Privacy notice

This notice applies when you access FTS Impact Lab, create an account, sign in with Google, use the assessment, idea, design and measurement tools, save drafts or submit an advisory request to Fly To Sky.

Controller and scope

FTS Impact Lab operates within Fly To Sky Charity Network. Depending on the function, Fly To Sky may act as a personal data controller, controller-processor or work with infrastructure providers to process data for disclosed purposes.

Data we may collect

• Account and contact data: name, email, phone number, organisation, title and profile information.
• Programme/project data: themes, location, beneficiaries, objectives, budget, timeline, assessment answers, drafts and evidence/documents you voluntarily upload.
• Technical data: login sessions, access times, device/browser information and logs needed for security, operations and troubleshooting.

Purposes of processing

• Operate accounts and allow saved work to be restored across devices.
• Generate assessments, idea suggestions, design direction, measurement support and related analyses.
• Classify what you enter against scales, reference frameworks and SDGs using AI tools; issue a submission code; pass the submission (without contact details in the analysed content) to FTS staff to write an assessment within 48 hours and send it back to you.
• Receive, assign, track and respond to advisory or partnership requests submitted to Fly To Sky.
• Maintain platform security, prevent abuse, improve service quality and meet legal obligations.

Legal basis and consent

Processing is based on data subject consent, user-requested services, legitimate operational interests and other grounds permitted by applicable law. Where a form contains a consent statement, voluntarily submitting that form records the user's affirmative action in relation to the stated processing.

Data subject rights

Under Vietnam's personal data protection rules, data subjects may have rights to be informed, consent, access, withdraw consent, request deletion, restrict processing, request data provision, object, complain or seek legal remedies, claim damages and self-protect, subject to applicable legal conditions and limitations.

Sharing, service providers and transfers

Fly To Sky does not sell personal data. Data may be processed by authorised personnel, cloud/authentication providers, AI services or implementation partners to the extent necessary for the functions you use. Where personal data is transferred overseas, Fly To Sky will assess and fulfil applicable legal obligations.

AI analysis uses Cloudflare Workers AI; when the daily quota is used up, Google Gemini may be used. Email addresses, phone numbers and contact details are removed from analysed content before it is sent to any AI service. When you subscribe to Newsletter 360, your email is passed to Sustainability 360° (benvung360.com.vn, run by the same operator) to send the confirmation and newsletter.

Security, retention and sensitive data

FTS Impact Lab applies reasonable technical and organisational measures against unauthorised access, loss or disclosure. Data are retained for periods appropriate to the processing purpose, operations, dispute handling and legal obligations. Users should avoid submitting passwords, financial data, health information, children's data or other sensitive data in free-text fields unless strictly necessary and lawfully supported.

Cookies and authentication

The platform may use cookies or equivalent session mechanisms to maintain sign-in, remember language preferences and secure sessions. If you use Google sign-in, Google processes authentication under its own policies; FTS Impact Lab receives only the account information needed for authentication within the permissions you grant.

Privacy contact

To request access, correction, deletion or exercise privacy rights, contact Fly To Sky Charity Network at impact@flytoskycharity.vn or donghanh@flytoskycharity.vn; phone 0375.136.800 / 0935.939.446. Identity verification may be required before a request is processed.

Policy updates

This notice may be updated to reflect changes in functionality, data processing or legal requirements. The latest version will be published on the website with its update date.

Key reference: Vietnam's Decree 13/2023/ND-CP on personal data protection and other applicable Vietnamese laws. This notice describes platform practices and is not case-specific legal advice.