DATA PRIVACY & COOKIES POLICY – ASL LAW

Effective Date: May 2026

This Global Data Privacy & Cookies Disclosure ("Statement") outlines our commitments to collect, use, share, and otherwise process the Personal Data of our clients, partners, and digital visitors with the highest degree of integrity. This Statement is designed to align with the laws of Vietnam as effective from time to time and the personal data protection policies of jurisdictions related to ASL LAW’s clients.

1. SCOPE AND ACCOUNTABILITY

This Statement governs the processing of Personal Data by ASL LAW ("the Firm," "We," or "Us"). The Firm acts as the "Data Controller" for information collected through our global digital platforms, legal engagements, and professional interactions.

We process information relating to:

Visitors to our websites, mobile applications, and digital portals.

Contact persons for our clients and /or prospective clients;

Contact persons for our suppliers/vendors.

Any other individuals whose information is necessary for the provision of our legal services or business operations.

2. THE LANDSCAPE OF PERSONAL DATA COLLECTION

To provide premier legal advisory services, especially for our international clientele, we collect various categories of Personal Data from direct interactions, public records, and third-party referrals.

2.1. Professional & Identificatory Information

We collect basic data such as full names, professional titles, organizational affiliations, and contact details. For international clients, this includes specific data related to family life and interests (excluding special categories) where relevant to the legal context.

2.2. Regulatory & Compliance Data

To fulfill mandatory global compliance, including Anti-Money Laundering (AML) and "Know Your Client" (KYC) requirements, we collect government-issued identifiers, passport details, dates of birth, and beneficial ownership information.

2.3. Transactional & Case-Specific Data

We process information contained within documents, correspondence, or evidence related to legal matters, transactions, or proceedings where we are advising our clients. This includes invoicing history and financial data.

2.4. Special Category Data

In limited legal circumstances and where strictly necessary for a specific service (such as labor law or litigation), we may process sensitive data including racial or ethnic origin, religious beliefs, health data, or trade union membership.

2.5. Technological & Digital Data

When interacting with our Sites, we capture IP addresses, unique device identifiers (UDID), and usage data through cookies to enhance the user experience.

3. LEGAL FOUNDATIONS FOR PROCESSING

ASL LAW processes Personal Data based on the following legal pillars:

Contractual Necessity: Processing required to perform our legal obligations and deliver services to our clients.

Regulatory Compliance: Adherence to tax reporting, identity verification, and other statutory obligations.

Legitimate Interests: Monitoring site security, fraud prevention, and managing our global client relationships.

Explicit Consent: For marketing communications and certain high-level data processing activities.

4. USE OF PERSONAL DATA

ASL LAW processes Personal Data for the specific objectives outlined below, grounded in the appropriate legal bases as required by global standards.

4.1. Delivery of Legal Services and Inquiry Management

We utilize basic, registration, client service, and device data to provide professional legal counsel and respond to client inquiries. This processing is essential for the execution of our contractual obligations with our clients.

4.2. Operational Administration and Relationship Management

We process various data categories (including marketing and financial data) to manage the Firm’s daily business operations and oversee our professional relationships with clients and suppliers. This includes issuing invoices and managing the procurement of goods and services necessary for our practice.

4.3. Digital Optimization and User Experience

To make our digital platforms more intuitive and user-friendly, we analyze device data. It is within our legitimate interests to monitor how our Sites are navigated to improve layouts and enhance the quality of the information we provide.

4.4. Information Security and System Integrity

We protect the security and functionality of our digital infrastructure by processing basic, registration, transaction, and device data. This monitoring is necessary for our legitimate interest in detecting fraud, preventing cyber-crimes, and ensuring a safe browsing environment for all users.

4.5. Professional Networking and Relationship Strengthening

ASL LAW maintains and expands its professional network by analyzing interaction and device data to better understand how our services are utilized. This helps us maintain accurate contact records and improve the overall client experience.

4.6. Targeted Marketing and Legal Updates

We use marketing, registration, and client service data to provide you with relevant professional insights, including legal alerts, invitations to conferences, webinars, or networking events tailored to your specific interests. We process this information based on our legitimate interest in providing valuable and relevant professional updates.

