Privacy
Cookie policy
Learn what this website stores in your browser and choose optional features.
Version: 2026-10-12-v1 · Effective date: 12/10/2026
Data controller and contact
AVEN VIETNAM
Privacy contact: agent@aven.vn
What does this website store?
| Name | Purpose | Category | Retention |
|---|---|---|---|
| iso_form_session | Links a random form security code to your browser to validate submissions (CSRF), preventing other websites from submitting on your behalf. Necessary because this browser-bound protection cannot work without it; never used for tracking or advertising. | Necessary | 24 hours |
| iso_cookie_consent (localStorage) | Remembers categories, policy version and choice time; contains no personal identifier. | Necessary | 180 days; asked again after expiry or a policy version change |
Fonts are hosted locally, not fetched from Google Fonts. Portal and Console login cookies are not used on this WordPress website. Forms submit to the website server; contact processing and newsletter consent remain separate choices.
Statistics, marketing and embedded content
Off by default. Only declared resources with a stated purpose can start after consent for their category. Undeclared external resources stay blocked even after Accept all.
No statistics or marketing services are currently declared.
Cloudflare infrastructure
Requests pass through Cloudflare for delivery and protection against attacks. When bot protection or challenges are enabled, security cookies may include __cf_bm (expires after 30 minutes of inactivity) or cf_clearance (configured challenge lifetime). These are not advertising cookies. Infrastructure cookies cannot be deleted by WordPress code; use browser settings. This list does not claim that all these cookies are set on every visit.
Cloudflare also publishes NEL/Report-To network error reporting headers, with a configured lifetime of 7 days in the inventory run. These are not cookies; reports may contain connection information and page addresses. WordPress consent controls do not control infrastructure processing. Behavioural analytics must not be enabled automatically through this mechanism.
Legal basis and scope
This policy references Personal Data Protection Law 91/2025/QH15 dated 26/06/2025 and Decree 356/2025/NĐ-CP dated 31/12/2025, effective 01/01/2026. Law 91/2025/QH15 · Decree 356/2025/NĐ-CP.
Change or withdraw consent
Click Withdraw consent in the footer to return to necessary only in one step, or open Cookie preferences to change categories. The website stops optional services and removes declared same-domain cookies and storage where the browser permits. If optional code has already run, the page reloads to stop it. Other-domain and HttpOnly cookies may require browser settings. Withdrawal does not affect browsing, form submissions or earlier lawful processing.
If browser storage is blocked, only necessary features operate. Clearing browser data causes the consent prompt to appear again.