Privacy Policy

Effective date: August 26, 2026  ·  Last updated: September 1, 2026

1. Who We Are

This Privacy Policy is issued by FULITES Limited Company ("FULITES", "we", "us", "our"), an independent quality control inspection, factory audit, and sourcing agency headquartered in Ho Chi Minh City, Vietnam. It explains how we collect, use, disclose, and protect personal data when you visit www.fulites.com (the "Website"), request a quotation, download our sample inspection report, or otherwise contact us.

Data controller: FULITES Limited Company, Ho Chi Minh City, Vietnam. Email for data protection matters: info@fulites.com (subject line "Data Privacy").

2. Personal Data We Collect

We collect personal data you voluntarily provide through our Request a Quote form, Sample Report request form, and Contact form, namely:

• Full name and company name
• Work email address
• Country
• Product category and service requested
• Factory location and expected inspection date (where provided)
• Any message or product details you type into the form

For form security, we temporarily process the request IP address and store keyed, non-reversible rate-limit identifiers. The lead record stores only an anonymized network prefix, not the full IP address. We also record submission time and, only after you accept the cookie banner, Google Analytics 4 usage data.

3. Purpose of Processing

We process your personal data to:

• Respond to your quotation request and prepare a tailored proposal
• Deliver the sample inspection report you requested (by download link and/or email)
• Answer questions submitted through our Contact form
• Schedule and coordinate an inspection, factory audit, or sourcing engagement you order
• Maintain records for accounting, invoicing, and legal compliance
• Improve our Website and services, and measure marketing performance (only with analytics cookie consent)

Depending on the activity, our legal basis is: taking steps at your request before entering a contract or performing a service agreement; our legitimate interests in responding to business inquiries, securing the Website, and improving our services; compliance with accounting or other legal obligations; and your consent where consent is required, including optional analytics. You may withdraw consent without affecting processing already carried out lawfully.

We do not use your data for automated decision-making or profiling that produces legal effects on you.

4. Who We Share Data With

FULITES does not sell your personal data. We share it only with service providers who process it on our behalf, under confidentiality obligations, strictly to operate the Website and deliver our services:

• Web hosting provider (Hostinger) — stores the database and website files
• Email/SMTP delivery service — sends quotation and sample-report notifications
• Google Analytics 4 — website usage analytics, only after cookie consent
• Google Maps — location map content, only when you click “Load Google Map”
• Cloudflare Turnstile — bot verification on forms, validated against the expected hostname and form action
• WhatsApp / Zalo — only if you choose to contact us through these channels, subject to their own privacy policies
• Government authorities, where required by Vietnamese law

5. Cross-Border Data Transfer

Because our hosting, email delivery, and analytics providers may operate infrastructure outside Vietnam, your data may be transferred to and processed in other countries. Where this occurs, we rely on our providers' contractual and technical safeguards (encryption in transit, access controls) to protect your data to a standard consistent with Vietnamese law.

6. Data Retention

Website lead and inquiry records are moved to restricted deletion status 24 months after submission and permanently purged after a 90-day recovery period, unless they form part of an active client file, you request earlier deletion, or law requires longer retention. Contracts, invoices, and accounting records may be retained for the statutory period. Form rate-limit counters are removed after two days, expired report-token records after seven days, and admin security events after 12 months. Hosting access logs follow the provider's settings.

7. Security Measures

We use HTTPS, restricted admin access with multi-factor authentication, short and rotating sessions, parameterized database queries, layered form rate limits, mandatory server-verified bot protection on public forms, expiring report links, audit logs, recoverable deletion, and scheduled backups outside the public web directory. If bot verification cannot be completed, a public form is not accepted. No transmission or storage method is 100% secure, but these controls reduce unauthorized access, alteration, disclosure, and destruction risks.

8. Your Rights

Subject to applicable law, you have the right to:

• Request access to the personal data we hold about you
• Request correction of inaccurate or incomplete data
• Request deletion of your data, subject to our legal retention obligations
• Withdraw consent for marketing communications at any time
• Object to or restrict certain processing of your data
• Request a portable copy of data you provided, where applicable
• Withdraw optional analytics consent through “Cookie settings” in the footer
• Lodge a complaint with a competent data-protection authority where applicable

To exercise any of these rights, email info@fulites.com with the subject "Data Privacy Request". We will respond within 30 days.

9. Cookies & Analytics

We use Google Analytics 4 to understand Website use. GA4 is not loaded and no analytics cookie is set until you click “Accept.” Your analytics choice is stored in your browser's local storage for up to 180 days. The Website also uses local storage to remember language and consent preferences; these essential preferences do not track activity across websites. You may withdraw or change analytics consent at any time through “Cookie settings” in the footer; declining disables analytics and removes accessible GA cookies. Google Maps is not loaded until you separately click “Load Google Map.”

10. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. The "Last updated" date at the top of this page shows when it was last revised. Material changes will be reflected on this page; we encourage you to review it periodically.

11. Contact Us

If you have questions about this Privacy Policy or how we handle your data, contact:

FULITES Limited Company
Ho Chi Minh City, Vietnam
Email: info@fulites.com

This policy is maintained with reference to Vietnam's Law on Personal Data Protection No. 91/2025/QH15 and Decree No. 356/2025/NĐ-CP, effective January 1, 2026.