Last updated: 11 September, 2026

NSC Software Co., Ltd (“NSC”, “we”, “us”) operates nscsoftware.com. This policy explains what personal data we collect through this website, why we collect it, who we share it with, and the rights you have over it.

We are the data controller for the personal data described in this policy.

NSC Software Co., Ltd Business Registration Number: 0110524817 Level 22, PVI Tower, Pham Van Bach, Cau Giay, Hanoi, Vietnam Privacy enquiries: [email protected]

Contact point for the EU and EEA: Am Hauptbahnhof 16, D-60306 Frankfurt am Main, Germany

This policy covers our website only. It does not cover personal data we process on behalf of clients under a service contract, which is governed by the data processing terms of that contract.

1. Personal data we collect

• Information you give us. When you submit a contact form or email us, we collect your name, business email address, telephone number, company name, and the content of your message and any attachments.
• Information collected automatically. When you visit the site, our servers and analytics tools record your IP address, browser type and version, operating system, referring page, pages viewed, time spent, and approximate location derived from your IP address.
• Business identification data. We use Apollo.io to identify organisations visiting our website. For visitors in the United States, this may include identification at an individual level. For visitors in Australia, the United Kingdom and Germany, identification is at company level only. This processing runs only where you have given consent through our cookie banner.

We do not operate user accounts on this website, we do not display advertising, and we do not sell personal data.

2. Why we process your data, and on what legal basis

Purpose	Data used	Legal basis (GDPR / UK GDPR)
Responding to your enquiry	Contact details, message content	Steps taken at your request prior to entering a contract (Art. 6(1)(b))
Operating and securing the website	IP address, technical log data	Legitimate interests in keeping the site available and secure (Art. 6(1)(f))
Measuring how the site is used	Analytics identifiers, page and session data	Consent (Art. 6(1)(a))
Identifying organisations that visit the site	IP address, company data, and for US visitors individual-level data	Consent (Art. 6(1)(a))
Sending you information about our services	Business contact details	Consent, or legitimate interests in business-to-business marketing where permitted by local law (Art. 6(1)(a) or 6(1)(f))

 

Where we rely on consent, you may withdraw it at any time through the cookie settings on this site or by contacting us. Withdrawal does not affect processing carried out before the withdrawal.

3. Cookies and tracking

We use cookies and similar technologies for three purposes: making the site work, measuring how it is used, and identifying visiting organisations.

Strictly necessary cookies run without consent because the site cannot function without them. All other cookies, including analytics and visitor identification, are set only after you accept them through our cookie banner. You can change or withdraw your choice at any time through the cookie settings link on this site.

The tools we use are:

• Google Analytics 4 and Google Tag Manager for traffic measurement and tag management
• Apollo.io for organisation-level visitor identification, as described in section 1
• Cloudflare for content delivery and protection against malicious traffic
• Google reCAPTCHA for spam protection on forms, which is subject to Google’s own privacy policy

Details of each cookie, its purpose and its lifetime are set out in our Cookies Policy.

4. Who we share your data with

We share personal data only with service providers who process it on our instructions, and only to the extent needed to deliver the service:

• Website hosting and content delivery providers
• Analytics and tag management providers
• Visitor identification and customer relationship management providers
• Email delivery providers

Each is bound by a written agreement restricting their use of the data. We do not sell personal data, and we do not share it with advertising networks.

We may also disclose personal data where required by law, court order, or a lawful request by a public authority, and where necessary to establish, exercise or defend legal claims.

5. International transfers

NSC is established in Vietnam and has offices in Australia, the United States and Germany. Personal data collected through this website is accessed from Vietnam.

Vietnam is not covered by an adequacy decision of the European Commission or the United Kingdom. Where personal data of individuals in the EEA or the United Kingdom is transferred to Vietnam, we rely on the European Commission’s Standard Contractual Clauses, together with the UK International Data Transfer Addendum where applicable, and we apply supplementary technical and organisational measures.

A copy of the transfer mechanism we rely on is available on request.

6. How long we keep your data

• Enquiry and contact form submissions: 120 days from your last contact with us
• Website analytics data: as configured in Google Analytics, currently 3 months.
• Marketing contact details: until you withdraw consent or object

Where we are required to keep records for tax, accounting or legal purposes, we retain them for the period required by the applicable law.

7. How we protect your data

NSC operates an information security management system certified to ISO/IEC 27001 and a quality management system certified to ISO 9001. Our controls have also been examined under a SOC 2 report. These certifications are verified by external audit.

No transmission over the internet is completely secure. We apply appropriate technical and organisational measures to protect personal data, but we cannot guarantee absolute security.

8. Your rights

If you are in the EEA or the United Kingdom, you have the right to access your personal data, to have inaccurate data corrected, to have data erased, to restrict or object to processing, to receive your data in a portable format, and to withdraw consent at any time.

The first copy of your personal data is provided free of charge. We respond within one month, and may extend this by a further two months for complex requests, in which case we will tell you within the first month.

You also have the right to lodge a complaint with your local supervisory authority.

If you are a California resident, you have the right to know what personal information we collect, to request deletion, to request correction, to opt out of the sale or sharing of personal information, and not to be discriminated against for exercising these rights. NSC does not sell or share personal information as those terms are defined under the CCPA. We respond to verifiable requests within 45 days, extendable by a further 45 days where reasonably necessary.

If you are in Australia, you may request access to and correction of your personal information under the Australian Privacy Principles, and may complain to the Office of the Australian Information Commissioner.

If you are in Vietnam, you have the rights set out in the Law on Personal Data Protection (Law No. 91/2025/QH15) and Decree No. 356/2025/ND-CP, including the right to know, to consent and withdraw consent, to access, to correct, to delete, to restrict processing, to object, and to complain.

To exercise any of these rights, contact us at [email protected]. We may ask for information to verify your identity before acting on a request.

9. Children

This website is directed at business audiences and is not intended for children. We do not knowingly collect personal data from anyone under 16, or under the minimum age set by the law applicable to you where that age is lower. If you believe a child has provided us with personal data, contact us and we will delete it.

10. Changes to this policy

We may update this policy to reflect changes in our practices or in the law. The date at the top of this page shows when it was last revised. Material changes will be notified on this page before they take effect.

11. Contact

Questions about this policy or about how we handle personal data:

NSC Software Co., Ltd Level 22, PVI Tower, Pham Van Bach, Cau Giay, Hanoi, Vietnam.

EU and EEA contact point: Am Hauptbahnhof 16, D-60306 Frankfurt am Main, Germany.