4.7. Regulatory Compliance and Legal Mandates

To meet our statutory obligations—such as tax reporting, "Know Your Client" (KYC) identity verification, and Anti-Money Laundering (AML) checks—we process compliance and transaction data. This is necessary to fulfill the legal requirements to which the Firm is subject.

4.8. Talent Acquisition and Recruitment

We process job applicant data to evaluate individuals for employment or contractor opportunities and to manage professional onboarding. This processing is necessary for recruitment purposes and to comply with applicable labor and employment laws.

4.9. Physical Workplace Security

For the safety of our personnel and visitors, we utilize basic data and CCTV imagery for routine security monitoring in relevant office locations.

5. USE OF ARTIFICIAL INTELLIGENCE

ASL LAW may utilize AI technologies to support the data processing activities described in this Statement. All AI integration is subject to comprehensive screening to ensure it aligns with our high ethical, legal, and security standards. Our professionals are trained in the responsible use of AI, and we strictly prohibit the use of AI for automated decision-making that results in significant legal consequences for any individual.

6. DATA SUBJECT RIGHTS

Under both Vietnamese law and international standards (such as GDPR), you possess specific rights regarding your Personal Data:

Access & Portability: You may request a copy of your data in an electronic format.

Rectification: You have the right to amend inaccurate or incomplete information.

Erasure (The Right to be Forgotten): You may request the deletion of data, subject to legal retention requirements.

Restriction & Objection: You may object to processing based on legitimate interests or request that we limit our use of your data.

Withdrawal of Consent: You may revoke consent for marketing or other optional processing at any time.

7. GLOBAL DATA DISSEMINATION & TRANSFERS

We primarily store and process Personal Data on servers located in Vietnam. However, in the course of providing our legal and consulting services, we may transfer Personal Data to (i) affiliated offices within the ASL LAW network located outside Vietnam, and (ii) trusted partners, correspondent law firms, experts, and service providers in foreign jurisdictions, where such transfer is necessary for the performance of our services to clients.

These cross-border transfers may involve jurisdictions that do not provide an equivalent level of data protection to that of Vietnam or the jurisdiction in which you are located.

To ensure an adequate level of protection for Personal Data, ASL LAW implements a combination of legal, technical, and organizational safeguards, including:

(a) Transfer Impact Assessment (TIA)

Prior to any cross-border transfer, we conduct a data transfer risk and impact assessment to evaluate:

the legal and regulatory framework of the recipient jurisdiction;

the nature, scope, context, and purposes of the processing;

the likelihood and severity of risks to data subjects’ rights and interests; and

the adequacy of safeguards implemented by the recipient.

Where necessary, we adopt supplementary measures (including encryption, access restrictions, and contractual obligations) to mitigate identified risks.

(b) Intra-Group Data Transfer Agreement (IGTA)

Transfers between ASL LAW offices are governed by internal data transfer agreements, which establish:

consistent standards of data protection across all offices;

obligations on confidentiality, data security, and restricted access;

rules on onward transfers; and

mechanisms for handling data subject requests and data breach incidents.

(c) Contractual Safeguards with Third Parties

Where Personal Data is transferred to external partners or service providers, we enter into appropriate contractual arrangements (including, where applicable, standard contractual clauses or equivalent provisions) to ensure that such recipients process Personal Data solely for specified purposes and in accordance with adequate data protection standards.

(d) Compliance with Applicable Laws

We ensure that cross-border data transfers are carried out in compliance with applicable data protection laws and, where relevant, the General Data Protection Regulation (GDPR) or other applicable regulations. Where required, we will fulfill any registration, notification, or approval procedures with competent authorities.

By providing your Personal Data to us, you acknowledge and consent to the transfer of your Personal Data across borders as described in this Policy. Where required by applicable law, you may request further details regarding the safeguards we have implemented, including a summary of the Transfer Impact Assessment or relevant contractual mechanisms, by contacting us using the details provided below.

8. COOKIES AND DIGITAL TRACKING

We utilize several categories of cookies to optimize our digital presence:

Essential Cookies: Strictly necessary for fundamental site functionality and security.

Targeting Cookies: To build a profile of your interests and show you relevant adverts on other sites.

