Privacy Policy

Last updated: 25.06.2026

This Privacy Policy explains how HUBERT AND PARTNERS CO., LTD. (“Hubert + Partners”, “we”, “us”, “our”) collects, uses, shares and protects personal data when you visit https://hubert.partners, contact us, apply for a role, or otherwise interact with us.

Because we offer our services to clients and individuals in the European Union and the wider European market, this policy is written to meet the standard of the EU General Data Protection Regulation (GDPR). As a company registered in Vietnam, we also comply with Vietnam’s Personal Data Protection Law (Law No. 91/2025/QH15, “PDPL”). Where your local law (for example, UK GDPR) grants you additional rights, those rights also apply.

1. Who is responsible for your data (Data Controller)

The data controller responsible for your personal data is:

CONG TY TNHH HUBERT AND PARTNERS
HUBERT AND PARTNERS CO., LTD.
9B Phung Khac Khoan, Sai Gon,
Ho Chi Minh City, Vietnam
Tax code (MST): 0317618437

Privacy contact / Data Protection Officer: info@hubert.partners
General email: info@hubert.partners

2. What personal data we collect, why, and on what legal basis

We only collect the data we need for the purposes described below. The “legal basis” column refers to Article 6 GDPR.

a) When you visit our website (server logs & security)

  • Data: IP address, browser type and version, operating system, referring page, date and time of access, pages viewed.
  • Purpose: to deliver the website securely, ensure stability, detect and prevent attacks or misuse.
  • Legal basis: our legitimate interest in operating a secure, functioning website (Art. 6(1)(f) GDPR).
  • Retention: 90 days for server logs

b) Cookies and analytics

  • Data: cookie identifiers, usage and interaction data, approximate location, device data. See Section 5 for detail.
  • Purpose: to understand how the site is used and to improve it.
  • Legal basis: your consent (Art. 6(1)(a) GDPR), collected via our cookie banner. Strictly necessary cookies rely on our legitimate interest.
  • Retention: for the lifetime of each cookie (see Section 5) or until you withdraw consent.

c) When you contact us (contact form, email, phone)

  • Data: your name, email address, company, phone number (if provided), and the content of your message.
  • Purpose: to respond to your enquiry and manage our communication with you.
  • Legal basis: steps taken at your request prior to entering a contract, or performance of a contract (Art. 6(1)(b) GDPR); otherwise our legitimate interest in responding to enquiries (Art. 6(1)(f) GDPR).
  • Retention: for as long as needed to handle your request, and afterwards as required by law.

d) Newsletter / marketing emails

  • Data: email address, and any name or preferences you provide.
  • Purpose: to send you updates, insights or news you have asked to receive.
  • Legal basis: your consent (Art. 6(1)(a) GDPR). You can unsubscribe at any time via the link in every email.
  • Retention: until you unsubscribe or withdraw consent.

e) Job applicants and careers

  • Data: the information in your CV, cover letter, portfolio, contact details, and any data shared via LinkedIn or by email.
  • Purpose: to assess your application and manage the recruitment process.
  • Legal basis: steps prior to a possible employment contract (Art. 6(1)(b) GDPR) and our legitimate interest in recruitment (Art. 6(1)(f) GDPR); for any sensitive data, your explicit consent.
  • Retention: for the duration of the process and up to 6 months after a decision, or longer with your consent for future roles

f) Clients and business contacts

  • Data: name, role, business contact details, correspondence, and contract/project-related information.
  • Purpose: to deliver our services, manage projects, invoicing and our business relationship.
  • Legal basis: performance of a contract (Art. 6(1)(b) GDPR), legal obligations such as tax and accounting (Art. 6(1)(c) GDPR), and our legitimate interest in managing client relationships (Art. 6(1)(f) GDPR).
  • Retention: for the duration of the relationship and the statutory retention periods that apply afterwards (e.g. accounting records).

g) Social media

If you interact with us on LinkedIn or Instagram, those platforms process your data under their own privacy policies. We see only the information those platforms make available to us (e.g. your public profile, messages you send us).

