Privacy Policy

Introduction

Cast Origin ("we," "us," or "our") operates as a strategic financial planning service based in Vietnam. This privacy policy reflects our commitment to protecting the personal and financial information of our clients and website visitors.

When you share financial details with us, you're placing significant trust in our hands. We don't take that lightly. This policy outlines exactly what we collect, why we need it, and how we keep it secure.

By using our services or visiting cast-origin.com, you agree to the practices described here. If something doesn't sit right with you, please reach out before proceeding.

Information We Collect

Financial planning requires details. We collect information in three main ways: directly from you, automatically through our website, and occasionally from third parties when relevant.

Personal Information You Provide

• Contact details: name, email address, phone number, and physical address
• Financial information: income levels, assets, liabilities, investment goals, and risk tolerance
• Identification documents: as required by Vietnamese financial regulations
• Communication records: emails, consultation notes, and service requests
• Payment information: billing details for our services

Information We Collect Automatically

• Website usage data: pages visited, time spent, and navigation patterns
• Device information: IP address, browser type, operating system
• Cookies and similar technologies: for website functionality and analytics

How We Use Your Information

Every piece of information we collect serves a specific purpose. We don't gather data just to have it.

Primary Uses

• Delivering financial planning services tailored to your situation
• Communicating about your account, strategies, and market developments
• Processing payments and maintaining billing records
• Complying with Vietnamese financial regulations and legal requirements
• Improving our services based on client needs and feedback
• Protecting against fraud and unauthorized access

We analyze aggregate data to understand trends and improve our approach, but individual client information remains confidential. When we share case studies or insights, all identifying details are removed.

Data Security Measures

Security isn't just a checkbox for us. Financial data attracts bad actors, so we've built multiple layers of protection.

Technical Safeguards

• 256-bit SSL encryption for all data transmission
• Encrypted storage for sensitive financial information
• Regular security audits and vulnerability assessments
• Multi-factor authentication for account access
• Automated backup systems with geographic redundancy
• Intrusion detection and prevention systems

Organizational Safeguards

• Limited employee access based on role requirements
• Confidentiality agreements for all team members
• Regular security training and awareness programs
• Incident response procedures for potential breaches

Despite our best efforts, no system is completely impenetrable. If a security incident occurs, we'll notify affected clients promptly and work to minimize any impact.

Information Sharing and Disclosure

We keep your information close. Sharing only happens in specific, limited circumstances.

All third parties who receive your information are contractually bound to protect it and use it only for specified purposes. We vet partners carefully and monitor their compliance.

Data Retention

We don't keep information forever, but financial records require longer retention than most industries.

Retention Periods

• Active client records: maintained throughout our relationship plus 7 years
• Financial transaction records: 10 years from transaction date (Vietnamese regulatory requirement)
• Identification documents: 5 years after relationship ends
• Marketing communications: until you opt out or 2 years of inactivity
• Website analytics: 26 months maximum

When retention periods expire, we securely delete or anonymize your information. Some data may be retained longer if required by law or needed for legitimate business purposes like resolving disputes.

You can request early deletion of certain information, though we may need to retain some records for legal compliance or legitimate business needs.

Your Rights and Choices

Vietnamese law and our commitment to transparency give you several rights regarding your personal information.

Access and Correction

You can request copies of the personal information we hold about you. We'll provide this within 30 days, usually faster. If you spot inaccuracies, let us know and we'll correct them promptly.

Data Portability

You can request your data in a structured, commonly used format. This helps if you're switching to another service provider.

Deletion Requests

You can ask us to delete your personal information. We'll comply unless we have legal or contractual reasons to retain it. Financial regulations often require us to keep records for specified periods.

Marketing Communications

You can opt out of marketing emails anytime by clicking the unsubscribe link or contacting us directly. We'll still send essential service-related communications.

Cookie Preferences

You can control cookies through your browser settings. Some website features may not work properly without certain cookies.

International Data Transfers

Our operations are based in Vietnam, but some service providers operate in other countries. This means your data may be transferred internationally.

When we transfer data outside Vietnam, we ensure adequate protection through:

• Standard contractual clauses approved by Vietnamese authorities
• Verification that recipient countries provide adequate data protection
• Additional safeguards like encryption during transfer
• Regular audits of international service providers

We carefully select international partners and won't transfer data to countries with inadequate protection standards.

Cookies and Tracking Technologies

Our website uses cookies to function properly and improve your experience. Here's what we deploy and why.

Essential Cookies

These keep the website functioning. They handle things like security, account access, and form submissions. You can't disable these without breaking the site.

Analytics Cookies

We track how people use our site to identify improvements. This includes page views, time on site, and navigation patterns. The data is aggregated and anonymous.

Preference Cookies

These remember your choices, like language preferences or previous form entries, so you don't have to re-enter information.

We don't use advertising cookies or share cookie data with advertising networks. Most browsers let you control cookie settings through their privacy options.

Children's Privacy

Our services are designed for adults. We don't knowingly collect information from anyone under 18 years old.

If you're a parent and believe your child has provided us with personal information, contact us immediately. We'll delete it promptly.

Changes to This Policy

Privacy practices evolve. We may update this policy to reflect changes in our operations, legal requirements, or industry standards.

When we make significant changes, we'll notify active clients by email at least 30 days before the changes take effect. We'll also post the updated policy on our website with a new "Last Updated" date.

Continuing to use our services after policy changes means you accept the updated terms. If you disagree with changes, you can close your account before they take effect.

Vietnamese Regulatory Compliance

As a financial services provider operating in Vietnam, we comply with local data protection laws and regulations.

Relevant Legislation

• Law on Cyber Information Security (2015)
• Decree 13/2023/ND-CP on Personal Data Protection
• Law on Credit Institutions and financial regulations
• Circular on information security in banking and finance

We maintain registration with appropriate Vietnamese authorities and submit required reports on data processing activities. Our data handling practices meet Vietnamese standards for financial services.