Privacy policy

FAS Localize (“FAS”, “we”, “us”) is a translation and localization studio based in Da Nang, Vietnam, operated as a registered household business in Vietnam owned by Dao Van Huy. FAS decides why and how the personal data described in this policy is used, which makes us its controller.

Registered business: HỘ KINH DOANH BẢN ĐỊA HÓA FAS LOCALIZE (registered household business in Vietnam, owner Dao Van Huy); business registration and tax code 8533092175-001; registered address K294/70 Nguyen Luong Bang, Quang Thanh 4B, To 26, Lien Chieu, Da Nang, Vietnam.

You can check the tax code on the taxpayer register of Vietnam's tax authority (opens in a new tab), a Vietnamese-language page: enter 8533092175-001, type the confirmation code shown, then search.

For anything about your personal data, email business@faslocalize.com. You can also call +84 868 918 843 or message us on WhatsApp.

This policy follows Vietnam’s Law on Personal Data Protection, in force since 1 January 2026, and its implementing rules. Where the EU or UK General Data Protection Regulation (GDPR) applies to you, for example when you use our services from Europe, you also have the rights it gives you.

When we work for a business customer

When a business sends us content to translate that contains personal data about other people, such as customer records, HR files or support tickets, we process it on that business’s behalf and only on its instructions. The business remains responsible for those people’s data, and its own privacy notice applies to them. Business customers can ask us for a data processing agreement.

We only collect what you choose to send us, plus a small amount of technical data we need to run and protect the site.

Contact form, email and messaging

Through the contact form: your name, email address, phone number if you give it, a subject, the service you are interested in and your message. When you email, call or message us on WhatsApp or Zalo, we receive whatever you send. WhatsApp and Zalo also handle those messages under their own privacy terms.

Certified translation quote form and your documents

Your name and contact details, the documents you upload (PDF files, photos or Word files), the languages, where the translation will be used, the options you choose, such as rush, notarization or a hard copy, and any message. If you order a hard copy, we also need a delivery address.

These documents often contain sensitive personal data: identity and travel documents such as passports and ID cards, civil records, criminal-record certificates, medical records or financial statements, and often details of other people, such as family members. We use them only to quote and deliver your order.

VietnamHelp

For a VietnamHelp case, we collect what the case needs, for example your contact details, passport and visa details, and the documents an office or police station asks for. If you join the waitlist for a region, we store only your email address and that region.

The “Help near you” map on the VietnamHelp page loads only when you open it. Your browser may ask for permission to share your location. If you allow it, your browser uses it to center the map. If you don’t, our server estimates an approximate, city-level location from your network connection, through Cloudflare, and sends it back to your browser. Either way the map comes from Google Maps, so Google receives the location used to center it and may set its own cookies inside the map. We don’t store your location.

Messages you send us

When you write to business@faslocalize.com, or message us on WhatsApp, Zalo or Facebook Messenger, we store the message, your name and address on that channel, and any files you attach, so our team can answer it and keep track of your request in one place. To route messages quickly, their text is checked automatically: first by fixed rules, then, when needed, by TypeSafe, an AI classification service that tells us what a message is about and how urgent it is. It receives only the text of that message and does not train its models on it. When we send you a quote, an invoice or your files, we record what we sent and when you opened, accepted or downloaded it.

Payments

When you pay us, the bank or payment service tells us the amount, the date, the payer name and the transfer note, which we use to match the payment to your invoice. Bank transfers in Vietnam reach us through SePay, which watches our business account; card and PayPal payments go through PayPal. We never see or store card numbers.

Documents you sign online

When we send you an agreement, NDA or form to sign through a link, we record that you opened it. If you sign, we keep a signing record with the document: the name, title and company you type, your email address, the time, your IP address, the country your connection comes from, your browser’s user agent and the fingerprint (SHA-256) of the exact file you saw. This record is the evidence that you agreed to that document, so it is the one place where we keep an IP address itself rather than its hash.

Job applications

Through our careers forms: your name, email address and phone number, where you live or work, your languages and language pairs, skills, experience, qualifications and rates, links you share such as a LinkedIn profile, your answers, and the CV and certificates you upload. We ask for your consent to store your application and, separately, whether you want to join our talent pool.

