Privacy notice
How IBBC Capital handles personal data
We collect only what you send us, use it to answer you and prepare a possible engagement, and never sell it. This notice is issued under the Law on Personal Data Protection No. 91/2025/QH15 and Decree 356/2025/ND-CP.
Effective 29 October 2026
01
Who is responsible
The data controller is the IBBC Capital legal entity identified on the Governance page. Privacy requests: richard.khiem@morganfund.global.
02
What we collect and why
| Source | Data | Purpose |
|---|---|---|
| Enquiry, investor and project forms | Name, organisation, role, email, phone, country, the project or mandate details you choose to type, your message, consent flag | Reply to you; assess fit, conflicts and scope before any engagement |
| Spam and abuse protection | IP address and submission time, kept only in temporary rate-limit records | Block automated or repeated submissions |
| Hosting server logs | IP address, browser type, pages requested, time — recorded by our hosting provider | Security, availability and troubleshooting |
| Settings in your browser | Language choice (EN/VI) and motion preference, stored only on your device | Remember your preference |
We do not use advertising cookies, analytics trackers or social-media pixels. Typefaces are loaded from Google Fonts, which receives your IP address when the page loads.
03
Legal basis and consent
We process form data on the basis of the consent you give by ticking the consent box, and to take steps you request before a contract. You may withdraw consent at any time by writing to richard.khiem@morganfund.global; withdrawal does not affect processing already carried out.
Please do not send confidential documents, identity papers or financial account details through website forms. Project documents are received only after a non-disclosure agreement is signed.
05
How long we keep it
- Enquiries that do not lead to an engagement: deleted within 24 months of the last contact.
- Engagement records: for the period required by contract, accounting and tax law.
- Rate-limit records: automatically overwritten within hours.
06
Your rights
Under Law 91/2025/QH15 you may ask to be informed, to access, correct or delete your data, to restrict or object to processing, to withdraw consent, and to complain to the competent authority. Write to richard.khiem@morganfund.global; we answer within the time limits set by law.
07
Security
Encrypted connections (HTTPS), access limited to staff who need it, spam and abuse controls on every form, and no storage of form submissions on the public web server. We do not hold ISO 27001 or SOC 2 certification today; see status transparency.
This website is intended for professional users aged 18 or over. If this notice changes, the new version and its effective date are published on this page.