This Privacy Policy explains how SimpliTech ("Choiee", "we", "us") collects, uses, shares, and protects personal data when you visit choiee.com or submit a course enquiry. We follow the principles of the EU General Data Protection Regulation (GDPR), the UK GDPR, and Vietnam's Law on Personal Data Protection, and we describe the rights available to residents of the EEA, the UK, and the US state of California below.
1. Who is responsible for your data
Choiee is a trading name of SimpliTech, an outdoor-training business based in District 7, Ho Chi Minh City, Vietnam. SimpliTech is the data controller for personal data processed through choiee.com.
For any privacy question or to exercise your rights, contact us at support@choiee.com.
2. Personal data we collect
We only collect what we need to answer your enquiry and run the website:
- Booking enquiry form — your name, one contact detail (phone number or email address), the course you are interested in (optional), and any message you write. At least one contact detail is required so we can reply.
- Technical data — your IP address, browser type, device information, referring page, and timestamps, logged automatically by our hosting provider for security, abuse prevention, and aggregate traffic statistics.
- Cookies and local storage — a small number of necessary values (your language, your light/dark theme, and your cookie choice). See section 4.
- We do not knowingly collect special-category data (health, etc.). Please do not include sensitive personal information in the free-text message field; any medical information relevant to a course is collected separately once we contact you.
3. How and why we use your data
We process your personal data for the following purposes and legal bases:
- To respond to your enquiry, recommend a route, and arrange a schedule — legal basis: taking steps at your request before entering into a contract, and our legitimate interest in handling enquiries.
- To send you a confirmation email (only if you provided an email address) — legal basis: your request / pre-contract steps.
- To keep the website secure, prevent abuse, and diagnose problems — legal basis: our legitimate interest in a safe, working service.
- To measure aggregate, non-identifying traffic — legal basis: your consent, via Google Analytics, which only runs after you accept optional cookies.
- To comply with legal obligations, and to establish, exercise, or defend legal claims — legal basis: legal obligation / legitimate interest.
4. Cookies and similar technologies
We use two categories of cookies and browser storage:
Strictly necessary — always on, no consent required: your selected language ("NEXT_LOCALE"), your theme preference ("choiee-theme"), and a record of your cookie choice ("choiee-cookie-consent"). These do not track you across other websites.
Optional (analytics / marketing) — off by default. These are only set after you select "Accept all" in the cookie banner. The only optional service is Google Analytics (Google LLC), which sets "_ga" cookies to count visits and see which pages are used. It is not loaded at all until you accept, and if you later reject it stops setting cookies.
You can withdraw or change your choice at any time using the "Cookie settings" link in the website footer, or by clearing cookies in your browser.
5. Service providers and third parties
We share personal data only with providers that help us operate the website, and only as needed:
- Cloudflare, Inc. — website hosting, content delivery, DNS, and security. Processes technical data (including your IP address) and delivers transactional emails on our behalf.
- CARTO — supplies the basemap tiles for the map shown in the footer. When the map loads, your IP address is visible to CARTO as part of the tile request.
- Image CDNs (Unsplash, Pexels) — blog article images are delivered from these services; loading a page reveals your IP address to them.
- We do not sell your personal data, and we do not share it with advertisers or data brokers.
6. International data transfers
Our providers operate globally, so your personal data may be processed on servers outside Vietnam and outside your country of residence, including in the United States and the European Union. Where data is transferred out of the EEA or the UK, we rely on an adequacy decision or the European Commission's Standard Contractual Clauses (and the UK Addendum) as a safeguard. You can request a copy of the relevant safeguards by emailing support@choiee.com.
7. How long we keep your data
Booking enquiries are kept for up to 24 months after your enquiry is closed, so we can follow up and keep a record of our correspondence, after which they are deleted or anonymised.
Server and security logs are kept for a short period (typically up to 30 days) by our hosting provider.
Necessary cookies expire as set by your browser; the cookie-choice record lasts about 180 days.
8. Your rights
Depending on where you live, you have some or all of the following rights over your personal data: access, correction, deletion, restriction of processing, objection to processing, data portability, and the right to withdraw consent at any time without affecting prior processing.
If you are in the EEA or the UK, you also have the right to lodge a complaint with your local data protection authority.
If you are a California resident, you have the right to know what personal information we collect and how we use it, to request deletion, and not to be discriminated against for exercising your rights. We do not "sell" or "share" personal information as those terms are defined under the CCPA/CPRA.
To exercise any right, email support@choiee.com. We will respond within the timeframe required by applicable law (usually within one month). We may need to verify your identity first.
9. How we protect your data
The website is served over HTTPS. Access to booking enquiries is limited to the Choiee team and protected by authentication. No method of transmission or storage is completely secure, but we take reasonable technical and organisational measures to protect your data.
10. Children's privacy
The website is intended for adults. We do not knowingly collect personal data from children under 16. If a course involves a participant under 18, the enquiry and any related information must be submitted and managed by a parent or legal guardian. If you believe a child has provided us with personal data, contact us and we will delete it.
11. Links to other websites
Our website and blog may link to third-party sites (for example map or social media links). We are not responsible for the privacy practices of those sites; please review their own policies.
12. Changes to this policy
We may update this Privacy Policy from time to time. The "Last updated" date at the top shows the current version. For material changes, we will provide a prominent notice on the website before the change takes effect.
13. Contact us
SimpliTech (Choiee) — District 7, Ho Chi Minh City, Vietnam. Email: support@choiee.com. We aim to answer privacy enquiries within 30 days.