Technical data sent with a form

When you submit a form, we also store:

• a salted hash of your IP address: a one-way code that lets us limit repeated submissions without keeping the address itself;
• the country your connection comes from;
• your browser’s user agent, which describes the browser and type of device;
• the page you sent the form from;
• if your browser kept it, how you found us: the external page that referred you, the first page you landed on and any campaign tags (UTM) in that link (see Cookies and storage).

Checking a certificate or an order

• Certificates we issue. For each certificate of translation we keep a record of what is printed on it: its number and date, the document type, the languages, the translator and any notarization, plus a fingerprint (SHA-256) of the PDF we delivered. It holds no names and nothing from the document, and it lets anyone holding the certificate check it on our verification page.
• When you check one. We use the number and date you enter to find it. If you choose a file to compare, your browser computes its fingerprint and sends only that; the file never leaves your device.
• When you track an order. The reference and email you enter are compared with our records and not stored.
• What we log. Each check or lookup is logged with its time and result, the country and the type of device and browser, a one-way code of what was typed (so repeated guessing can be limited, without keeping what you typed) and a salted hash of your IP address for rate limiting.

When you browse

• Our own analytics. To learn which pages help people and which don’t, our pages send small first-party signals (beacons) to our own server at /api/t, never to a third party. They describe the page you view (its address without any query string); for the first page of your visit, the external site that referred you and any campaign tags (UTM) in the link; your screen width and browser language; how long the page was in view and how far you scrolled; how quickly it loaded; and what you clicked, as the visible text of the link or button. Nothing you type into a form is read or sent: for forms, we note only that one was started, sent or rejected. Our server adds the country your connection comes from and the type of device, browser and operating system, without versions.
• No cookie, no IP address. A random visit number in your browser’s session storage ties the pages of one visit together (see Cookies and storage). To count unique visitors, we keep a one-way code made from a secret salt, the date, your network and your browser. It changes every day, so it can’t follow you from one day to the next, and your IP address is never stored. Individual records are erased after 60 days; after that we keep only daily totals.
• Opting out. If your browser sends Global Privacy Control or Do Not Track, none of the above is collected.
• Cloudflare Web Analytics also counts visits and measures page speed, without cookies and without identifying you.
• Contact-link clicks. When you click one of our WhatsApp, Zalo, phone or email links, your browser also sends a beacon to /api/event naming the kind of link. We keep only daily totals per link type.
• Hosting and security. Cloudflare, which hosts the site, processes technical data such as your IP address to deliver pages and block attacks, and our hosting keeps short-lived technical logs for troubleshooting.

We use personal data only for the purposes below, each on a ground the law that applies to you allows.

We don’t use personal data for advertising, we don’t sell it, and we never use your content to train AI models. Where we rely on your consent, you can withdraw it at any time; this doesn’t affect what we did before.

We share personal data only with those who help us provide the service, and only what they need for it.

• Cloudflare hosts the website and runs our database, private file storage, the email routing for our business address, bot protection (Turnstile) and cookieless web analytics.
• Resend, based in the United States, delivers the emails we send, such as notifications to our team and confirmations to applicants.
• Google runs our business inbox (Gmail), so the emails you send us and notifications about your requests are stored there.
• TypeSafe classifies the text of the messages you send us (what it is about, how urgent), without training its models on it.
• Meta (WhatsApp, Messenger) and Zalo carry the messages you exchange with us on those apps, under their own terms.
• SePay notifies us of bank transfers to our Vietnamese business account, and PayPal processes card and PayPal payments.
• Linguists who work on your project, such as translators, reviewers and interpreters, see the files and details they need for it.
• Machine-translation and AI language-model providers process the content of MTPE and AI pipeline projects, under API terms that exclude using it for training.
• Notaries, public authorities and couriers receive what is needed only when your order requires it, for example for notarization, legalization or delivering a hard copy, or when you ask VietnamHelp to deal with an office for you.

We may also disclose data when the law requires it, for example to answer a lawful request from a competent authority. We never sell personal data or share it for advertising.

Other sites

Our pages link to other services, such as Upwork, Trustpilot, WhatsApp, Zalo and Google Maps. Their own privacy policies apply when you use them.

Some of our providers, and some of the linguists we work with, are outside Vietnam, so your personal data may be processed in other countries, including the United States. Cloudflare runs a global network, Resend is based in the United States, Google stores data in data centers around the world, and TypeSafe, PayPal, Meta and Zalo process what they handle for us under their own terms. If you are in the EU or UK, this also means your data leaves the EU or UK.

