← Back to OmiKG

Privacy Policy

Version 2.0 · Effective 1 June 2026

OmiGroup is committed to respecting and protecting the personal data of customers, partners and visitors to https://omikg.omigroup.vn (“OmiKG”). OmiKG is a digital knowledge platform developed by Omi Group Joint Stock Company (OmiGroup) to present, research and provide knowledge models, technology solutions and analytical tools in the healthcare field, applying knowledge-graph technology to model and visualize the relationships between health, lifestyle, environmental, risk, symptom and disease factors. Information on the website is for reference, research and technology-demonstration purposes only; it does not provide examination, treatment, medical diagnosis or direct medical advice. Through its public functions, OmiGroup does not intentionally collect or process medical records or personal health data; any processing arising during cooperation or service delivery to partners or healthcare facilities is governed by separate contracts and confidentiality agreements, outside the scope of this Policy. This Policy explains how we collect, use, store and protect personal data, in compliance with the Law on Personal Data Protection No. 91/2025/QH15, Decree No. 356/2025/ND-CP and other applicable laws.

1. Data controller

2. Purpose and scope of data collection

When you visit the website, certain technical data may be collected automatically, including your IP address, domain, device type, browser and access behavior; we also use cookies and similar technologies to operate the site, analyze usage and improve your experience. Personal data is collected when you: send a contact, consultation or cooperation request (your name, email, phone, organization and message via the contact form); use the website (technical data: IP, device, browser, access behavior); or take part in surveys, programs or events organized by OmiGroup (if any). We collect personal data only to the extent necessary for the notified purposes and on a lawful basis. This website is intended for a professional and adult audience; we do not knowingly collect children's data.

3. Sensitive personal data

OmiGroup does not collect sensitive personal data by default through the website. In specific cooperation, consulting or solution-deployment contexts (e.g. digital health), OmiGroup may receive or process sensitive personal data, including: health or medical data; biometric data (if any); personal identifiers (ID card, passport); financial information (where necessary for the service); detailed location data; and data from projects containing third parties' sensitive personal data.

Because OmiKG is a knowledge graph about chronic disease and its root causes, the website may also process: health information you enter (if you submit disease-related queries); lifestyle and environmental information (nutrition, activity, environmental exposure); and your medical-content browsing history (medical pages viewed). Sensitive personal data is processed only with the data subject's separate consent and under the enhanced security measures required by law.

4. How we use your data

We process your personal data to receive, handle and respond to your requests; to provide information about OmiGroup's products, services and activities where you have consented; to analyze and improve the website and user experience; to ensure system security and prevent fraud; and to comply with legal obligations. Processing is carried out only within the notified purposes and on an appropriate legal basis. We do not use your data for automated decisions that produce legal effects, and we never sell it.

5. Data retention

Personal data is stored only for as long as necessary to fulfil the processing purpose and to meet applicable legal requirements. Contact-form data is deleted or anonymized once your enquiry and any follow-up are complete; analytics data is kept for the retention period configured in Google Analytics (up to 14 months for a standard property). Where the law requires a longer period, we retain data accordingly.

6. Sharing personal data

OmiGroup does not sell, trade or otherwise disclose your personal data to third parties. Data is shared only: with your consent; with our service providers acting as processors — Google (Analytics), Twilio SendGrid (delivering contact-form emails) and Cloudflare (hosting, security and the Turnstile anti-spam check) — within the necessary scope and under confidentiality obligations; at the lawful request of a competent state authority; or to protect OmiGroup's legitimate rights and interests as permitted by law. Recipients may process the data only for the authorized purpose and not for their own purposes.

Turnstile may run invisibly; for how Cloudflare processes its data, see: Cloudflare Turnstile Privacy Addendum.

7. Cross-border data transfers

Your personal data may be stored or processed outside Vietnam where necessary for OmiGroup's operations, including the use of international technology services. Such transfers are carried out on an appropriate legal basis, with a data-protection impact assessment where applicable, and with the security measures needed to keep data safe. OmiGroup is committed to full compliance with the law on cross-border transfers of personal data.

8. Data security

OmiGroup applies appropriate technical and organizational measures to protect personal data throughout collection, processing and storage. These may include, without limitation: encryption in transit (HTTPS/TLS); periodic data backups and the ability to restore after an incident; role-based access controls to limit unauthorized access; continuous system monitoring to detect and prevent improper access; security-awareness training for relevant staff; and a documented information-security incident-response process. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

9. Your rights

Under the Law on Personal Data Protection (No. 91/2025/QH15) and other applicable laws, you may: be informed about the processing of your personal data; give or withhold consent, and withdraw consent; access, view and correct (or request correction of) your data; request the provision, deletion or restriction of processing, and object to processing; lodge a complaint or denunciation, bring a lawsuit and claim compensation as provided by law; and request the competent authority or relevant parties to apply measures to protect your personal data. To exercise these rights, send a request to [email protected]; we receive and handle it within the time limits and procedures required by law.

10. Cookies and tracking technologies

OmiGroup uses cookies and similar technologies to keep the website running stably and continuously, to analyze access behavior in order to improve content and performance, and to support marketing activities (if any). In practice: your cookie/consent choice is stored locally in your browser and is not used for tracking; Google Analytics cookies (e.g. _ga) load only after you click “Accept” on the cookie banner; and Cloudflare Turnstile sets no tracking cookies. You can actively manage, limit or refuse cookies through your browser settings or any cookie-management tools provided on the website.

11. Contact

For any question, request or complaint regarding the processing of personal data, you can contact our Data Protection Officer (DPO): [email protected] · www.omigroup.vn · (+84) 24 6664 4599

12. General

This Policy is governed by and construed under the laws of Vietnam, including the Law on Personal Data Protection No. 91/2025/QH15, Decree No. 356/2025/ND-CP and any amending or replacing legislation from time to time. You have the right to lodge a complaint with the competent state authority for personal data protection. OmiGroup may amend or supplement this Policy at any time; updates are published on the website and take effect upon posting. This is version 2.0, effective 1 June 2026.