Privacy Notice

Last updated: 16 September 2026

This notice explains how SPACEFERRET COMPANY LIMITED handles personal data when you use spaceferret.vn or contact us. It is written to meet the Law on Personal Data Protection No. 91/2025/QH15 and Decree No. 356/2025/ND-CP.

1. Who we are

SPACEFERRET COMPANY LIMITED (CÔNG TY TNHH SPACEFERRET), enterprise code 0318092796, registered at 85 Tân Cảng, Phường Thạnh Mỹ Tây, Ho Chi Minh City, Vietnam.

We decide why and how the personal data described here is processed. We are the party responsible for it, and we are the party you contact about it.

For anything in this notice, including any request about your data, contact josselin.ferruzza@arcltd.net, monitored by Josselin Ferruzza, General Director.

2. What Spaceferret does, and what that means for your data

Spaceferret publishes a directory of event venues in Ho Chi Minh City, and plans and produces events.

The directory is free to browse. You do not need an account, and we do not ask you to create one. You can search, filter and compare venues without giving us any personal details.

We publish venue and space names, addresses and map locations. We do not publish venue phone numbers, email addresses, websites or social accounts, and we do not pass your details to a venue. When you want to move forward with a venue, you contact us, and we plan and produce the event.

3. What we collect, why, and on what basis

3.1 When you send us a planning enquiry

What we collect: your name, work email address, phone number, your company if you give it, and the details of the event you describe, which are the event type, the date or your flexibility on dates, the expected number of guests, your budget range, your written brief, and the venue you were looking at when you started the enquiry. We also record which choices you ticked on the form.

Why: to read your enquiry, answer it, ask you follow-up questions, prepare a proposal or quotation, and if you go ahead, to plan and produce your event.

Our basis: we process these details to take the steps you have asked us to take, and to perform the contract that follows if you engage us.

Please do not include other people's personal details in the free-text brief. We do not need the names, contact details, dietary requirements or accessibility needs of your guests in order to answer an enquiry. If you include them anyway, we remove them from our records when we see them.

How long we keep it: 24 months from our last substantive contact with you if the enquiry does not lead to a contract. If it does lead to a contract, we keep the records for 10 years, the period Vietnamese accounting law sets for records that are directly recorded in accounting books and financial statements.

3.2 If you ask us to send you updates

The enquiry form has a separate box, not ticked in advance, asking whether you want occasional updates from us. If you tick it, we use your name and email address to send you news about new venues added to the directory and practical notes on planning corporate events in Ho Chi Minh City, by email, no more than once a month.

Our basis: your consent. You can withdraw it at any time, by using the unsubscribe link in any message or by contacting us. Withdrawing it does not affect your enquiry, and it does not affect anything we did before you withdrew. We keep a record that you unsubscribed, so that you are not added back by mistake.

3.3 When you ask for a correction, a takedown, or exercise a data right

We publish venue photographs and information, and we invite anyone who objects to ask us to remove them. If you contact us about that, or to exercise any right in section 6, we collect your name, your contact details and what you asked for.

Why: to handle your request, and to be able to show that we handled it.

Our basis: complying with our legal obligations, and handling the request you made.

How long we keep it: at least 5 years, the minimum period for records evidencing how a data subject request was handled under Vietnamese personal data protection law.

3.4 When you simply browse the site

What we collect: our hosting providers record technical information about requests to the site, which is your IP address, your browser and device type, the page you asked for, and the time. This is ordinary server logging and it happens on any website.

Why: to keep the site running, to investigate faults, and to protect it against abuse.

Our basis: our need to operate and secure the service.

How long we keep it: up to 30 days.

We also count how the site is used, for example how many people ran a search or opened a venue page. These counts are aggregate. We do not store an identifier for your visit, we do not set an analytics cookie, and we cannot connect these counts back to you.

3.5 The compare feature

When you add venues to the comparison, your browser stores the list of venues you picked on your own device. It is not sent to us and it is not shared. Clearing your browser storage removes it.

4. Cookies and browser storage

We do not use advertising cookies, tracking pixels, remarketing tags or social media trackers. The only thing this site stores on your device is the comparison list described in section 3.5, which exists because you asked for that feature.

