Last updated: 7 October 2026
1. Scope and controller
This policy applies to the dbr.business website and direct communications with DBR, an independent developer (not yet a registered company) ("DBR", "we"). DBR is the controller of the personal data described below. It is prepared under: Law on Personal Data Protection No. 91/2025/QH15 (effective 1 January 2026) and Decree 356/2025/ND-CP implementing it (which replaced Decree 13/2023/ND-CP), and Law on Cybersecurity No. 116/2025/QH15 (effective 1 July 2026).
Each DBR app has its own privacy policy and terms describing exactly what data that app collects: DailyCalo, Nhà Mình, Timee, Q-Smoke, Never Late. This page applies only to the dbr.business website and direct contact with DBR.
2. Data we process
- When you view the website: the site has no forms, sets no tracking cookies and uses no analytics or advertising. Like any website, our infrastructure provider (Cloudflare) processes technical logs such as IP address, browser and time of access to deliver pages and defend against attacks. The website stores nothing in your browser.
- Fonts: pages load fonts from Google Fonts, so Google may receive your IP address and browser information under Google's policy.
- When you email us: we process your email address, name and what you write to reply, collaborate or support you, and keep it as long as needed for that purpose.
3. Purposes and basis
We process data to run and secure the website, respond to your enquiries and comply with law. Our basis is your consent (when you choose to email us) and legitimate security needs. We do not sell data or use it for advertising.
4. Sharing and transfers abroad
We share data only with infrastructure providers (Cloudflare, Google Fonts, an email provider) and with competent state authorities on a lawful request. These providers may operate servers outside Vietnam; transfers follow the rules on cross-border transfer of personal data.
5. Retention
Enquiry emails are kept as long as needed to handle the request and meet legal obligations, then deleted. Technical logs are kept by the infrastructure provider on its own cycle.
6. Your rights
Under the Law on Personal Data Protection you have the right to: be informed; consent or refuse (and withdraw consent); access, view and correct your data; obtain a copy; request deletion; request restriction of processing; object to processing; and complain, report, bring a claim and seek compensation as provided by law.
To exercise these rights, write to contact@dbr.business. We acknowledge your request and handle it within the statutory time limits; we may ask you to verify your identity to prevent impersonation. Withdrawing consent does not affect processing already carried out, but some features may stop working.
7. Security and breach notification
The website is served only over HTTPS with security headers; we restrict internal access.
If a personal-data breach occurs that may harm your lawful rights and interests, we will notify the competent data protection authority within 72 hours of discovery, take remedial measures, and notify you where the law requires.
8. Children
The website is not directed at children under 16 and we do not knowingly collect children's data.
9. Changes
We may update this document when the product or the law changes. Material changes will be announced in the app or by email before they apply; the update date is shown at the top. Continuing to use the service after the effective date means you accept the new version, unless the law requires us to obtain your consent again.
10. Contact
DBR, an independent developer (not yet a registered company) · Email: contact@dbr.business. You may also complain to Vietnam's competent personal data protection authority (under the Ministry of Public Security).