Version 1.0 – Effective from 12 November 2026. Document No. 01/2026/CS-7SVN of Luat 7S Consulting and Services Joint Stock Company.

Legal bases:

• Law on E-commerce No. 122/2025/QH15 dated 10 December 2025, effective from 1 July 2026;
• Decree No. 248/2026/ND-CP dated 30 June 2026 of the Government detailing certain articles of the Law on E-commerce, effective from 1 July 2026;
• Law on Protection of Consumer Rights No. 19/2023/QH15 dated 20 June 2023, effective from 1 July 2024;
• Law on Lawyers No. 65/2006/QH11 dated 29 June 2006, as amended and supplemented by Law No. 20/2012/QH13 dated 20 November 2012;
• Law on Personal Data Protection No. 91/2025/QH15 dated 26 June 2025, effective from 1 January 2026;
• Decree No. 356/2025/ND-CP dated 31 December 2025 of the Government detailing certain articles and measures for implementation of the Law on Personal Data Protection, effective from 1 January 2026;

Luat 7S Consulting and Services Joint Stock Company (hereinafter "Luat 7S") hereby issues this Privacy Policy as follows:

I. SCOPE AND DATA CONTROLLER

This Policy applies to information and personal data collected via the website 7slaw.vn, contact forms, the virtual assistant, the 7S Client Portal and other online support channels of Luat 7S.

The personal data controller and processor is Luat 7S Consulting and Services Joint Stock Company, enterprise code 0108172614, head office at No. 60, Lane 18 Mac Thai To Street, Yen Hoa Ward, Hanoi. For legal services performed by 7S Law Company Limited on a cooperation basis, 7S Law Company Limited is the controller of the case file; such file is also governed by the legal service contract and the lawyer's duty of client confidentiality.

II. INFORMATION COLLECTED

1. Information provided by clients

Full name, phone number, email, company name, title; consultation requests and attachments; job applications; newsletter subscription details; information required to conclude and perform contracts and issue invoices.

2. Information collected automatically

IP address, device type, browser, pages viewed, access time, referral source and cookies.

3. Sensitive personal data

The website does not request sensitive personal data. Clients should not send health information, bank account details, criminal records or confidential case details via online forms before signing a service contract. Luat 7S does not collect biometric data, electronic identification passwords or banking passwords.

III. PURPOSES AND LEGAL BASES

Silence or non-response is not deemed consent. Luat 7S does not buy or sell personal data in any form.

IV. COOKIES

Essential cookies (session, anti-spam, cookie preferences) are always on. Analytics and marketing cookies are used only with the user's consent. Declining non-essential cookies does not affect reading the website.

V. SHARING AND TRANSFER OF DATA

Data is shared only in the following cases:

• with lawyers and staff assigned to handle the request, on a need-to-know basis;
• with 7S Law Company Limited and the Ho Chi Minh City Branch of Luat 7S, where the client requests a service performed by that unit and has consented;
• with hosting, email, cloud and payment providers under data processing agreements with confidentiality undertakings;
• with competent state authorities when filing dossiers at the client's request or upon lawful request;
• transfer abroad where a provider's servers are located outside Vietnam, with an impact assessment dossier as required.

VI. RETENTION PERIOD

VII. SECURITY MEASURES

• HTTPS connection, encryption in transit and at rest; file-based access control; two-factor authentication for admin accounts and the Client Portal.
• Regular backups, access logging, security reviews.
• Lawyers and staff sign confidentiality undertakings and receive personal data protection training; a personal data protection officer is designated.
• In case of a data leak or loss: containment, incident record and notification to clients and the specialized personal data protection unit of the Ministry of Public Security within 72 hours.

VIII. RIGHTS OF DATA SUBJECTS AND HOW TO EXERCISE THEM

Data subjects have the right to be informed; to consent or withdraw consent; to access, correct, obtain, delete, restrict or object to the processing of their data; and to complain, denounce, sue and claim compensation under the Law on Personal Data Protection.

Requests should be sent to lienhe@7slaw.vn with the subject "[PDP] – Personal data request" or in writing to the Hanoi office. Luat 7S acknowledges receipt within 2 working days and handles requests within: access, correction, provision of data 10 days; withdrawal of consent, restriction, objection 15 days; deletion 20 days; unsubscribing from newsletters immediately. No fee is charged.

IX. THIRD-PARTY LINKS

Links to Zalo, Facebook, YouTube, LinkedIn and state authority portals are governed by the respective policies of those platforms.

Contact information of Luat 7S

• Head office: No. 60, Lane 18 Mac Thai To Street, Yen Hoa Ward, Hanoi.
• Hanoi transaction office: Floors 1–2, Lot E2, Mac Thai To Street, Yen Hoa Ward, Hanoi; tel. +84 877 523 888.
• Ho Chi Minh City Branch (tax code 0108172614-002): Floor 18, ROX Tower, 180 Nguyen Cong Tru Street, Ben Thanh Ward, Ho Chi Minh City; tel. +84 911 173 322.
• Ho Chi Minh City office 2: No. 71, Street 9, Van Phuc Urban Area, Hiep Binh Ward, Ho Chi Minh City.
• Email: lienhe@7slaw.vn; website: 7slaw.vn.

IMPLEMENTATION PROVISIONS

This document takes effect from the date of signing and is published at https://7slaw.vn/privacy-policy. In case of any discrepancy between this document and a service contract signed with a client, the service contract prevails, unless otherwise provided by law.

Luat 7S may amend or supplement this document. Amendments are published on the website with the version number and effective date, and are updated with the state authority in charge of e-commerce as required. The Vietnamese version prevails in case of any discrepancy with translations.

LUAT 7S CONSULTING AND SERVICES JOINT STOCK COMPANY