Privacy Policy

Qarbi ("we", "us", "our") is a commerce consultancy incorporated in Vietnam, serving clients primarily in Australia, the European Economic Area, the United Kingdom, and the United States. This Privacy Policy explains how we collect, use, disclose, and safeguard personal information submitted via our website, in particular through the contact form at qarbi.com/contact.

Because we operate internationally, we are committed to complying with all applicable privacy laws depending on where you are located:

• Vietnam: Decree 13/2023/ND-CP on Personal Data Protection (PDPD), effective 1 July 2023.
• Australia: Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).
• European Economic Area / UK: General Data Protection Regulation (GDPR) and UK GDPR.
• United States (California): California Consumer Privacy Act (CCPA) / California Privacy Rights Act (CPRA), where applicable.

When you complete our contact form, we collect the following personal information:

• Name — to address you correctly in correspondence.
• Email address — our primary channel for responding to your enquiry.
• Company name — to understand the business context of your enquiry.
• Phone number — optional, used only if you request a call.
• Message content — the details of your enquiry.

We do not collect sensitive personal information through our website, and we do not knowingly collect information from children under 16.

We use your personal information only to:

• Respond to your enquiry or request.
• Follow up on a prior conversation at your request.
• Send relevant information about our services where you have consented.
• Comply with legal obligations.

We will not use your information for unsolicited marketing without your consent, and we will never sell or rent your personal information to third parties.

Legal basis (GDPR / UK GDPR): Processing is based on our legitimate interest in responding to business enquiries (Article 6(1)(f)), or on your consent where required.

CCPA (California residents): We do not sell or share personal information as defined under California law. You have the right to know, delete, and opt-out of any sale of your personal information. To exercise these rights, contact us at the address below.

We may share your information with the following categories of service providers, strictly for the purpose of operating our contact and communication systems:

• Email / CRM platforms — to route and store enquiries (e.g., email delivery services).
• Hosting providers — our website infrastructure providers.

All third-party providers are required to handle your data in accordance with applicable privacy laws. As a Vietnam-based entity serving international clients, any cross-border transfer of personal data is conducted with appropriate safeguards in place, including compliance with Vietnamese PDPD cross-border transfer requirements, GDPR Chapter V (for EU/UK data), and APP 8 (for Australian data).

We retain personal information only for as long as necessary to fulfil the purpose for which it was collected, or as required by law. Enquiry data is typically retained for up to 3 years to support ongoing business relationships and legal record-keeping, after which it is securely deleted or de-identified.

We take reasonable steps to protect personal information from misuse, interference, loss, unauthorised access, modification, or disclosure. Our website uses HTTPS encryption, and access to stored enquiry data is restricted to authorised personnel only.

Your rights depend on where you are located. In all cases you may contact us to access, correct, or delete your personal information.

Australia — Under the Privacy Act 1988 (Cth) and APPs you have the right to access and correct your personal information, and to lodge a complaint with the Office of the Australian Information Commissioner (OAIC).

European Economic Area / UK — Under the GDPR / UK GDPR you have rights to access, rectification, erasure, restriction, portability, and to object to processing. You may also lodge a complaint with your local supervisory authority (e.g., the ICO in the UK, or your national DPA in the EU).

United States (California) — Under the CCPA/CPRA, California residents have the right to know what personal information is collected, to delete it, to opt-out of its sale, and to non-discrimination for exercising these rights.

Vietnam — Under Decree 13/2023/ND-CP you have the right to know, consent, access, correct, delete, restrict processing, data portability, and to object to automated processing.

To exercise any of these rights, contact us at the address below.

Our website may use essential technical cookies to function correctly. We do not currently use third-party advertising or tracking cookies. If this changes, we will update this policy and provide appropriate notice and consent mechanisms.

For privacy-related enquiries, access requests, or complaints, please contact:

Qarbi
Jack Nguyen — Founder & CEO
Email: [email protected]
Phone: +84 837 515 168
Vietnam

We will acknowledge your request within 5 business days and respond substantively within 30 days, consistent with the timeframes required under the Privacy Act 1988, GDPR, and Decree 13/2023/ND-CP.