Decided 2026-08-06. Option A confirmed as final for launch: no analytics identifier, no third-party analytics tool, no GA4, no cookie banner. Mirrored in the Terms of Use, section 10. If this changes later, this section, section 3.4, and the Terms of Use section 10 must all be rewritten and republished before the new tool goes live, not after.

5. Who else can see your data, and where it goes

Inside Spaceferret: the people working on your enquiry. That is a small team.

Our service providers, who process data on our instructions and are not permitted to use it for their own purposes:

Your enquiry is written to our database. After a successful submission, the Gmail API sends a copy to our monitored ARCLTD email account so that we can respond promptly. The database remains the authoritative record.

We do not sell your personal data, we do not rent it, and we do not share it with venues or any other third party for their own marketing.

We may disclose data where the law requires it, for example to a competent Vietnamese authority acting within its powers.

Transfer outside Vietnam. Because the providers above operate outside Vietnam, your personal data is stored and processed outside Vietnam. We tell you this before you submit the form, and submitting the form includes your agreement to that transfer. We choose providers that offer contractual data protection commitments and technical security controls, and we keep the amount of data sent to them to what the service actually needs.

6. Your rights

Under Vietnamese personal data protection law you can:

• be told how your personal data is processed, which is what this notice does;
• agree or refuse, and withdraw an agreement you gave;
• see the personal data we hold about you;
• have inaccurate data corrected;
• have your data deleted, or ask us to stop or restrict processing it;
• object to processing;
• complain, and claim compensation for damage caused by a breach of the law.

Some of these have limits. If we have to keep a record to meet an accounting, tax or legal obligation, we cannot delete it on request, and we will tell you when that is the reason.

How to use them: write to josselin.ferruzza@arcltd.net and say what you want. We may need to check that the request really comes from you before we act on it, and we will only ask for what is necessary to do that.

How quickly we respond: we confirm we have received your request within 2 working days. We then complete it within 10 days for access and correction, 15 days for withdrawing an agreement, and 20 days for deletion. If a request is complex and needs longer, we tell you why and when to expect an answer.

There is no charge.

7. What could go wrong

We are required to tell you the possible unwanted consequences of this processing, and we would rather be direct about it.

The realistic risks are that your enquiry details are seen by someone who should not see them, whether through a fault at one of our providers, a compromised account, or our own mistake; that email we send you is intercepted or reaches the wrong address; and that data held outside Vietnam sits under another country's legal system. What is at stake is your name, your work contact details, and what you told us about an event you are planning. We do not hold payment card details, government identity numbers, or health data on this website.

We reduce these risks by collecting little, by restricting who can read enquiries, by keeping database access controls on the data itself rather than only in the website code, by not adding third-party scripts to the site, and by deleting data when the retention period ends.

If a breach happens that affects your personal data, we notify the competent authority within the period the law requires, and we tell you directly where the law requires it or where it is the right thing to do.

8. When processing starts and ends

Processing of your enquiry starts when you submit the form and ends when the retention period in section 3.1 expires, at which point we delete the record or remove anything that identifies you. Processing for updates starts when you tick the box and ends when you withdraw or we stop sending them. Processing of technical logs ends when the log retention period in section 3.4 expires.

9. Information about venues and the people who work at them

We research venues from public sources in order to build and maintain the directory. That research can include the name and work contact details of people who handle events at those venues.

We do not publish those details. The directory shows venue and space names, addresses and map locations, and it does not show venue phone numbers, email addresses, websites or social accounts.

If you work at a venue and want to know what we hold about you, have it corrected, have it deleted, or have your venue's listing or photographs removed, write to josselin.ferruzza@arcltd.net and we will act on it. Requests to remove a listing or an image are handled the same way as the rights requests in section 6.

10. Children

This service is for people planning events on behalf of organisations. It is not directed at children and we do not knowingly collect their personal data.

11. Changes to this notice

If we change how we handle personal data, we update this notice before the change takes effect and change the date at the top. If the change is significant, and it affects data you already gave us, we contact you. We do not start using data we already hold for a new purpose without a valid basis for that purpose.

12. Complaints

If you are not satisfied with how we handled your data or your request, tell us first at josselin.ferruzza@arcltd.net so we have the chance to put it right. We will respond within 5 working days. You also have the right to complain to the competent Vietnamese authority, and to seek compensation for damage caused by a violation of personal data protection law.