Privacy Policy

1. Company information

• English name: CNK LAB COMPANY LIMITED (CNK LAB CO., LTD)
• Vietnamese name: CÔNG TY TNHH CNK LAB
• Representative: Chu Anh Tuấn
• Address: 23rd Floor, CEO Tower, Lot HH2-1, Me Tri Ha Urban Area, Pham Hung Road, Tu Liem Ward, Hanoi, Vietnam
• Contact: contact@cnklab.com

2. Information we collect

• Information you enter in the contact form: company name, your name, email address, inquiry category and message
• The content of correspondence when you contact us by email or other means
• Access information recorded automatically by the platform serving the website: IP address, access time, referrer, browser type and similar

We use access information to keep the website running reliably and to guard against unauthorised access and spam submissions. We do not use it to identify individuals.

3. Purpose of use

• Responding to inquiries and providing quotations
• Communication about work requests, and the conclusion and performance of contracts
• Producing deliverables, quality checks and maintenance
• Keeping the website available and preventing unauthorised access and spam
• Understanding how the website is used, in order to improve it
• Compliance with applicable law

We do not use personal information beyond these purposes, and we never use it to send advertising or marketing email.

4. Disclosure to third parties

We do not disclose personal information to third parties without your consent, except:

• where required by law
• where disclosure is necessary to protect a person's life, body or property and obtaining consent is difficult

Allowing the service providers listed in the next section to process personal information on our behalf is not disclosure to a third party. We supervise those providers as necessary and appropriate.

5. Processing by service providers

We entrust the processing of personal information to the following providers, to the extent needed to run the website and handle inquiries. When selecting a provider we review its data processing terms and security arrangements, and we limit the information it handles to what the work requires.

• Cloudflare, Inc. (USA) — website delivery and contact form handling via Cloudflare Pages, website analytics via Cloudflare Web Analytics, and spam prevention via Cloudflare Turnstile. Information handled: request content, access information such as IP address, and technical information about browser behaviour
• Resend (USA) — email delivery for contact form submissions (sending region: Tokyo). Information handled: company name, your name, email address, inquiry category and message
• Microsoft Corporation (USA) — Microsoft 365 / Exchange Online for sending, receiving and storing our corporate email. Information handled: your inquiry and subsequent correspondence

Each of the providers above may engage its own sub-processors to deliver its services, on terms that each provider sets. Each publishes a list of its sub-processors, and we review those lists when selecting a provider and at our periodic review.

6. Handling outside Japan

We are a company incorporated in the Socialist Republic of Vietnam, and personal information entrusted to us is handled at our premises in that country.

The providers listed above are located outside Japan, and information is stored in the regions and data centres they specify. A provider's country of incorporation and the location where data is stored are not necessarily the same, and storage locations may change as providers alter their arrangements. Please contact us at the address below for the current position.

When selecting providers and entering into agreements with them, we review their personal information protection terms and keep access rights to the minimum necessary. Where the law requires prior information or consent for entrusting processing to a provider outside Japan, we obtain it.

7. Security measures

• Access to personal information is limited to staff who need it for their work, and access rights are managed
• Traffic to the website and contact form is encrypted (HTTPS)
• Drawings, site photographs and other materials entrusted to us are handled under a separately concluded non-disclosure agreement
• Information no longer needed for our work is deleted or destroyed without delay

If personal information is leaked, lost or damaged, or there is a risk of this, we will promptly investigate, act to limit the impact and prevent recurrence. Where the law requires it, we will notify the individuals concerned and report to the competent authority.

8. Access information and cookies

Our website does not use cookies to track visitors.

We use Cloudflare Web Analytics to understand how the site is used. It sets no cookies and uses no persistent identifier for visitors; it records the URL of the page viewed, the referrer, country or region, browser and operating system type, and screen size. It does not identify individual visitors or track them across sites.

The platform serving the website records access information, including IP addresses, as described in section 2.

On the pages that carry our contact form (the home page and the contact page), we use Cloudflare Turnstile to prevent automated spam submissions. When you open those pages, your browser connects to Cloudflare, which receives your IP address and technical information about how your browser behaves in order to judge whether a person is operating it. Information used for that judgement may be stored briefly in your browser as a cookie or an equivalent mechanism; it is used only for that judgement, and not for advertising or for tracking visitors across sites. You will not normally be asked to read images or type characters.

Our product page embeds a video hosted on YouTube (Google LLC), using privacy-enhanced mode (youtube-nocookie.com). Nothing is sent to YouTube when the page loads; the connection is made when you press play. If you do, YouTube receives your IP address and information about your viewing, under its own terms. This is not processing entrusted by us — YouTube collects it in its own right.

If we introduce or change an analytics tool or a spam-prevention service, we will review what information it collects and why, and update this policy. Where the law requires it, we will give notice or obtain consent beforehand.

9. Retention

Information about an inquiry and the correspondence that follows is kept for around three years after the matter is closed, after which we delete our email records and working copies.

Information relating to contracts is kept for the period required by law.

Logs recorded in our providers' systems are retained according to each provider's own retention periods.

10. Disclosure, correction and deletion

On request, we will disclose, correct, add to, delete or suspend the use of the personal information we hold about you. Please contact us by email at the address below.

After confirming your identity, we will respond in accordance with applicable law. If we cannot meet your request in whole or in part, we will explain why.

11. Changes to this policy

We may revise this policy in response to changes in law or in our business. Revisions take effect when published on this page.

Publication on this page alone does not substitute for consent to a new purpose of use. Where the law requires prior notice or consent for a change, we will obtain it.

12. Contact

• CNK LAB COMPANY LIMITED
• Email: contact@cnklab.com
• Hours: Mon–Fri 9:00–18:00 (JST)