Data Protection Policy

1. Data controller

CTC Smart Tech Joint Stock Company — 228 Tran Phu Street, Duu Lau Ward, Viet Tri City, Phu Tho Province, Vietnam. Contact point for personal data: info@smarttechctc.io.

2. What we collect

There is exactly ONE place on this site that collects personal data: the AI Readiness Assessment form.

• What you provide: full name, company name, work email, phone number (optional).
• Diagnostic answers: headcount, your role, industry, current AI usage, and the pain points and goals you selected.
• Technical: your IP address is held in server memory for at most 60 seconds to rate limit form submissions. It is NOT written to any database and is not linked to your record.

This site runs no behavioural analytics, no retargeting advertising, no third-party tracking scripts, and builds no user profiles.

3. Why we use it

• To prepare for our first conversation with you.
• To send you the detailed assessment you requested.
• To prevent form abuse (IP address only, as in section 2).

We do not sell, rent or trade your data with third parties for marketing purposes.

4. Legal basis

Processing is based on your consent, given via the confirmation checkbox when you submit the form. You may withdraw consent at any time (section 7).

5. Where it is stored and who processes it

When you submit the form, the data goes to two places:

• CTC's internal email — delivered through the Resend service.
• Google Sheets — stored so the team can track and respond.

Both providers process the data on CTC Smart Tech's instructions and run infrastructure outside Vietnam. No party other than these two receives data from the form.

5b. Calendly — when you book a call

The assessment page also embeds the Calendly scheduling tool. This is a SEPARATE channel from the form above:

• When you scroll to the booking block, your browser loads Calendly's code and Calendly may set its own cookies (details in the Cookie Statement).
• If you book, whatever you enter in that frame (name, email, chosen time) is collected and stored by Calendly under their policy, then passed to CTC Smart Tech so we know to show up.
• We use those details for exactly one purpose: preparing for and holding the call you booked.
• If you do not book, no data of yours reaches Calendly beyond the ordinary technical information involved in loading a web resource.

Calendly's privacy policy: calendly.com/privacy. To avoid Calendly entirely, use the assessment form or the hotline in the footer.

6. Retention

Contact details and diagnostic answers are kept while an opportunity is being discussed and for up to 24 months after the last contact, unless you ask us to delete them sooner. IP addresses used for rate limiting are cleared from memory within 60 seconds.

7. Your rights

• Ask what data we hold about you.
• Ask us to correct inaccurate data.
• Ask us to delete your data.
• Withdraw consent and ask us to stop contacting you.

Send requests to info@smarttechctc.io. We respond within 7 business days. You do not need to give a reason for a deletion request.

8. Security

The site runs entirely over HTTPS. Forms are rate limited by IP and protected against duplicate submission. Access to the mailbox and the storage sheet is limited to the responsible team.

9. Children

This site addresses business customers and is not directed at people under 16. We do not knowingly collect children's data.

10. Changes to this policy

Any change is reflected on this page with the update date shown at the top.