law, users may have the following rights:

Request to know what information BACODO is collecting.
Request access to personal information.
Request correction of inaccurate information.
Request deletion of information.
Request restriction of certain processing activities.
Object to certain processing activities.
Withdraw consent.
Request data in a usable format.
Opt out of receiving marketing information.
Lodge a complaint with a competent data protection authority.

Some requests may be limited where BACODO needs to retain information to comply with legal obligations, perform a contract, protect lawful interests, or resolve disputes.

15. Privacy Rights of California Residents

If California law applies, California residents may have the right to:

Know the categories of personal information collected.
Know the source and purpose of collecting information.
Know the parties information is shared with.
Request access to or deletion of information.
Request correction of inaccurate information.
Opt out of the sale or sharing of personal information, where applicable.
Not be discriminated against for exercising privacy rights.

BACODO does not sell personal information for money.

If BACODO uses information for cross-platform behavioral advertising within the scope of California law, users may submit an opt-out request using the contact information provided in this Policy.

16. Rights of Users in the European Economic Area and United Kingdom

Where the European Union's General Data Protection Regulation, United Kingdom law, or equivalent regulations apply, users may have the right to:

Access data.
Correct data.
Erase data.
Restrict processing of data.
Object to processing.
Receive and transfer data.
Withdraw consent.
Lodge a complaint with a supervisory authority.

BACODO will handle valid requests within the timeframe required by applicable law.

17. Non-Discrimination

BACODO will not deny service, charge unreasonable fees, or provide a lower quality of service solely because a user exercised a lawful privacy right.

This provision does not prevent BACODO from offering different prices or services where such differences are permitted by law and reasonably related to the value of the data or the scope of service.

18. Verifying Privacy Requests

To protect personal information, BACODO may require the person submitting a request to:

Confirm their email address.
Provide appropriate identifying information.
Verify their relationship to the project or account.
Provide a letter of authorization if the request is submitted through a representative.

BACODO may deny requests that cannot be verified, appear fraudulent, are excessive, or fall outside the scope of applicable law.

19. Children's Information

BACODO's website and services are not directed to children under 13, and BACODO does not knowingly collect personal information directly from children under 13.

If BACODO discovers that it has collected a child's information without valid parental or guardian consent, it will take reasonable steps to delete that information.

For Customer projects involving content or users that are children, the Customer is responsible for providing prior notice and ensuring compliance with applicable laws.

20. Marketing Communications

BACODO may send marketing emails or information when:

Users have signed up to receive information.
Users have given consent.
Users are current Customers and sending the information is permitted by law.

Users may opt out of marketing communications by:

Clicking the unsubscribe link in an email.
Changing account preferences.
Contacting BACODO directly.

Opting out of marketing does not affect necessary notices related to payment, security, contracts, or project progress.

21. Third-Party Links

BACODO's website may contain links to third-party websites or services.

BACODO is not responsible for the content, data processing practices, or privacy policies of those parties.

Users should read the privacy policy of each service before providing personal information.

22. Changes to This Privacy Policy

BACODO reserves the right to amend this Privacy Policy to reflect:

Changes in business operations.
Changes in technology.
Changes in services.
Changes in law.
Changes in how information is processed.

The new version will be published on the website along with an updated effective date.

For material changes, BACODO may provide notice through the website, email, or other appropriate means.

23. Privacy Contact

To request access, correction, or deletion of information, or to ask questions about this Privacy Policy, please contact:

BACODO
Legal owner: Công ty Trách nhiệm hữu hạn Kỹ thuật số Lê Sa
Tax code: 0312784374
Address: Ground floor, 39/19 Nguyen Trai, Ben Thanh Ward, Ho Chi Minh City, Vietnam
Phone: 0968538583
Email: privacy@bacodo.com
Website: https://bacodo.com

When submitting a request, users should provide sufficient information for BACODO to verify and process the request.

24. User Acknowledgment

By continuing to access the website, providing information, or using BACODO's services, users acknowledge that they have read and understood this Privacy Policy.