Privacy Policy

Ascendia Training & Consulting (“Ascendia”, “we”, “us”, or “our”) is committed to protecting the privacy and personal data of everyone who interacts with us — whether you visit our website, engage us for corporate training and consulting, or participate in one of our learning programmes.

This Privacy Policy describes what personal data we collect, why we collect it, how we use and protect it, who we share it with, and the rights available to you. We handle personal data in accordance with the Personal Data Protection Decree of Vietnam (Decree No. 13/2023/ND-CP) and, where applicable, internationally recognised data-protection principles such as the EU General Data Protection Regulation (GDPR).

By using our website or services, you acknowledge that you have read and understood this policy.

Ascendia Training & Consulting is a Vietnam-based provider of corporate training and consulting services, partnering with organizations to design and deliver practical, business-driven learning across leadership, professional development, HR, sales & marketing, and AI application.

For the purposes of this policy, Ascendia is the data controller responsible for the personal data we collect. Our contact details are provided in the Contact Us section below.

We collect personal data in the following ways:

a. Information you provide directly

• Contact & enquiry details — your name, email address, phone number, company or organization, job title, and the content of any message you send us through our contact form or by email.
• Client & engagement details — information needed to scope, plan, and deliver training or consulting services, including organizational needs and points of contact.
• Training participant details — where you or your organization enrol you in a programme, we may process your name, work email, department/role, attendance, assessment results, and feedback (see Section 6).

b. Information collected automatically

• Technical & usage data — such as your IP address, browser type, device information, pages visited, and the date and time of your visit, collected via server logs and, where enabled, analytics tools.

We do not intentionally collect sensitive personal data (such as health, religious, or political information) unless it is strictly necessary for a specific programme and you have given explicit consent.

We use personal data to:

• respond to your enquiries and provide requested information;
• design, schedule, deliver, and improve our training and consulting services;
• administer learning programmes — including registration, attendance, assessment, certification, and feedback;
• manage our client relationships, contracts, invoicing, and record-keeping;
• send relevant service updates and, where you have consented, occasional information about our programmes;
• maintain the security, performance, and reliability of our website; and
• comply with legal, tax, and regulatory obligations.

We do not sell your personal data, and we do not use it for automated decision-making that produces legal or similarly significant effects on you.

We process personal data only where we have a valid basis to do so, including:

• Consent — for example, when you submit an enquiry or subscribe to updates. You may withdraw consent at any time.
• Performance of a contract — to deliver the training or consulting services you or your organization have engaged us for.
• Legitimate interests — to operate, improve, and secure our services, provided your rights do not override those interests.
• Legal obligation — where processing is required to comply with applicable law.

Delivering education and capability-development programmes often involves processing data about individual participants. We treat this data with particular care:

• Source — participant data is usually provided by the sponsoring organization (for example, an employer enrolling its staff) or directly by the participant.
• Use — we use it solely to administer the programme: managing enrolment and attendance, conducting assessments, issuing certificates, and gathering feedback to improve learning outcomes.
• Assessment & feedback — results and feedback are shared with the sponsoring organization only as agreed in the training engagement, and are used to report on and improve programme effectiveness.
• Confidentiality — participant data is not used for marketing to individuals without their consent and is not disclosed to unrelated third parties.

Where a sponsoring organization determines the purpose of processing, that organization is the data controller and Ascendia acts as its processor under the terms of the training agreement.

We share personal data only where necessary, and never sell it. We may disclose data to:

• Service providers — trusted vendors who help us operate (for example, email delivery, form handling, hosting, and analytics), bound by confidentiality and data-protection obligations;
• Sponsoring organizations — where you participate in a programme, we report attendance and outcomes to the organization that sponsored your participation, as agreed;
• Professional advisers — such as accountants and legal advisers, where reasonably required; and
• Authorities — where disclosure is required by law or to protect our legal rights.

Our website contact form is processed via Web3Forms, which forwards submissions to our email inbox. Please avoid including sensitive personal data in form messages.

Our website may use a limited number of cookies and similar technologies to ensure the site functions correctly and to understand how it is used, so we can improve it. Analytics data is aggregated and used to measure traffic and performance.

You can control or disable cookies through your browser settings. Disabling certain cookies may affect how parts of the website function.

We keep personal data only for as long as necessary for the purposes described in this policy, or as required by law. For example, enquiry data is retained while we handle your request and for a reasonable follow-up period; client and training records are retained for the duration of the engagement and any period required for legal, tax, or contractual reasons.

When personal data is no longer needed, we securely delete or anonymise it.

We apply appropriate technical and organizational measures to protect personal data against unauthorised access, loss, misuse, or alteration — including secure hosting, encryption of data in transit (HTTPS/TLS), and access controls limiting who can view personal data.

While we take reasonable steps to safeguard your information, no method of transmission over the internet is completely secure, and we cannot guarantee absolute security.

Subject to applicable law, you have the right to:

• be informed about how your personal data is processed;
• access the personal data we hold about you;
• request correction of inaccurate or incomplete data;
• request deletion of your data where appropriate;
• object to or request restriction of certain processing;
• withdraw consent at any time; and
• lodge a complaint with the relevant data-protection authority.

To exercise any of these rights, please contact us using the details in Section 16. We will respond within the timeframe required by applicable law.

Our services and website are intended for organizations and working professionals, and are not directed at children. We do not knowingly collect personal data from children. Where a programme involves participants under the age of majority, we process their data only with the consent of a parent, guardian, or the sponsoring institution, and strictly for the purpose of delivering the programme.

Some of the service providers we use may store or process data outside Vietnam. Where personal data is transferred across borders, we take steps to ensure it remains protected in line with this policy and applicable law, including the transfer-impact and safeguard requirements under Decree 13/2023/ND-CP.

Our website may contain links to third-party websites or use third-party services. This policy does not cover the practices of those third parties. We encourage you to review the privacy policies of any external site or service you interact with.

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. The “Last updated” date at the top of this page indicates when the policy was last revised. We encourage you to review it periodically.

If you have any questions about this Privacy Policy, or wish to exercise your data-protection rights, please contact us: