Privacy policy
Effective 12 October 2026
This policy explains what personal data is collected when you use the Thong Nhat Hospital scientific conference website and app, what it is used for and how you control it.
1. Who is responsible
Thong Nhat Hospital organises the conferences and is responsible for personal data on thongnhathospital.com and the “Hội nghị khoa học” mobile app. Send privacy questions to [email protected].
2. Data we collect
- Account: email, password (stored only as a hash), preferred language.
- Profile: name, academic title, job title, specialty, institution, phone, date of birth, country, photo and biography, when you enter them.
- Documents you upload: practising licence, degrees, certificates, national ID and bank-transfer proofs, only when you submit them for a registration or CME certificate.
- Attendance: registrations, tickets, orders and payment status, check-ins, favourite sessions, and the talks and abstracts you submit.
- Device: a push token, when you allow notifications.
- Security log: IP address and browser/device when you sign in or make an important change.
3. App permissions
- Camera: for staff to scan check-in QR codes, or for you to photograph a document or proof. Photos are uploaded only when you submit them.
- Photos: to pick a profile photo, document or payment proof.
- Notifications: session reminders and registration updates.
4. How we use it
- To create and protect your account, verify your email and sign you in.
- To process registrations, confirm payments, issue tickets and check you in.
- To show the programme, speakers and conference content.
- To issue CME certificates and answer your questions.
- To send email and notifications about conferences you take part in.
5. Sharing
We do not sell personal data or use it for advertising. The app has no ads and no third-party trackers. Data is shared only:
- with the organisers of a conference you register for;
- with infrastructure providers acting for us: hosting, email delivery, Expo/Google Firebase for push notifications, Google reCAPTCHA against fake sign-ups on the website;
- when the law requires it.
Names, titles, institutions and photos of speakers and chairs are public in the programme.
6. Security
Data travels over HTTPS, passwords are hashed, and uploaded files are reachable only through signed, expiring links. Staff access is role-based and logged.
7. Retention
Account data is kept until you delete your account. Registrations, orders, payments, check-ins and submissions are conference records, kept for the period accounting and continuing-medical-education rules require, after being detached from your personal details.
8. Your rights
You can view and edit your profile under Account, download or delete uploaded documents, turn off notifications in your device settings, and ask us to provide, correct or erase your data at [email protected].
You can delete your account yourself in the app (Account → Delete account) or on the website (Account → Security). Details: /en/delete-account.
9. Children
The service is for health professionals and conference attendees and is not directed at children under 18.
10. Changes
When this policy changes we update the date at the top and announce significant changes on the website.