Personal Data Protection Policy

1. Who is responsible for your data

iKonnect ("we") operates the website ikonnectvn.com to connect candidates with employers.

Contact for personal data matters: tran@ikonnectvn.com

2. What data we collect

When you apply for a role or join the Talent Pool, we collect what you choose to provide:

• Identity and contact details: full name, year of birth, email, phone number, current place of residence.
• Professional details: CV, LinkedIn, education, experience, skills, current/most recent employer, desired roles, preferred location and work arrangement.
• Current and expected salary, and notice period before leaving your job.
• Basic technical information when using the website (traffic source, device type, necessary cookies).

We do not ask for sensitive information (health, religion, politics, ID numbers, etc.). Please do not include such information in your CV unless necessary.

3. Purposes of use

1. To review your profile for the role you apply for and to contact you about the recruitment process.
2. (Talent Pool) To keep your profile on file so we can contact you when a suitable role comes up.
3. (Only with your separate consent) To introduce your profile to suitable employers.
4. To manage and operate our services, improve their quality and keep our systems secure.
5. To comply with legal requirements.

We do not sell your data.

4. Your consent

• We process your data only after you give clear consent by ticking the consent box yourself (it is never pre-ticked).
• Required consent: for us to collect, store and process your profile for the recruitment purposes in 3.1–3.2 and 3.4–3.5.
• Optional consent: to share your profile with suitable employers (3.3). If you do not tick this box you can still submit your profile; we will ask you again before introducing your profile to an employer.
• We record when you consented and which version of the text you consented to, so we can demonstrate it when needed.
• You may withdraw your consent at any time. Withdrawal does not affect processing already carried out.

5. Who we share data with

• Employers (iKonnect's clients): only with your consent for the relevant role/purpose.
• Infrastructure service providers that help us operate: database and website hosting (Supabase, Vercel) and a profile-management tool (Lark). They process data only on our instructions.
• When you submit a profile, our system automatically sends part of your data to these services: (a) Telegram (servers outside Vietnam): an internal notification to iKonnect staff with your name, email, phone number, the role applied for (or "Talent Pool"), a link to your CV, the traffic source and the submission time; (b) Resend: sends a confirmation email to your email address, using your name, email and the role name; (c) n8n: an internal automation webhook (when enabled) that receives the profile ID, name, email, phone number, role, a link to your CV, the traffic source and the submission time, to support profile management.
• Competent state authorities where the law requires it.

6. Transfers of data abroad

Some of the service providers in section 5 have servers located outside Vietnam (for example Lark in Singapore). By giving your consent you allow us to store and process your data on these systems, and we apply appropriate safeguards in accordance with Vietnamese law.

7. Retention

• Application / Talent Pool profiles are kept for up to 24 months from your most recent contact or update, after which we delete them or ask whether you want us to keep them.
• You can ask for earlier deletion at any time.
• Data may be kept longer where the law requires.

8. Your rights

You have the right to: be informed how your data is processed; give or withdraw consent; view, receive a copy of and correct your data; request deletion or restriction of processing; object to processing for marketing purposes; and complain, report or claim compensation as provided by law.

To exercise your rights, email tran@ikonnectvn.com from the address you registered with. We may verify your identity and will respond within the period required by law; our aim is within 7 working days.

9. Security

We apply reasonable technical and organisational measures: encrypted connections (HTTPS), access control, and profile access limited to assigned staff. No system is completely secure; if an incident affects your data, we will notify you as required.

10. Cookies and similar technologies

You do not need any cookie set by us to browse the website or submit a profile. The website currently uses the following:

• Microsoft Clarity (Microsoft's _clck and _clsk cookies): records anonymous sessions and heatmaps to improve the experience. What you type or view in the application, Talent Pool and application-tracking forms is masked in recordings. Clarity is not loaded in the administration area.
• Browser session storage (sessionStorage): if you arrive through a link with ?ref= or ?utm_source=, we remember that value (a short string, up to 100 characters of letters, digits and dashes) for the browsing session to learn where you heard about us. If you submit a profile, the value is stored with it. It disappears when you close the tab.
• Google Fonts: your browser loads the Inter typeface from Google's servers, so your IP address is sent to Google.
• Admin sign-in cookie (admin_token): only for iKonnect staff signing in to the administration area; it is not set for visitors.

We do not use advertising cookies or Google Analytics. You can block or delete cookies in your browser; doing so does not affect your ability to submit a profile.

11. Age

The service is for people aged 18 or over.

12. Changes to this policy

When there is a material change we update this page and state the effective date. For changes that affect the purposes of processing, we will ask for your consent again.