Privacy Policy

Data Controller & Contact Details

The data controller responsible for the processing of personal data collected through this website is:

Information I Collect

I adhere strictly to the principle of data minimization. I only collect information that is strictly necessary to evaluate project inquiries and maintain technical reliability:

• Voluntary Project Inquiries: When you submit an inquiry through my contact form, I collect your name or company identifier, email address, selected discipline of interest, estimated budget range, and your project brief message.
• Automated Server Logs: Standard automated HTTP request headers (including browser user-agent, operating system, requested page URL, and access timestamps) are processed transiently to ensure reliable routing, security defense, and server health.

Legal Basis for Processing

I process your personal data on the following legal bases:

• Consent: For project inquiries submitted voluntarily through the contact form, and for non-essential analytics cookies (see below).
• Legitimate Interest: For automated server logs, to maintain the security, integrity, and technical reliability of the website.
• Pre-contractual Steps: Where you contact me regarding a potential project, to take steps at your request prior to entering into a service agreement.

Data Retention

Project inquiry data (contact details and brief messages) is retained for up to 24 months from the date of your last communication with me, or until you request erasure, whichever comes first. Automated server logs are retained transiently and are not kept longer than 90 days except where required for security investigation.

Cookie Policy

This website uses cookies and similar storage technologies to enable core functionality and, where you consent, to measure site performance. A cookie is a small text file placed on your device by your browser.

• Strictly Necessary Storage (no consent required): Used solely for essential functional UI state — this site does not currently set any strictly necessary cookies, but does use equivalent browser storage (see “Cookies & Local Storage” below).
• Analytics Cookies (consent required): Set by Google Analytics to measure aggregate site usage. These are only activated after you accept analytics cookies via the cookie notice shown on your first visit.

You can withdraw or change your cookie consent at any time by revisiting the cookie notice (typically accessible via a “Cookie Preferences” link in the site footer) or by adjusting your browser settings to block or delete cookies. Blocking analytics cookies does not affect your ability to browse or use the site.

Web Analytics & Measurement

To evaluate site performance, understand aggregate engagement, and optimize reader experience, I use Google Analytics with strict IP anonymization enabled (anonymize_ip: true).

Your full IP address is truncated before storage and is never associated with any other personally identifiable data. Analytics data is analyzed purely in aggregate and is never used for behavioral advertising or profiling.

Google Analytics is a non-essential cookie and is only activated after you provide consent via my cookie notice. You may withdraw this consent at any time by adjusting your cookie preferences or browser settings.

Because Google Analytics is operated by Google LLC (United States), use of this service involves an international transfer of data outside Vietnam and the European Economic Area. This transfer is safeguarded by Google's Standard Contractual Clauses and Google's own data processing terms.

Cookies & Local Storage

Separate from cookies, this website uses client-side sessionStorage and localStorage for functional UI state management. These are not cookies, are not sent to any server, and do not require consent, but are disclosed here for transparency:

• Session Intro State (np_has_seen_intro): Tracks whether the initial entry animation has already played during your browsing session to prevent repetitive interruptions.
• Smooth Page Navigation (np_is_navigating): Manages the seamless cross-fade page transition curtain between case studies.

This website does not deploy third-party advertising cookies or cross-site tracking trackers.

Legal Compliance & Regulatory Framework

My data protection practices are governed by and comply with:

• Decree No. 13/2023/NĐ-CP (Vietnam): Full compliance with the Personal Data Protection Decree of the Socialist Republic of Vietnam concerning legitimate data collection, user consent, and storage protection.
• General Data Protection Regulation (GDPR): Alignment with international standards on lawful processing, data portability, and user sovereignty for international visitors.

Your Rights as a Data Subject

Under applicable data protection laws, you retain full ownership and control over your personal data:

• Right of Access & Portability: You may request a verified copy of all project inquiry records associated with your email address.
• Right to Rectification: You may request corrections or updates to any previously submitted contact details.
• Right to Erasure (Right to Be Forgotten): You may request the immediate, permanent deletion of your inquiry data and email communication logs from my records.
• Right to Restrict Processing: You may request that I limit how your data is used while a rectification or objection request is being resolved.
• Right to Object: You may object to processing based on legitimate interest, including analytics measurement.
• Right to Lodge a Complaint: You have the right to lodge a complaint with the relevant supervisory authority — the Ministry of Public Security in Vietnam, or your local data protection authority if you are located in the EEA.

To exercise any of these rights, email me at hainampham08@outlook.com. I will fulfill verified requests within 7 business days without charge.

Children's Privacy

This website is not directed at individuals under the age of 16, and I do not knowingly collect personal data from minors. If you believe a minor has provided me with personal data, please contact me so I can promptly delete it.

Intellectual Property & Proprietary Notice

All featured case studies, visual design assets, motion systems, 3D renderings, bespoke typography implementations, art direction artifacts, and underlying frontend source code displayed on this website are my proprietary intellectual property and that of respective partnering clients.

Reproduction, scraping, public redistribution, or commercial reuse of any portfolio material without my prior explicit written permission is strictly prohibited.

Updates to this Policy

I reserve the right to amend this Privacy Policy as necessary to reflect operational updates or evolving legal frameworks. Any revisions will be published directly on this page with an updated revision date.