This notice explains how SoftWSP, a brand of Netbase JSC ("SoftWSP", "we"), handles personal data when you visit our website, contact us, apply as a Design Partner or use our firmware, SBOM and vulnerability analysis services, including what we collect, why we use it, how long we keep it and the rights you have over it under GDPR and other applicable data protection law.
1. Who is responsible
The controller of personal data collected through this website is Netbase Enterprise Solutions and Applications Joint Stock Company (Netbase JSC), enterprise and tax code 0105951482, registered office No. 18, Lane 445/46 Lac Long Quan, Xuan La Ward, Tay Ho District, Hanoi, Vietnam — see about SoftWSP for more on the company behind the brand. Contact for privacy requests: [email protected].
2. What we collect
- Contact and application data. Name, company, role, email address, country and the message or application you send us through the contact page or the Design Partner form.
- Service data. Files you choose to upload for a job, such as firmware images, source code, component lists and network recordings. These files may contain personal or confidential information that you did not intend to share, which is why we ask you to review them first.
- Technical data. Basic information such as IP address, browser type and pages visited, collected through server logs and, where you agree, analytics.
- Communication records. Emails and call notes relating to your enquiry or job.
We do not intentionally collect special categories of personal data and ask you not to send them.
3. Why we use it, and on what basis
- To respond to you and to provide a service you request. Basis: taking steps at your request and performing a contract.
- To run and secure our website and services. Basis: our legitimate interest in operating a secure service.
- To send information you asked for. Basis: your consent or our legitimate interest in answering enquiries. You can ask us to stop at any time.
- To meet legal obligations, for example accounting and tax records.
We do not sell personal data. We do not send unsolicited marketing to people who have not asked to hear from us.
4. Customer files and confidentiality
Files uploaded for a job are used only to perform that job. They are stored encrypted in an isolated environment, accessed only by people and systems involved in the job, and deleted after the retention period agreed in writing with you. A confidentiality agreement covers the exchange. We do not use your files to train public AI models, and we do not publish findings about your products without your agreement.
Where AI tools help analyse or summarise your files, they operate under the same restrictions, and an engineer reviews the output.
5. Who we share data with
- Service providers that host our systems, deliver email and process payments, bound by contracts that protect the data. Today these are Cloudflare (website hosting, content delivery and email forwarding), our own servers operated by Netbase JSC, and Cloodo WorkSuite, the Netbase group's customer-relationship and ticketing system, where enquiries from our forms are recorded. Live chat is provided by Cloodo Chatco (Netbase JSC's own product) and loads only when you open it or after the page is idle.
- Professional advisers such as lawyers and accountants, where needed.
- Authorities, where the law requires it.
We share customer files with no one else unless you ask us to.
6. International transfers
Netbase JSC and its providers may process data in several countries. Where data from the European Economic Area or the United Kingdom is transferred to a country without an adequacy decision, we use appropriate safeguards, namely the European Commission's standard contractual clauses (and the UK addendum where relevant) or the provider's own approved transfer mechanism. Our team works from Vietnam, so enquiries are accessed from Vietnam. You can ask for a copy of the relevant safeguards at [email protected].
7. How long we keep data
- Enquiries and applications: for as long as needed to respond and for a reasonable period afterwards, unless you ask us to delete them sooner.
- Customer files: deleted after the agreed retention period.
- Job records and invoices: for the period required by law.
- Server logs: for a limited period, to keep the service secure.
8. Your rights
Depending on where you live, you may have the right to access your data, correct it, delete it, restrict or object to its use, receive a copy in a portable form, and withdraw consent — rights given to EEA and UK residents by the GDPR and the UK Data Protection Act 2018, and to California residents by the California Consumer Privacy Act. To exercise a right, contact us using the details on the contact page. You may also complain to your local data protection authority.
9. Security
We use access controls, encryption in transit and at rest, logging and isolation of customer jobs. No system is completely secure, and we cannot guarantee absolute security. If we become aware of a breach affecting your data, we will notify you as the law requires.
10. Cookies and analytics
The site uses only the cookies necessary to operate. We do not use advertising or analytics cookies today. Our hosting provider may set a strictly necessary security cookie to protect the site from abuse. If we add analytics or similar tools, we will ask for your consent where the law requires it and list them here.
11. Changes
We may update this notice. The date at the top of the page shows the latest version. Material changes will be announced on this page.
12. Contact
Questions about this notice or your data: [email protected], or see the contact page. This notice works alongside our terms of use, which govern the website and our services more generally.
What personal data does SoftWSP actually collect?
In short: the information you choose to give us, plus what any website collects by default. If you write to us or apply as a Design Partner, that is your name, company, role, email address and the content of your message. If you send us a job, it is also the files you upload for that job — firmware images, source code, component lists or network recordings — which is why section 4 treats those files as confidential rather than as ordinary form data.
We do not buy or sell personal data, and we do not set out to collect special categories of data such as health or biometric information. The full list of what we collect, why, and for how long is in section 2 and section 7 above; if anything here does not match what you expected, write to [email protected].