Privacy Policy

This policy describes information handled through hcpackagingasia.com when business customers browse packaging information or ask for a quotation.

Who is responsible and how to contact us

HC PACKAGING VIETNAM COMPANY LIMITED is responsible for the processing of personal information through hcpackagingasia.com. HC Packaging is the business brand used on this website.

Registered address: Lot C-10B-CN, Road D13, Bau Bang Industrial Park Expansion, Bau Bang Commune, Ho Chi Minh City, Vietnam.

For privacy questions or requests about your inquiry information, contact hc@hcpackagingasia.com.

Information you provide

Our Contact and product inquiry forms ask for your email address and estimated order quantity. You may also provide your name, company, contact number, packaging requirements and box dimensions. The Contact form offers an optional packaging type. Product inquiries can include one optional artwork file. We also receive information you choose to include in later correspondence.

Please provide business information relevant to your packaging request. Avoid including sensitive personal information or artwork you are not authorised to share.

How inquiry information is used

We use these details to respond to your packaging inquiry, clarify specifications, prepare quotations and continue the business discussion. The inquiry record includes the related product or page and any referral or campaign information supplied with the request, so the team can understand its context.

The submission system uses security tokens, content fingerprints, a keyed hash derived from the IP address and submission times to validate requests, limit abuse and avoid duplicate inquiries and duplicate email notifications. Application security logs record short technical hashes and outcomes rather than inquiry text.

Storage, access and service providers

Inquiry information is stored as a non-public record in the website’s WordPress database on Alibaba Cloud infrastructure in the US East (Virginia) region. Existing sales and administrator permissions control access in the website backend. Inquiry notification emails are sent through SMTP2GO to vivi@hcpackagingasia.com. This website storage is in the United States, outside Vietnam, where the company is based.

Business email for this domain is routed through NetEase enterprise email services. Our SMTP2GO sending account is hosted in the United States, and our business mailbox is configured for storage in the United States. This involves processing outside Vietnam, where our company is based. The providers may handle service-related information in other locations under their applicable service arrangements. For questions about the international handling of your inquiry information, contact the privacy address above.

Artwork and attachments

Artwork is used to understand and discuss the packaging request. New artwork uploads are stored outside the public website directory and accessed through a permission-checked backend download. Files are not automatically unpacked or displayed inline. Type, content and size checks reduce upload risks; these checks are not a malware-scanning service.

Retention and deletion

Our standard retention review schedule distinguishes business correspondence from artwork and records that have legal or contractual retention requirements:

• Inquiries that do not result in an order, and related business emails: 24 months after the last meaningful business communication.
• Artwork for inquiries that do not result in an order: 12 months after the last meaningful business communication.
• Artwork associated with orders: 36 months after the last order relating to that artwork.
• Contracts, orders and financial records: for the periods required by applicable law and contractual obligations.
• Ordinary technical logs and routine rolling backups: a standard review period of 30 days.

At the end of the relevant period, records are reviewed for deletion or anonymisation. Information may need to be kept longer for an active project, an agreed customer requirement, a legal obligation, a dispute or a security investigation. Necessary recovery points are protected until a safe replacement is available and are reviewed for continuing need. These periods do not mean that every copy is automatically erased on the same date.

Artwork retained in email attachments or authorised working copies is included in the artwork review. Backup copies may remain in restricted recovery storage until their applicable retention period ends. Approved corrections and deletions must be taken into account before restored data is put back into use.

The schedule describes our handling of business records. Email providers may retain delivery records, account information or service copies under their own applicable arrangements; those records are not governed solely by the website’s retention schedule. You may ask us to review information sooner through the privacy contact above.

SMTP2GO’s Free-plan Activity view provides five days of visible sending history. This is not a five-day deletion period for our business emails, artwork or WordPress inquiry records. Paid SMTP2GO Email Archiving is not enabled.

Your rights

Depending on the law that applies to you, you may have rights to access or correct your information, request deletion or restriction, object to certain processing, obtain a copy, or complain to a relevant data-protection authority.

Send privacy requests to hc@hcpackagingasia.com. We aim to acknowledge receipt within two working days and normally aim to complete our response within one calendar month. We will follow any shorter deadline or other response requirement imposed by applicable law. If a lawful extension is needed, we will explain the reason and timing as required.

Where necessary, we may ask for limited information to confirm your identity or authority to act for someone else. We use a proportionate approach and do not routinely require formal identity documents. We will explain if information must be retained or a request cannot be fulfilled in full.

Cookies, browser storage and third-party links

The inquiry form does not save the contents you type into browser storage. WordPress may store an emoji-support result in session storage; authenticated backend access uses WordPress login cookies.

Where a Google map is displayed, your browser connects to Google to load the map. Google handles information from that connection under its own privacy practices.

Links to WhatsApp and social websites take you to services with their own privacy practices. The website does not send unsent form contents in its WhatsApp links.

Updates and scope

Last updated: 16 October 2026. This document covers hcpackagingasia.com inquiries and website use. It does not describe unrelated HC Packaging websites. Changes will be reflected here with an updated date.