General Terms

Global Career Path (GCP) respects privacy and considers the protection of personal data an important part of its service delivery.

This Policy explains how GCP collects, uses, stores and protects personal information, and helps customers understand and exercise their rights under applicable law.

1. Responsible Entity and Scope

CÔNG TY TNHH CON ĐƯỜNG NGHỀ NGHIỆP TOÀN CẦU (Global Career Pathways Company Limited), Enterprise Registration Number 0318930536, operates under the Global Career Path (GCP) brand.

This Policy applies to visitors to careerpathways.edu.vn, GCP’s service information and registration landing pages, and individuals whose data GCP processes when providing services to school students, university students, parents, working professionals, educational institutions and businesses.

For programs carried out in partnership with organizations, the respective roles and responsibilities of GCP and the parties involved in processing personal data are determined by actual activities, applicable agreements and legal requirements.

Certain services may be subject to additional notices, terms or consent requirements appropriate to the nature of the data and processing activities.

2. Information GCP Collects

Depending on how customers interact with GCP and which services they use, GCP may collect or receive:

• Contact and registration information: Names, email addresses, phone numbers and other information required to receive inquiries, confirm registrations and provide services.
• Educational and career guidance information: Survey responses, interests, analysis results, academic transcripts, certificates, learning goals, information provided by parents and relevant supporting documents.
• Professional information: Professional profiles, CVs, work experience, development goals and matters customers voluntarily share.
• Information for services provided to organizations: Personal data necessary for surveys, consulting, workforce development, organizational development or service quality improvement within the agreed scope of cooperation.
• Information generated during service delivery: Analysis results, professional notes, reports, recommendations and development plans.
• Technical information collected when visiting the website: IP addresses, browser and device information, website interactions, cookies and similar technologies, depending on the purpose and lawful basis for processing.

GCP aims to collect data appropriate to the purposes communicated. Customers should avoid providing information that is unnecessary or has not been requested for the service.

3. Purposes of Using Information

GCP processes personal data for appropriate purposes, including:

• Receiving, confirming and responding to customer inquiries.
• Conducting surveys and analysis and providing registered services.
• Preparing reports, consultation materials and development recommendations.
• Arranging consulting, coaching and ongoing support sessions within the scope of the service.
• Managing service records, payments, customer support and related issues.
• Operating, securing, evaluating and improving the website, technology systems and service quality.
• Carrying out communications, service introductions and advertising measurement where applicable legal requirements are met.
• Complying with legal obligations or lawful requests from competent authorities.

Each data processing activity must have a defined purpose and an appropriate legal basis. Where consent is required by law, GCP provides the relevant notice and obtains consent in accordance with legal requirements.

4. Protection of Customer Information

GCP processes personal data to the extent necessary to provide its services and fulfill identified lawful purposes.

For school and university students, educational and career guidance data is used to support analysis and development.

For parents, observations and expectations are used as appropriate to career guidance and support for students.

For working professionals, career information and discussions are used for analysis, consulting and career development activities.

For educational institutions and businesses, personal data relating to program participants is processed in accordance with the scope of cooperation and the rights and responsibilities of the parties.

A person or organization registering for or paying for a service does not automatically acquire the right to access all personal information or reports concerning another person. Disclosure to relevant parties must have an appropriate legal basis and scope.

5. Data of Children and Minors

GCP places particular importance on protecting students’ privacy, especially the personal data of children.

Processing children’s data must meet applicable legal requirements, including rules on processing purposes and consent from the data subject and their legal representative where required.

Information provided by parents, schools or other relevant parties does not automatically authorize GCP to disclose or use students’ data for any purpose.

Disclosure of analysis results, records or individual reports to others is assessed based on their entitlement to receive the information, the scope of the service and applicable law.

6. Data Security and Sharing

GCP applies appropriate organizational and technical measures to protect personal data and reduce the risks of unauthorized access, loss, disclosure or misuse.

Customer information may be provided to staff, specialists, technology service providers or other relevant parties to the extent necessary to deliver services and where an appropriate legal basis exists.

Parties authorized to access data must comply with confidentiality obligations and use the information only within the permitted scope.

GCP may disclose data in response to lawful requests from competent state authorities or where otherwise permitted or required by law.

Although appropriate protective measures are applied, no data storage or transmission system can be guaranteed to be completely secure. In the event of an incident, GCP fulfills its responsibilities for response, remediation and notification in accordance with applicable law.

7. Technology and Service Providers

GCP may use technology platforms and tools to receive information, store and manage records, automate processes, analyze data and generate reports.

These tools may include cloud storage services, online forms, automation systems or solutions incorporating artificial intelligence.

The use of such tools and service providers is considered in light of the nature of the data, processing purposes, the responsibilities of the parties and applicable legal requirements, including cross-border personal data transfer rules where relevant.

GCP’s analysis results and suggested directions are intended to help customers better understand themselves, their circumstances and their development options; they do not replace customers’ own decisions.

8. Cookies and Website Usage Data

GCP’s website and landing pages may use cookies and similar technologies to support operations, remember preferences, analyze website traffic and support advertising activities.

Cookies are grouped by purpose, including essential cookies and optional categories such as analytics or advertising cookies.

Where consent is required for the use of cookies, visitors may choose to accept or decline through the mechanism provided on the website.

Continued browsing or failure to make a choice does not automatically constitute valid consent to processing activities that require consent.

Visitors may manage their cookie preferences using the tools available on the relevant website or landing page (if provided) and appropriate browser settings.

9. Data Retention and Handling

GCP retains personal data for periods appropriate to the processing purposes, service delivery requirements, legal obligations and other lawful grounds for retention.

Retention periods may vary depending on the type of data, nature of the service and relevant obligations.

Upon receiving a request to delete data, or when there is no longer a lawful basis for retention, GCP handles the data in accordance with applicable law, taking into account circumstances where continued retention is required to meet legal obligations or protect legitimate rights and interests.

10. Your Rights Regarding Personal Data

Under applicable law, you have rights in relation to your personal data, including the right to be informed, to access and request correction, to request provision of your data, and other rights provided by law. This summary does not limit any other rights you may have under current law.

The exercise of each right is subject to applicable legal conditions. GCP may need to verify identity, representative authority and the basis of a request before acting on it.

11. Third-Party Links and Services

GCP’s website may contain links to websites, platforms or services managed by third parties.

When accessing these platforms, personal data processing independently undertaken by the third party is governed by the policies and terms published by that third party, together with applicable laws.

GCP is not automatically responsible for independent data processing activities outside its control or legal responsibility.

12. Contact and Policy Updates

If you have questions or requests concerning personal data, please contact:

CÔNG TY TNHH CON ĐƯỜNG NGHỀ NGHIỆP TOÀN CẦU
Brand: Global Career Path (GCP)
Enterprise Registration Number: 0318930536
Email: gcp@careerpathways.edu.vn
Website: https://careerpathways.edu.vn

GCP may revise this Policy to reflect changes in its operations, services, technology and legal requirements.

The updated version is published on GCP’s official website. Where the law requires separate notification or renewed consent, GCP will comply with the applicable requirements.

Last updated: 10 October 2026.