This policy explains how Innohype (company registration in progress) ("Innohype", "we" or "us") handles personal data collected through innohype.io. We handle personal data in accordance with the laws that apply to us, including Singapore's Personal Data Protection Act 2012 (PDPA) and Vietnam's Law on Personal Data Protection No. 91/2025/QH15 and its implementing regulations, where applicable.

Personal data we receive in the course of a client engagement is governed by the engagement letter and non-disclosure agreement for that engagement, in addition to this policy.

1. Personal data we collect

Data you give us. When you submit a form on this website, we collect the details you enter:

  • Innohype Partners request form: the service you are interested in, your name, job title, work email, phone or Zalo number, company, sector, whether your company exports to the EU or UK, any message you add, and whether you wish to receive our newsletter.
  • Innohype Ventures contact form: your name, email, company, company stage and your message.
  • Emails you send us: your contact details and the content of your email.

Please do not send us sensitive personal data (for example, health, financial account or national identity data) through this website.

Data collected automatically. When you visit the website, our hosting and security provider processes technical data such as your IP address, browser type, device information and the pages requested, in order to deliver the website and protect it against abuse. We do not use analytics or advertising tools to profile visitors. See our Cookie policy.

2. Why we use your personal data

We use your personal data only to:

  1. respond to your request and arrange the call or service you asked for;
  2. prepare proposals, engagement letters and invoices, if you decide to engage us;
  3. carry out conflict checks and know-your-client checks before an engagement;
  4. send you the Corridor Brief newsletter, only if you ticked the newsletter box;
  5. keep the website secure and prevent spam and misuse; and
  6. comply with our legal, tax and accounting obligations.

We do not sell your personal data. We do not use personal data submitted through this website to train artificial intelligence models.

3. Legal basis and consent

We process personal data submitted through our forms on the basis of your consent, which you give by ticking the consent box. The newsletter has a separate, optional consent. You may withdraw your consent at any time by emailing [email protected] or by using the unsubscribe link in any newsletter. Withdrawal does not affect processing carried out before it, and we may continue to keep data where the law requires or permits us to do so.

4. Who we share personal data with

We share personal data only with:

  • Service providers that process data on our behalf and under our instructions: Cloudflare (website hosting, security, captcha and secure data storage), Resend (delivery of form notifications by email) and our email service provider;
  • Professional advisers and partners (such as law firms or accredited verifiers) where needed for a service you have asked for, and only with your agreement;
  • Authorities, where we are required to do so by law.

We require our service providers to protect personal data and to use it only for the services they provide to us.

5. Transfers outside your country

Our service providers may store or process personal data outside Vietnam or Singapore, including in the United States and the European Union. Where personal data is transferred abroad, we take the steps required by applicable law, including assessing the transfer and ensuring that the recipient provides a comparable standard of protection.

6. How long we keep personal data

  • Enquiries that do not lead to an engagement: up to 24 months after our last contact with you.
  • Newsletter subscriptions: until you unsubscribe.
  • Client records: for as long as needed for the engagement and to meet legal, tax and accounting retention requirements.

After these periods, we delete or anonymise the data.

7. How we protect personal data

We use reasonable security arrangements to protect personal data, including encrypted connections (HTTPS), access limited to the team members who need it, spam and bot protection on our forms, and secure storage with our service providers. Client names are replaced by codes before any step that uses artificial intelligence tools, and only tools approved for confidential data are used.

No method of transmission or storage is completely secure. If a data breach occurs that is likely to cause harm, we will notify the relevant authorities and affected individuals as and when required by applicable law.

8. Your rights

Depending on the law that applies to you, you may have the right to:

  • be informed about how your personal data is processed;
  • access your personal data and obtain a copy;
  • correct inaccurate or incomplete data;
  • withdraw your consent;
  • request deletion of your data, or restriction of its processing;
  • object to processing; and
  • complain to the competent authority (in Singapore, the Personal Data Protection Commission; in Vietnam, the authority designated under the Law on Personal Data Protection).

To exercise these rights, email [email protected]. We may need to verify your identity before acting on your request. We will respond within the time limits set by applicable law.

9. Children

This website is intended for businesses and professionals. It is not directed at children, and we do not knowingly collect personal data from anyone under 18.

10. Data protection contact

  • Data Protection Officer, Innohype (company registration in progress)
  • Email: [email protected]
  • Address: Ho Chi Minh City, Vietnam

11. Changes to this policy

We may update this policy from time to time. The current version is always available on this page, with the date of the last update shown above.