Privacy Notice

This notice explains how Karutek handles personal data collected through this website. It applies to the karutek.com website, including its staging site, and to the enquiry forms published on it.

Who we are

Karutek is the controller of the personal data described in this notice. Karutek is a company established in Vietnam.

Address: 68 Nguyen Hue Street, Sai Gon Ward, Ho Chi Minh City, Vietnam.

Contact for privacy matters: connect@karutek.com

If you write to us about privacy, please use the same email address you used on the form so that we can locate your record.

What this website does with personal data

This website is a marketing website. The only place where we ask you for personal data is our enquiry forms, such as the request for a tailored demo. We do not operate user accounts on this website, we do not take payments on it, and we do not run advertising or analytics tracking on it.

What we collect

Information you give us on a form

When you submit an enquiry form we collect the information you enter. On our current form that is:

First name and last name
Work email address
Company
Country or region
Job role
The operational problem you select
The product modules you select
Your preferred contact method
Optional details you may choose to add, such as your current method, number of sites or business units, expected number of users, target date, and any free text notes
Whether you ticked the consent box, and whether you ticked the separate optional box asking to receive resources and updates

Please only enter information that is relevant to your enquiry. Do not send us sensitive personal data or confidential material through these forms.

We may publish other enquiry forms on this website. Each form collects the fields shown on that form. The rest of this notice applies to all of them.

Information collected with your submission

To understand where an enquiry came from and to keep our records accurate, each submission is stored together with:

The page and website address the form was submitted from, and the referring address if your browser sent one
The name of the form template used
Campaign parameters in the link you followed, commonly called UTM parameters
The page language
The date and time of submission
A simple flag recording whether the email address you gave belongs to a free public mail service or to a company domain

This flag is a note on the record. It does not decide anything about you on its own and it does not block your submission.

Information collected to keep the forms secure

Our forms are protected against automated abuse. For this purpose our service provider Cloudflare processes technical signals from your browser when the form loads and when you submit it, including your IP address, your browser user agent, a network connection fingerprint, and the identifier of the site you are on. Cloudflare states that these signals are used only to tell automated traffic from human traffic and not to identify, profile or target individuals.

Our own form endpoint also uses your IP address for a short lived limit on how many submissions can be made in a period, and uses a signed technical token to confirm that the form was loaded normally before it was submitted.

Why we use it and on what legal basis

To answer your enquiry

We use the information on the form to review your enquiry, to reply to you, and to decide with you what the appropriate next step is. Our legal basis is your consent, which you give by ticking the consent box before you submit. Where the law of your country allows it, we may also rely on our legitimate interest in responding to a business enquiry that you sent us.

To send you resources and updates

We only send marketing messages if you tick the separate optional box for that purpose. Our legal basis is your consent. That box is never pre ticked, and leaving it unticked does not affect your enquiry. You can withdraw this consent at any time using the unsubscribe link in any message we send, or by writing to connect@karutek.com. Withdrawing consent does not affect anything we did before you withdrew it.

To keep the forms and the website secure

We use the technical and bot defence data described above to prevent automated abuse of our forms. Our legal basis is our legitimate interest in protecting our website and our systems from misuse.

To keep records

We keep a record of enquiries and of the consents given. Our legal basis is our legitimate interest in maintaining accurate business records and in being able to show that we handled your data as described.

Who we share it with

We do not sell personal data and we do not trade in personal data. We do not share your enquiry with third parties for their own marketing.

We use the following service providers, who process personal data on our instructions:

Brevo, a contact and email service provider established in the European Union, which stores the contact record created from your submission and sends any messages you have opted in to receive.
Cloudflare, which provides the bot defence described above for our forms.
The hosting provider that serves this website and runs the form endpoint.

Each of these providers is engaged under a written agreement covering data protection that includes, where applicable, standard contractual clauses or equivalent contractual safeguards. We may also disclose personal data where we are required to do so by law, or where it is necessary to establish, exercise or defend legal claims.

No profiling and no automated decisions

We do not carry out profiling and we do not make decisions about you by automated means that produce legal effects for you or that significantly affect you in a similar way. A person at Karutek reviews every enquiry.

International transfers

Karutek is established in Vietnam, so personal data you submit is accessible to our team in Vietnam. Our contact data is held with Brevo on infrastructure in the European Union. Our bot defence provider operates a global network, so the technical signals it processes may be handled outside your country.

Where personal data is transferred out of the European Economic Area, the United Kingdom, or another country whose law restricts such transfers, we rely on the contractual protections in our agreements with the parties involved, including standard contractual clauses approved by the European Commission where those apply, together with the technical and organisational measures those parties maintain. You can ask us for information about the safeguards that apply to your data by writing to connect@karutek.com.

How long we keep it

We keep enquiry data for as long as it remains relevant to the enquiry or to the business relationship that follows from it. We review our contact records periodically and remove records that are no longer relevant, unless we still need them to comply with a legal obligation or to establish, exercise or defend a legal claim.

If you opted in to receive resources and updates, we keep your contact details for that purpose until you withdraw your consent or unsubscribe, after which we retain only the minimum record needed to show that you asked not to be contacted.

Technical bot defence data is short lived and is retained by the relevant provider under its own arrangements for that purpose.

Your rights

Depending on where you are and which law applies to you, you may have the following rights in relation to your personal data:

To be informed about how your data is processed, and to ask for a copy of the data we hold about you
To have inaccurate or incomplete data corrected or updated
To ask us to delete your data
To ask us to restrict or suspend how we use your data
To object to processing that we carry out on the basis of a legitimate interest
To object at any time to the use of your data for direct marketing
To withdraw a consent you have given, at any time, without affecting processing carried out before you withdrew it
To receive data you gave us in a structured, commonly used and machine readable format, and to have it sent to another organisation where that is technically feasible
To ask for information about the recipients of your data, and to complain to the competent authority

To exercise any of these rights, write to connect@karutek.com. We will respond within the period required by the law that applies to your request. We may need to ask you for information to confirm your identity before we act, so that we do not disclose data to the wrong person.

If you are in the European Economic Area or the United Kingdom, you also have the right to lodge a complaint with your national data protection supervisory authority. If Vietnamese data protection law applies to you, you may also complain to the competent Vietnamese authority. We would ask you to contact us first so that we have a chance to resolve the matter.

Children

This website is aimed at business users. It is not directed at children, and we do not knowingly collect personal data from anyone under the age of sixteen. If you believe a child has submitted personal data to us, write to connect@karutek.com and we will delete it.

Security

We apply technical and organisational measures appropriate to the nature of the data described in this notice, including encrypted transport of form submissions, restricted access to the contact records, and the automated abuse controls described above. No method of transmission or storage can be guaranteed to be completely secure, and we do not warrant absolute security.

Changes to this notice

We may update this notice from time to time, for example when we publish a new form or engage a new service provider. The current version is always the one published on this website, and the version and effective date below will tell you which version you are reading.

Contact

Karutek, 68 Nguyen Hue Street, Sai Gon Ward, Ho Chi Minh City, Vietnam. Email: connect@karutek.com

Privacy Notice v1.0. Effective date: 18 August 2026.