Privacy Policy
What personal data hapri.org collects, why, who receives it, and your rights under Vietnam's Personal Data Protection Law 91/2025/QH15.
The Health and Agricultural Policy Research Institute (HAPRI) is the personal data controller for personal data processed through the hapri.org website.
Registered address: 279 Nguyen Tri Phuong, Dien Hong Ward,
Ho Chi Minh City, Viet Nam 72521.
Data protection contact: HAPRIprivacy@hapri.org
What we process
We process three groups of data.
-
Technical data created when you visit: IP address, location derived from it, device, browser, operating system, pages viewed, traffic source and in-session behaviour, used to run and secure the site and to count readership.
-
What you send us through a contact form, used to answer you.
-
Staff information published in the directory, see section 6.
Figures you type into the calculators or any interactive figures or graphs are not collected and are never transmitted to our servers.
What we do not do
HAPRI has no advertising tracker deployed on hapri.org, does not sell personal data, does not trade personal data for commercial benefit, and does not build individual profiles of readers.
The visit statistics recorded by the Wix platform are inherent to running the website, and HAPRI reads them only in aggregate form.
Cookies and consent
The consent mechanism described in this section takes effect on September 1st, 2027.
The site uses essential cookies to function. Non-essential cookies are set only after you consent.
Your consent is collected on these terms:
-
consent is given per purpose, never bundled;
-
no pre-ticked boxes and no default-on settings;
-
silence or no response is not consent;
-
you can withdraw consent at any time. By law the request must be in writing, which includes electronic or any verifiable format, and sent to us; an email to the contact in section 5 is enough;
-
we keep a verifiable record of consent, and the burden of proving it rests on us.
Transfers data outside of Vietnam
Our website runs on the Wix platform, which is located outside Vietnam. Personal data collected in Vietnam through the website is therefore processed on a platform abroad. That is a cross-border transfer of personal data.
Recipients abroad: Wix.com Ltd., Google LLC, GitHub, Inc., and LinkedIn Ireland.
Those recipients may in turn rely on other SaaS providers, such as content delivery networks and cloud hosting, located in several countries. This list names only the recipients HAPRI chose directly, not every provider they rely on.
Most hapri.org readers visit from Vietnam. Personal data collected in Vietnam is therefore transferred abroad, and the cross-border transfer impact assessment rules apply in full.
Your rights
As a data subject you hold the following rights under the Personal Data Protection Law No. 91/2025/QH15. The deadlines in the table below are set by Decree 356/2025/NĐ-CP, Article 5. If you are in the European Union or the United Kingdom, the corresponding General Data Protection Regulation (GDPR) rights are served through the same single channel.
Your Right | Law 91/2025/QH15 | GDPR | Deadline |
|---|---|---|---|
To know that processing happens | Art. 4(1)(a) | Arts. 13 to 14 | Reply in 2 working days, act within 15 days, or 20 if a processor or third party must act |
To consent, refuse, or withdraw consent | Art. 4(1)(b), 9, 10 | Art. 7(3) | Reply in 2 working days, act within 15 days, or 20 if a processor or third party must act |
To access and correct | Art. 4(1)(c) | Arts. 15 to 16 | Reply in 2 working days, act within 10 days, or 15 if a third party must act |
To be given a copy | Art. 4(1)(d) | Art. 15(3) | Reply in 2 working days, act within 10 days, or 15 if a third party must act |
To erasure | Art. 4(1)(d) | Art. 17 | Reply in 2 working days, act within 20 days, or 30 if a third party must act |
To restrict processing | Art. 4(1)(d), 10 | Art. 18 | Reply in 2 working days, act within 15 days |
To object to processing | Art. 4(1)(d) | Art. 21 | Reply in 2 working days, act within 15 days |
To complain, denounce, or sue | Art. 4(1)(đ) | Art. 77 | Per procedural law |
To claim damages | Art. 4(1)(đ) | Art. 82 | Per law |
To demand protective measures | Art. 4(1)(e) | No direct equivalent | Reply in 2 working days, act within 15 days |
How to exercise a right
Send your request to HAPRIprivacy@hapri.org. Please say which right you are exercising and give us enough information to identify the data.
We reply within 7 working days and act within the deadlines in the table above. Where a request is complex we may extend once, telling you why, and the burden of showing the extension was necessary rests on us.
You may also complain to the specialized personal data protection authority at the Ministry of Public Security.
Data of children
Our site is a policy research site. It is not directed at children and we do not knowingly collect children's personal data. If you believe we hold data about a child, please contact us through Your rights section and we will delete it.
The staff directory
HAPRI publishes the name, photograph, role, work email and academic CV of its research staff. This publication is deliberate and serves the purpose of presenting the research team.
CVs are redacted to remove sensitive information before publication. Staff may request correction or removal of their information through the channel in section 5.
Security and breaches
We apply appropriate organizational and technical measures to protect personal data, and review those measures when needed.
If a personal data protection violation occurs, we notify the specialized authority at the Ministry of Public Security within 72 hours of discovering it, and we notify you where the incident affects you.
Changes to this notice
When HAPRI adds a new data source or changes a processing purpose, this notice is updated before that change takes effect. Each version carries its own number and effective date.
Version: 1.0 · Effective date: 2026-08-24
Governing language
This page is published in Vietnamese and English. The Vietnamese text governs; the English is provided for convenience. Where the two differ, the Vietnamese prevails. This rule applies to the legal pages only. For HAPRI's research publications, the English text is the original.