Policy
Privacy notice
Draft · 2026-10-23
Draft for review. This notice describes what the site actually does today. It has not been finalised by a lawyer and should be reviewed against Vietnamese Law 91/2025/QH15 on personal data protection (effective 1 January 2026) and its implementing instruments before this publication is treated as final.
This notice covers edossier.tech and its subdomains. It is written to match the deployed configuration, not an aspirational one: if a practice is listed here, it is in the code.
What we process
- Server and security logs. IP address, user agent, requested URL, timestamp, and Cloudflare's network metadata, processed by our hosting provider to deliver and protect the site. Retained for a short operational window (typically 24 hours to 30 days at the edge), not used to profile readers.
- Email you send us. Your address, message and any attachments, kept for as long as needed to handle the request and to keep a record of corrections and rights requests.
- Nothing else. No accounts, no comment system, no newsletter, no advertising identifiers, no analytics script on the public site.
Why we process it
To serve pages and defend the service against abuse (legitimate interests in operating a publication), to answer you and to keep an audit trail of corrections and legal requests (legitimate interests, and legal obligation where applicable). We do not sell data, and we do not use it to build reader profiles.
Who processes it
Cloudflare, Inc. acts as our hosting, CDN and email-routing provider: content delivery, DDoS protection, TLS and inbound mail forwarding. That necessarily involves processing on their global network, which may include transfers outside Vietnam. No other processors are engaged for the public site today.
Retention
Edge logs: short operational windows set by the provider. Correspondence: up to 24 months after the matter closes, unless a correction, complaint or legal obligation requires longer. Publication records (claims, revisions, review log) are retained because the correction history is part of the publication.
People written about
Dossiers concern public roles, ownership and governance. We apply a relevance gate before storing personal material, publish the minimum necessary, and exclude private-life information that has no documented link to governance or spending. If you are the subject of a dossier you can request the evidence record and a correction; see corrections.
Your rights
Subject to applicable law, you may request access, correction, deletion, restriction, objection, and portability of your personal data, and withdraw consent where processing relied on it. Write to hello@edossier.tech; we answer within 30 days where the law requires it. You may also complain to the competent authority in Vietnam.
Security
HTTPS everywhere, strict transport and content-security headers, least-privilege access to infrastructure, and no public write path into the editorial database. Editorial records are append-only so a published revision cannot be rewritten in place.
Children
The publication is aimed at professional and industry readers and is not directed at children.
Changes
Material changes are announced on this page with a new date. Because the site keeps revision history for content, it should also keep it for this notice.