Personal Data Protection Policy

Last updated: November 3, 2026

JK - VISA Study Abroad Consulting Co., Ltd. (CÔNG TY TNHH TƯ VẤN DU HỌC JK - VISA, "JK Edu", "we"), tax code 0110840996, is the controller and processor of the personal data of students using the JK Edu online learning system. This policy explains what data we collect, why we use it, where it is stored, who we share it with and what rights you have, under Vietnam's Law on Personal Data Protection No. 91/2025/QH15 and Decree No. 356/2025/ND-CP.

1. Data we collect

The system does not collect ID card or passport numbers, phone numbers, dates of birth or payment details, and does not use tracking or advertising tools (Google Analytics, Facebook Pixel, etc.).

Account information: full name, email and password (stored as a one-way hash that we cannot read). Your account is created by the centre when you enrol in a course.
Learning data: the courses and lessons assigned to you, your progress in each lesson, the days you studied, quiz results, and the answers and essays you submit.
Technical data: IP address, browser and device type, login and activity times, error logs when viewing documents, and logs of attempts to open pages you are not allowed to access.
The time you accepted this policy and the version you accepted.

2. Purposes of processing

We do not use your data for advertising and we do not buy or sell personal data.

Creating and managing your account, granting access to courses and authenticating you when you log in.
Delivering lessons, grading quizzes, saving your progress and reminding you of unfinished lessons.
Keeping the system secure: limiting simultaneous logins, detecting unauthorised access and fixing errors.
Internal reporting: student numbers and learning results for teachers and management.
Contacting you about your course when needed.

3. Cookies

The system only uses cookies that are strictly necessary to keep you logged in, protect forms (CSRF) and remember your language. There are no advertising or analytics cookies.

Videos are played through an embedded player in privacy-enhanced mode. The video provider may set cookies once you press play.

4. Where data is stored and who receives it

Data is stored on the servers and backups of a cloud computing provider. The following types of service providers process data on our behalf and may be located outside Vietnam:

Cloud infrastructure: servers, database, files and backups.
Connection protection and acceleration: processes IP addresses and request content.
Email delivery: receives your name and email contained in notification emails.
Video playback, fonts and interface libraries: receive IP addresses and browser information.

Within the centre, only teachers, administrators and course approvers who need it for their work can see your data. We only disclose data to competent state authorities when the law requires it.

5. How long we keep data

Account and learning data: while you are studying and for up to 2 years after your access expires, then deleted or anonymised, unless the law requires us to keep it longer.
Login sessions: deleted after 3 days of inactivity.
System logs: up to 12 months.
Database backups: the 7 most recent copies.

6. How we protect data

Passwords are stored as one-way hashes; connections use HTTPS; access is restricted by role; each account can be logged in on at most 2 devices at once and sessions can be revoked; data is backed up daily.

If a personal data breach occurs, we notify the competent authority within 72 hours as required by law, and notify you if the breach may affect you.

7. Your rights

To be informed about how your data is processed.
To give or refuse consent, and to withdraw consent.
To view your data and receive a copy.
To have incorrect data corrected.
To have your data deleted.
To restrict or object to processing.
To file complaints, denunciations or lawsuits and claim compensation as provided by law.

Send your request to [email protected] with your full name and account email. We reply within 2 working days and handle the request within the time limits of Decree 356/2025/ND-CP (for example, corrections within 10 days and deletion within 20 days).

Withdrawing consent or deleting your data may mean you can no longer use the learning system, but it does not affect processing carried out before.

8. Minors

For students under 16, enrolment and data processing require the consent of a parent or guardian; students aged 7 and over must also give their own consent.

9. Changes to this policy

When this policy changes materially, we update the date at the top of this page and ask you to read and accept it again the next time you log in.

10. Contact

JK - VISA Study Abroad Consulting Co., Ltd. (CÔNG TY TNHH TƯ VẤN DU HỌC JK - VISA), tax code 0110840996.
Email: [email protected]