3. Where your data is processed and international transfers

We are based in Vietnam, and some of our service providers may be located in the EU, the United States, or elsewhere. This means your personal data may be transferred outside your home country, including from the EU/EEA to Vietnam, which the EU does not currently recognise as providing an “adequate” level of data protection.

When we transfer personal data out of the EU/EEA, we rely on appropriate safeguards, such as:

  • the EU Standard Contractual Clauses (SCCs) with the relevant provider or recipient; and/or
  • a permitted derogation under Art. 49 GDPR — for example, where a transfer is necessary to take steps at your request before entering a contract, or to perform a contract with you (such as responding to an enquiry you have submitted).

As a Vietnamese company, cross-border transfers of personal data are also subject to the requirements of Vietnam’s PDPL.

4. Who we share your data with

We do not sell your personal data. We share it only with:

  • Service providers (processors) who help us run our business and website under a data processing agreement, including:
    • Website hosting / infrastructure: Hostinger
    • Analytics: [e.g. Google Analytics — confirm or replace]
    • Web fonts / embedded content: Google Fonts, Instagram, TikTok, YouTube for case-study video
    • Content delivery / security (CDN): Cloudflare
  • Professional advisers (lawyers, accountants, auditors) where necessary.
  • Authorities or third parties where we are legally required to do so, or to protect our rights.

Embedded content from other websites (e.g. videos) behaves as if you had visited that website directly and may set its own cookies and collect data under its own policy.

5. Cookies and tracking

Our website uses cookies and similar technologies. We group them as follows:

  • Strictly necessary cookies — required for the site to function (e.g. security, load balancing, remembering your cookie choices). These do not require consent.
  • Analytics/performance cookies — help us understand how the site is used. G4A Google Analytics

When you first visit, our cookie banner lets you accept or reject non-essential cookies. You can change or withdraw your choice at any time via [link to your cookie settings]. You can also block or delete cookies in your browser settings, though some features may then not work.

6. How long we keep your data

We keep personal data only for as long as necessary for the purposes set out above, and then delete or anonymise it — unless we are legally required to keep it longer (for example, tax and accounting records under Vietnamese and applicable law). The indicative retention periods are noted in Section 2; please confirm them against your actual practice and statutory obligations.

7. Your rights

Depending on where you live, you have the following rights over your personal data. Under the GDPR these include the right to:

  • Access the personal data we hold about you;
  • Rectify inaccurate or incomplete data;
  • Erase your data (“right to be forgotten”) in certain circumstances;
  • Restrict or object to processing, including processing based on legitimate interests and direct marketing;
  • Data portability — receive your data in a structured, commonly used, machine-readable format;
  • Withdraw consent at any time, where processing is based on consent (without affecting prior processing);
  • Lodge a complaint with a supervisory authority (see Section 8).

Vietnam’s PDPL grants comparable rights, including the rights to be informed, to access, to correct or delete data, to give or withdraw consent, and to complain or seek compensation.

To exercise any of these rights, contact us at [info@hubert.partners]. We will respond within the timeframe required by law (under the GDPR, normally within one month).

8. Right to complain

If you believe we have handled your data unlawfully, you can complain to a data protection authority.

  • EU/EEA residents: you may complain to the supervisory authority in your country of residence or work. As we focus on the German market, German users may also contact their competent state data protection authority (Landesdatenschutzbehörde) or the Federal Commissioner (BfDI).
  • Vietnam: the competent authority is the Ministry of Public Security (Department of Cybersecurity and High-Tech Crime Prevention, A05).

We would, of course, appreciate the chance to address your concern directly first.

9. How we protect your data

We use appropriate technical and organisational measures — such as encryption in transit (HTTPS), access controls, and supplier due diligence — to protect personal data against loss, misuse, and unauthorised access. No system is perfectly secure, but we work to keep our measures up to date.

10. Children

Our website and services are directed at businesses and professionals and are not intended for children. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will delete it.

11. Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in our practices or the law. The current version is always available on this page, with the “Last updated” date shown at the top.

12. Contact us

For any questions about this Privacy Policy or your personal data:

HUBERT AND PARTNERS CO., LTD. 9B Phung Khac Khoan, Da Kao Ward, District 1, Ho Chi Minh City, Vietnam Email: [info@hubert.partners]