Legal
Privacy Policy
This policy explains what personal data we collect, why we collect it, who we share it with, and the rights you have over it.
Last updated 30 July 2026
Who we are
UXBOX Company Limited (“UXBOX”, “we”, “us”) is a product design studio registered in Vietnam at 85 Le Van Huan, Phuong Tan Binh, Ho Chi Minh City, Vietnam, company number 0318496164.
We are the data controller for the personal data described in this policy. For any question about it, contact us at hello@uxbox.org.
Information we collect
We collect personal data in two circumstances.
When you contact us. Our contact form collects your name, company name, email address and the project type you select. If you email us directly, we hold the information contained in your message.
When you browse the site. If you consent to analytics, we collect information about your visit, including pages viewed, approximate location derived from your IP address, referring website, and device and browser information.
We do not collect special category data such as health, biometric or political information, and we ask that you do not send it to us.
How we use it, and our legal basis
We process personal data on the following bases:
- To respond to your enquiry and discuss a possible engagement — our legitimate interests, and steps taken at your request prior to entering a contract.
- To deliver services you have engaged us to provide — performance of a contract.
- To measure how the site is used — consent, which you may withdraw at any time.
- To meet accounting and tax obligations — compliance with a legal obligation.
We do not sell personal data, and we do not use it for advertising or profiling.
How long we keep it
Enquiries that do not result in an engagement are deleted after 24 months.
Records relating to completed work — contracts, invoices and related correspondence — are retained for as long as we operate, to meet accounting, tax and audit obligations. Where those records contain personal data that is no longer required for that purpose, we remove it.
Analytics data is retained for 14 months, the period configured with the provider.
Your rights
Subject to your jurisdiction, you may have the right to request access to your personal data, to have it corrected or erased, to restrict or object to its processing, and to receive it in a portable format. Where we rely on consent, you may withdraw it at any time; withdrawal does not affect processing carried out before it.
To exercise any of these rights, contact hello@uxbox.org. We will respond within one month. There is no charge.
If you believe we have not handled your personal data properly, you may lodge a complaint with the data protection authority in your country of residence.
Security
The site is served over HTTPS, and access to systems containing enquiries is restricted to those who require it. No system can be guaranteed secure. Where a breach affects your rights, we will notify you and the relevant authority as required by law.
Changes to this policy
We update this policy when our practices change, and revise the date shown above. This version is dated 30 July 2026.