Privacy Policy

1. Who we are

Heritage Union ("we", "us", "our") is an international relationship consultancy. The data controller for the purposes of this policy is:

You can reach us at team@heritage-union.com.

2. What we collect

If you register as a candidate, we collect: your full name, date of birth, city/province, Zalo number, email address (optional), preferred language, what you tell us about yourself and what you hope for, how you heard about us, and the record of your consent.

If you are a client or prospective client, we collect the information you give us directly — your name, contact details, and anything you share during a consultation or in correspondence — together with the results of the background check we require of every client before any introduction.

We do not collect photographs or identity documents from candidates at the registration stage.

3. Why we collect it, and our legal basis

We use this information to operate our introduction and consultancy service: to understand what you are looking for, to consider possible introductions, to communicate with you, and to meet our own legal and safety obligations.

Our legal basis for processing candidate data is your consent, given at the point of registration. You may withdraw that consent at any time — see Section 7.

4. Where your data is stored

Candidate registration data is stored with Supabase, in a database hosted in Singapore. Our website is hosted with Netlify, and our email communications are sent through Resend — both based in the United States. This means your data may be processed outside Vietnam, which you are asked to separately consent to when you register.

5. How long we keep it

We keep candidate data for as long as your registration is active, or until you ask us to delete it. If you withdraw your registration, we remove your details from active consideration and delete them entirely within 30 days.

6. Your rights

You have the right to:

• Access the personal data we hold about you
• Correct any information that is inaccurate or incomplete
• Withdraw your registration and consent at any time
• Request deletion of your data

To exercise any of these rights, email team@heritage-union.com, or — if you are a candidate — use our withdraw page.

7. Withdrawing your registration

Candidates may withdraw their registration at any time, for any reason, with no explanation required, using the withdraw page. We will delete your data within 30 days of a withdrawal request.

8. Legal frameworks

We aim to handle your data in a manner consistent with Vietnam's Personal Data Protection Law and the UK General Data Protection Regulation (UK GDPR), regardless of where you are located.

9. Contact

Questions about this policy, or about your data, can be sent to team@heritage-union.com.