We are committed to protecting your personal data and being transparent about how we collect, use, and safeguard your information.
Our Commitment: At Brilliant Restaurant, we treat your personal data with the utmost care and respect. This Privacy Policy explains in clear, transparent language what data we collect, why we collect it, how we use it, and what rights you have. We comply with Vietnam's Personal Data Protection Decree (Decree 13/2023/ND-CP) and follow GDPR best practices for all our international guests.
Overview of this Privacy Policy
This Privacy Policy ("Policy") describes how Brilliant Restaurant ("we," "our," or "us") collects, uses, stores, shares, and protects personal data when you:
By using our services, you acknowledge that you have read and understood this Policy. If you do not agree with our practices, please discontinue use of our services.
Who is responsible for your data
The data controller responsible for your personal data is:
Vo Nguyen Giap Street, My Khe Beach
Da Nang City, 550000, Vietnam
Representative: General Manager
Data Protection Officer: [email protected]
Phone: +84-236-123-4567
Our Data Protection Officer (DPO) oversees compliance with this Policy and applicable data protection laws. You can contact the DPO directly at any time with questions or concerns about your data.
Types of personal information we gather
We collect different types of data depending on how you interact with us:
We never collect sensitive data such as health information, religious beliefs, or political opinions unless you voluntarily provide it (e.g., dietary requirements related to religious practices). Such data is processed with extra care and only for the specific purpose stated.
Purposes for processing your personal information
We use your personal data only for specific, legitimate purposes:
| Purpose | Data Used | Legal Basis |
|---|---|---|
| Process reservations | Name, contact, party details | Contract performance |
| Provide dining services | Dietary info, preferences | Contract performance |
| Process payments | Payment information | Contract performance |
| Send confirmations | Email, phone | Contract performance |
| Marketing communications | Email, preferences | Consent |
| Improve our services | Usage data, feedback | Legitimate interest |
| Legal compliance | Various as required | Legal obligation |
| Security & fraud prevention | Technical data, IP | Legitimate interest |
We will never use your data for purposes incompatible with those described above without first obtaining your explicit consent.
Why we are allowed to process your data
Under applicable data protection laws, we rely on the following legal bases:
Who we share your data with
We do not sell your personal data to anyone, ever. We only share data in the following limited circumstances:
We share data with carefully selected partners who help us operate our business:
All service providers are contractually bound to:
We may disclose data when required by law, court order, or governmental regulation, or when necessary to:
In the event of a merger, acquisition, or sale of assets, your data may be transferred to the new entity. We will notify you of any such change and any choices you may have regarding your data.
How we use cookies and similar technologies
Our website uses cookies and similar tracking technologies to enhance your experience. Here's what we use:
| Cookie Type | Purpose | Duration | Required |
|---|---|---|---|
| Essential | Website functionality, security, session management | Session | Yes |
| Analytics | Understand user behavior, improve site performance | Up to 26 months | No (with consent) |
| Preference | Remember your settings (language, region) | 12 months | No (with consent) |
| Marketing | Deliver relevant ads, measure campaign effectiveness | Up to 12 months | No (with consent) |
You can control cookies through your browser settings or our cookie consent banner. Essential cookies cannot be disabled as they are required for the website to function. Disabling other cookies may affect your user experience.
How long we keep your data
We retain personal data only for as long as necessary to fulfill the purposes for which it was collected:
| Data Category | Retention Period | Reason |
|---|---|---|
| Reservation data | 2 years after last visit | Customer service, preferences |
| Marketing preferences | Until consent withdrawn | Respect user choice |
| Financial records | 7 years | Vietnamese tax law |
| Website analytics | 26 months | Performance analysis |
| Contact form inquiries | 3 years | Customer service |
| Private event records | 5 years | Contractual, legal |
| CCTV footage | 30 days | Security |
After the retention period expires, data is securely deleted or anonymized. You can request earlier deletion by exercising your rights (see Section 9).
What you can do with your data
Under applicable data protection laws, you have the following rights regarding your personal data:
Request a copy of the personal data we hold about you
Correct inaccurate or incomplete data we hold
Request deletion of your data ("right to be forgotten")
Request limitation of processing in certain circumstances
Receive your data in a structured, machine-readable format
Object to processing based on legitimate interests or marketing
Withdraw consent at any time (does not affect prior processing)
File a complaint with Vietnam's data protection authority
To exercise any of these rights, email [email protected] or call +84-236-123-4567. We will respond within 30 days. No fee is required unless requests are manifestly unfounded or excessive.
Protection of minors' data
Our website and services are not directed to individuals under the age of 16. We do not knowingly collect personal data from children.
If you are a parent or guardian and believe your child has provided us with personal data, please contact us immediately at [email protected]. We will delete such data upon verification.
For children dining at our restaurant, any data collected (such as dietary requirements) is provided by parents/guardians and processed solely for the purpose of providing safe dining services.
How we protect your information
We implement robust technical and organizational measures to protect your data:
While no system is 100% secure, we continuously invest in security improvements and follow industry best practices to minimize risks. In the unlikely event of a data breach, we will notify affected individuals and authorities within 72 hours as required by law.
Transferring data outside Vietnam
As an international restaurant serving guests from around the world, some of your data may be transferred to and processed in countries outside Vietnam, including:
When transferring data internationally, we ensure:
How we notify you of updates
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors.
When we make material changes:
We encourage you to review this Policy periodically. Your continued use of our services after changes constitutes acceptance of the updated Policy.
Previous versions of this Policy are available upon request by emailing [email protected].
Get in touch with questions or concerns
If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:
Email: [email protected]
Phone: +84-236-123-4567
Mail: Data Protection Officer
Brilliant Restaurant
Vo Nguyen Giap Street, My Khe Beach
Da Nang City, 550000, Vietnam
Response Time: We respond to all privacy inquiries within 30 days. For urgent matters (such as suspected data breaches), please call us directly.
Supervisory Authority: If you are not satisfied with our response, you have the right to lodge a complaint with Vietnam's Ministry of Public Security (A05 Department), which oversees personal data protection under Decree 13/2023/ND-CP.
Quick answers to the most common questions about our privacy practices.
Our Data Protection Officer is here to help. We're committed to transparency and will answer any questions about how we handle your personal data.