LEGAL
Privacy Policy
Last updated: 13 May 2026 · Effective: 13 May 2026
The BIM Factory Ltd ("TBF", "we", "us", or "our") is committed to protecting the privacy of individuals who interact with our website, services, and platforms. This Privacy Policy explains what data we collect, why we collect it, how we use it, and what rights you have over it.
01
Who We Are
The BIM Factory Ltd is a Vietnam-registered company (MST: 0312 567 436) headquartered at 20-B Doan Huu Trung, An Khanh Ward, Ho Chi Minh City, Vietnam. We are the data controller for personal data collected through our website and in the course of our business operations.
You can reach our team on data and privacy matters at
02
Data We Collect
We collect personal data in the following ways:
Data you provide directly
-
Name, job title, company name, and contact details submitted via our inquiry or contact forms.
-
Email address and communication content when you email us or respond to our correspondence.
-
Project details, files, drawings, and specifications shared with us during onboarding or project delivery.
-
Payment and billing information shared in connection with invoicing.
Data collected automatically
-
IP address, browser type, device information, and referring URL when you visit our website.
-
Pages visited, time on site, and navigation behavior via analytics tools.
-
Cookies and similar tracking technologies as described in section 07 below.
Data from third parties.
-
Professional profile information from LinkedIn when you contact us or connect with us through that platform.
-
Referral information from business partners or introduction networks.
03
How We Use Your Data
We use personal data for the following purposes:
-
Responding to inquiries, preparing proposals, and onboarding clients onto projects.
-
Delivering, managing, and improving our BIM services and project outputs.
-
Issuing invoices, processing payments, and managing accounts receivable.
-
Sending project updates, status reports, and other communications directly related to active engagements.
-
Sending marketing communications about our services, case studies, or industry insights, where you have consented or where we have a legitimate business interest to do so.
-
Analysing website usage to improve our online presence and content.
-
Complying with legal and regulatory obligations.
We do not use your data for automated decision-making or profiling that produces legal or similarly significant effects.
04
Legal Basis for Processing
We rely on the following legal bases to process personal data:
-
Contract performance: processing necessary to deliver services you have engaged us for.
-
Legitimate interests: processing required for our business operations, security, fraud prevention, and direct marketing to existing or prospective clients.
-
Legal obligation: processing required to comply with Vietnamese law and applicable international regulations.
-
Consent: where we have obtained your specific, informed consent, for example for newsletter subscriptions or non-essential cookies.
05
Data Sharing and Third Parties
We do not sell personal data to third parties. We may share data in the following limited circumstances:
-
Service providers: cloud storage providers, project management platforms, accounting software, and email services used to run our operations. These providers process data on our behalf under data processing agreements.
-
Professional advisors: lawyers, accountants, and auditors where required for legal or financial compliance.
-
Legal authorities: where required by court order, regulatory obligation, or law enforcement request.
-
Business transfers: in the event of a merger, acquisition, or sale of business assets, your data may be transferred to the relevant third party, subject to the same privacy protections.
When we transfer data outside Vietnam, we take steps to ensure appropriate safeguards are in place consistent with applicable data protection laws.
06
Data Retention
We retain personal data for as long as necessary to fulfil the purposes for which it was collected, including satisfying legal, accounting, and reporting requirements. Typical retention periods are:
-
Client contact and project data: 7 years from project close, to comply with contractual and tax obligations.
-
Inquiry data where no project followed: 2 years from the date of last contact.
-
Marketing contact data: until you unsubscribe or withdraw consent, or 3 years from last engagement, whichever is sooner.
-
Website analytics data: 26 months in aggregated or anonymised form.
When data is no longer required, we securely delete or anonymise it.
07
Cookies
Our website uses cookies and similar technologies. A cookie is a small text file placed on your device that helps us operate and improve our website. We use:
-
Strictly necessary cookies: required for the website to function. These cannot be disabled.
-
Analytics cookies: to understand how visitors interact with our site (for example, Google Analytics). These are only placed with your consent.
-
Preference cookies: to remember settings or choices you make during a visit.
You can control cookie settings through your browser. Disabling certain cookies may affect website functionality. You may withdraw consent for non-essential cookies at any time by clearing your browser's cookie storage.
08
Security
We implement appropriate technical and organisational measures to protect personal data against unauthorised access, alteration, disclosure, or destruction. These include access controls, encrypted file storage, secure communication channels, and internal data handling policies.
No method of transmission over the internet is completely secure. While we take reasonable precautions, we cannot guarantee absolute security. If you have reason to believe that your data has been compromised, please contact us immediately.
09
Your Rights
Depending on your jurisdiction, you may have the following rights regarding your personal data:
-
Access: request a copy of the personal data we hold about you.
-
Rectification: ask us to correct inaccurate or incomplete data.
-
Erasure: request deletion of your data where there is no legitimate reason for us to continue holding it.
-
Restriction: ask us to limit processing of your data in certain circumstances.
-
Portability: request your data in a structured, machine-readable format.
-
Objection: object to processing based on legitimate interests, including direct marketing.
-
Withdraw consent: where processing is based on consent, withdraw it at any time without affecting prior lawful processing.
To exercise any of these rights, email us at
We will respond within 30 days. We may need to verify your identity before processing a request.
10
Third-Party Links
Our website may contain links to third-party websites, including LinkedIn, Facebook, and client or partner sites. We are not responsible for the privacy practices of those sites and encourage you to review their privacy policies before submitting any personal data to them.
11
Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, services, or legal obligations. The updated version will be published on this page with a revised effective date. We encourage you to review this policy periodically. Continued use of our website or services after any update constitutes acceptance of the revised policy.
12
Contact
For questions, requests, or complaints regarding this Privacy Policy or the handling of your personal data, please contact us at:
The BIM Factory Ltd
20-B Doan Huu Trung, An Khanh Ward,
Thu Duc City, Ho Chi Minh City, Vietnam
+84 028 3519 0091