Where the law sets conditions for these transfers, we follow them, and we share only what each provider or linguist needs.

We keep personal data only as long as we need it. Our systems erase or empty most of it automatically, on this schedule:

If you ask us not to contact you again, we keep only your email address on a do-not-contact list, so that we can respect your request. We may keep data for longer when the law requires it or to deal with a dispute.

• Private storage. Uploaded documents, CVs and our database are kept in private Cloudflare storage that is never public. Files can only be opened through our admin area, and every time a stored file is opened, it is logged.
• Restricted access. The admin area sits behind Cloudflare Access and is open only to the owner’s account, confirmed with a one-time code. Every page and request checks that access again.
• Encryption in transit. The whole site is served over HTTPS only.
• File checks. We identify every upload by its content (its “magic bytes”), not by the name or type your browser reports, and accept only document and image formats within a size limit.
• Abuse protection. Forms are rate limited per network using the salted IP hash, carry a hidden spam trap and, when enabled, Cloudflare Turnstile.
• Minimal copies. Our database stores only a salted hash of your IP address, never the address itself, except in the signing record of a document you sign online; and email notifications about job applications carry only a reference and the essentials; the full details stay in the protected admin area.

No system is perfectly secure. If a breach affects your personal data, we will inform you and the competent authority as the law requires.

We use no advertising or tracking cookies, and our own pages set no cookies for visitors.

• Cloudflare Web Analytics works without cookies.
• Cloudflare Turnstile, the anti-spam check shown on some forms when it is enabled, and Cloudflare’s other security checks may set strictly necessary cookies to tell people from bots.
• Session storage. When you first open our site in a browser tab, we note the external page that referred you (its address without any query string), the page you landed on and any campaign tags (UTM) in the link. This stays in your browser’s session storage, under the key fas.attr, for that tab only, and is gone when you close the tab. It is sent to us only if you submit a form, together with that form.
• Visit number. Our analytics keep a random visit number, with the time of your last page view, in session storage under the key fas.sid. It exists only in that tab, is replaced after 30 minutes without activity and is gone when you close the tab.
• Google Maps, on the VietnamHelp page, loads only when you open the map, and Google may set its own cookies inside it.

You can block or delete cookies in your browser settings. The site keeps working, although a security check may ask you to try again.

Depending on the law that applies to you, you have the right to:

• access the personal data we hold about you and get a copy of it;
• correct data that is wrong or incomplete;
• delete your data;
• restrict how we use it;
• object to processing based on our legitimate interests;
• withdraw your consent at any time, without affecting what we did before;
• receive the data you gave us in a common, machine-readable format, where data portability applies;
• complain to the competent data-protection authority, in Vietnam or in the country where you live or work.

How to make a request

Email business@faslocalize.com from the address you used with us and tell us what you would like. If you applied for a job, you can also reply to your application confirmation email. To protect your data from someone pretending to be you, we may ask you to confirm your identity before we act.

We answer without undue delay and within the time the law sets, and there is no charge. If we have to keep some data, for example invoices for tax purposes, we tell you what and why. Once we erase your data, it leaves our backups after about 30 days.

Our site and services are not directed at children under 16, and we don’t knowingly collect their personal data through the site. When a parent or guardian orders a translation of a child’s document, such as a birth certificate, we process the child’s details only for that order and on the parent’s or guardian’s instructions. If you think a child has sent us personal data, contact us and we will delete it.

We don’t make decisions about you based solely on automated processing, including profiling, that have legal or similarly significant effects. Our spam checks can stop a form from being sent; if that happens, you can always email us instead. In AI pipeline projects, automated quality scores decide which text a linguist reviews: they assess text, not people.

We update this policy when our services, our providers or the law change, and the date at the top always shows the current version. If a change significantly affects how we use your personal data, we will say so on this page and, where it affects you and we have your email address, tell you by email.

Questions, requests or complaints about your personal data:

• Email: business@faslocalize.com
• Phone: +84 868 918 843
• WhatsApp: message us on WhatsApp
• Address: FAS Localize, K294/70 Nguyen Luong Bang, Quang Thanh 4B, To 26, Lien Chieu, Da Nang, Vietnam