Performance Cookies: To measure traffic and user movement, helping us improve our website’s efficiency.

Functional Cookies: To provide enhanced functionality and a more personalized browsing experience.

Marketing & Social Media Cookies: To enable social sharing tools and track content preferences across platforms.

You can manage your preferences at any time through our website’s cookie management tool or your browser settings.

9. Other Issues

9.1. What happens if you choose not to provide Personal Data?

You are not obliged to provide all Personal Data referred to in this Data Privacy & Cookies Policy to engage with our Firm. However, certain features or services may be limited or unavailable without such information. In particular, failure to provide necessary Personal Data may prevent us from responding to your inquiries, delivering legal services, or providing you with information and updates that may be relevant to your interests.

9.2. Do we carry out automated decision-making?

ASL LAW does not engage in automated decision-making processes without human involvement, including profiling, where such processing would produce legal effects concerning you or otherwise materially affect you.

9.3. How long do we retain Personal Data?

We retain Personal Data for no longer than is necessary to fulfill the purposes for which it was collected. Personal Data used for marketing purposes will generally be retained for as long as you continue to receive communications from us, unless you request otherwise. For other categories of Personal Data, retention periods will be determined in accordance with applicable laws and our internal data retention policies.

9.4. Does this Policy apply to third-party websites?

Our website may include links to external websites operated by third parties that are not affiliated with ASL LAW. This Data Privacy & Cookies Policy does not apply to such websites.

When accessing third-party sites, you will be subject to their respective privacy policies. We recommend reviewing their privacy practices before providing any Personal Data.

10. UPDATE & CONTACT

We may revise this Data Privacy & Cookies Policy periodically to reflect changes in our services, data processing practices, or applicable legal requirements. The updated version will be published on our website together with its effective date. Where required by law, we will seek your consent prior to implementing any material changes. We encourage you to review this Statement regularly to stay informed of how we protect your Personal Data.

For inquiries regarding this Policy or to exercise your rights, please contact:

LawDoc – Privacy Contact

Email: info@lawdoc.tech

Address: 12th Floor, 319 Ministry of National Defence Building, 63 Le Van Luong Street, Yen Hoa Ward, Hanoi, Vietnam

About Your Privacy

This website uses cookies. Further details are set out in our Cookies Statement. Necessary cookies (essential to make our website work) are always on. You can adjust your preferences using the 'Manage Cookies' link in the footer of our website.

When you visit any website, it may store or retrieve information on your browser, mostly in the form of cookies. This information might be about you, your preferences or your device and is mostly used to make the site work as you expect it to. The information does not usually directly identify you, but it can give you a more personalized web experience. Because we respect your right to privacy, you can choose not to allow some types of cookies. Click on the different category headings to find out more and change our default settings. However, blocking some types of cookies may impact your experience of the site and the services we are able to offer.

1. Essential Cookies

These are strictly necessary for the core functionality of our website. They are typically triggered by user actions such as managing privacy settings, logging into accounts, or completing online forms. While you can configure your browser to block these, certain sections of the site will fail to load. Notably, these cookies do not collect or store any personally identifiable data.

2. Targeting Cookies

Managed by our advertising partners, these cookies help create a profile based on your interests to deliver customized ads across the web. Rather than storing direct personal details, they function by uniquely identifying your specific hardware and browser. Opting out will not remove ads but will make them less relevant to your interests.

3. Analytics & Performance Cookies

These tools allow us to track visitors ‘counts and traffic origins so we can evaluate and enhance our site’s efficiency. They provide insights into page popularity and user navigation patterns. Because all gathered data is aggregated and anonymized, it cannot be traced back to you. Disabling these prevents us from monitoring site health and improving your user experience.

4. Functionality Cookies

This category enables advanced features and a more tailored browsing experience. These may be implemented by us or by external service providers integrated into our platform. If these are disabled, some of these specialized services and personalized features may not operate correctly.

5. Social Media & Marketing Cookies

Integrated through various social platforms, these cookies allow you to share our content within your networks. They have the capability to track your activity across multiple websites to build a comprehensive interest profile, which influences the ads and messaging you encounter elsewhere. Without these, you may find that social sharing tools are unavailable or non-functional.