Last updated: [January 9, 2026]

1. Introduction 

DEHA DIGITAL SOLUTIONS (“DEHA DS”, “we”, “us”, or “our”) is committed to protecting the privacy and personal data of our customers, partners, employees, job applicants, and website users. 

This Privacy Policy describes how we collect, use, store, disclose, and protect personal data in compliance with applicable data protection laws, including but not limited to: 

• Vietnam Decree No. 13/2023/ND-CP on Personal Data Protection 
• Act on the Protection of Personal Information of Japan (APPI) 
• Personal Data Protection Act 2012 of Singapore (PDPA) 
• Other applicable data protection regulations in the jurisdictions where we operate 

DEHA DIGITAL SOLUTIONS is a subsidiary of DEHA Vietnam and operates primarily in Vietnam and Japan, with affiliated companies within the DEHA Group located in Singapore and Japan. 

2. Scope of Application 

This Privacy Policy applies to all personal data processed by DEHA in connection with: 

• Users visiting our website 
• Customers and business partners 
• Job applicants and candidates 
• Individuals participating in events, marketing activities, or communications 
• Any individual who contacts DEHA through lawful channels 

This Policy applies to personal data collected, stored, processed, or transferred within Vietnam, Japan, and Singapore, including cross-border data processing activities. 

3. Personal Data We Collect 

Depending on the nature of our relationship, we may collect and process the following categories of personal data, as defined under applicable data protection laws: 

• Identification data: full name, nationality, job title 
• Contact data: email address, phone number, business address 
• Business information: company name, industry, project-related information 
• Recruitment data: CVs, education, employment history 
• Technical data: IP address, device type, browser, website usage data 
• Other information voluntarily provided by the data subject 

We do not intentionally collect sensitive personal data (as defined under Decree 13/2023/ND-CP and equivalent laws), unless strictly necessary and subject to explicit consent and lawful requirements. 

4. Purposes and Legal Basis of Processing 

We process personal data for lawful and legitimate purposes, including: 

• Responding to inquiries and providing services 
• Entering into and performing contracts 
• Recruitment and human resource management 
• Customer relationship management (CRM) 
• Improving our services, products, and website 
• Ensuring system security and fraud prevention 
• Complying with legal obligations and regulatory requirements 
• Other purposes with the explicit consent of the data subject 

Processing activities are based on appropriate legal grounds, such as consent, contractual necessity, legitimate interests, or legal obligations, as determined by applicable law. 

5. Methods of Data Collection

We collect personal data through lawful means, including: 

• Website contact forms 
• Email, phone calls, and direct communications 
• Contracts and cooperation agreements 
• Job application submissions 
• Cookies and analytics tools 
• Internal CRM and management systems 
• Authorized third-party service providers

6. Data Sharing and Disclosure

6.1. Within the DEHA Group 

Personal data may be shared with affiliated companies within the DEHA Group, including entities located in Vietnam, Japan, and Singapore, for legitimate business operations, management, and service delivery. 

• Such sharing is conducted in compliance with: 
• Articles 17–20 of Vietnam Decree 13/2023/ND-CP 
• Article 23 of the Japanese APPI 
• Sections 24 and 26 of the Singapore PDPA 

6.2. Third-Party Service Providers 

We may disclose personal data to trusted third parties, including: 

• IT and cloud service providers 
• System maintenance and security vendors 
• Legal, financial, and audit consultants 
• Project partners, where necessary 

All third parties are contractually bound by confidentiality and data protection obligations (e.g., NDA, DPA). 

6.3. Legal and Regulatory Disclosure 

We may disclose personal data where required by: 

• Vietnamese authorities 
• Japanese or Singaporean regulatory bodies 
• Courts or competent law enforcement agencies 

7. Cross-Border Data Transfers

Due to our multinational operations, personal data may be transferred to and processed in Vietnam, Japan, and Singapore.

Cross-border data transfers are conducted in accordance with:

• Articles 25, 26, and 31 of Vietnam Decree 13/2023/ND-CP
• APPI regulations on overseas data transfers
• PDPA Singapore cross-border transfer obligations

We ensure that:

• Adequate safeguards are in place
• Appropriate contractual protections are implemented
• Consent is obtained where required by law

8. Data Retention

We retain personal data only for as long as necessary to fulfill the purposes for which it was collected, including:

• Contractual obligations
• Legal and regulatory requirements
• Legitimate business purposes
• Upon expiration of the retention period, personal data will be securely deleted or anonymized.

9. Rights of Data Subjects

In accordance with applicable data protection laws, data subjects have the right to:

• Be informed about data processing activities
• Give or withdraw consent
• Access their personal data
• Request correction or updates
• Request deletion (subject to legal limitations)
• Restrict or object to data processing
• Lodge complaints with competent authorities

DEHA will respond to valid requests within the timeframe prescribed by law.

10. Data Security Measures

We implement appropriate technical and organizational measures to protect personal data, including:

• Role-based access control
• Data encryption during transmission
• Regular system monitoring and backups
• Firewalls and intrusion prevention systems
• Employee training on data protection and information security

Our security practices are aligned with internationally recognized standards such as ISO/IEC 27001, where applicable.

11. Cookies and Tracking Technologies

Our website may use:

• Essential cookies
• Analytics cookies (e.g., Google Analytics)
• Server logs

Users may manage or disable cookies through browser settings.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in legal requirements or business operations. The latest version will always be published on our website.

13. Contact Information

For any questions, requests, or complaints regarding personal data protection, please contact:

DEHA DIGITAL SOLUTIONS
Website: https://deha-soft.com
Email: info@deha-soft.com