Last updated 3 October 2026
Privacy Policy
How STAR-K collects, uses and protects the personal data you share with us through star-k.vn, in line with Vietnam’s Law on Personal Data Protection (Law No. 91/2025/QH15).
Who We Are
star-k.vn is operated by STAR-K Certification, Inc. (“STAR-K”, “we”, “us”), 122 Slade Ave, Suite 300, Pikesville, MD 21208, USA. STAR-K is the personal data controller: it decides how and why personal data collected through this website is processed.
Questions about this policy or your data, including requests to our data protection contact, can be sent to rabbimushell@star-k.org or +1 410-484-4110.
What We Collect
- Enquiry form: your name, email address, company, country, the products you want certified, your message, and the type of request you choose.
- Application form: if you apply online, the company, contact, product and facility details the application asks for.
- Email and phone: anything you choose to send us directly.
- Usage data, only with your consent: if you accept analytics cookies, Google Analytics records how the site is used, such as pages viewed, approximate location, device and browser, and how you arrived. See Cookies and Analytics.
We do not ask for specific (sensitive) personal data such as health, biometric, genetic, criminal record, child or personal financial data, and we ask you not to send it.
Why We Use It
- To answer your enquiry and send the information you ask for.
- To assess and process an application for kosher certification and related services.
- To follow up on your enquiry or application.
- If you consent to analytics, to understand how the site is used and improve it.
- To meet legal obligations and protect our rights.
We process your data on the basis of your consent, and otherwise only where the law allows processing without consent – for example to perform or prepare a certification agreement you ask for, or to meet legal obligations. We do not sell your personal data, and we do not use it for advertising.
Is Providing It Required?
Your name and email address are needed for us to reply. The other fields are optional, but leaving them out may mean we need to ask you for them before we can help. Analytics cookies are entirely optional.
Who We Share It With
- STAR-K staff who handle enquiries and certification, including at our headquarters in the United States.
- Service providers that run the site and our email for us, under their own data protection terms: our website host, Google (Analytics, if you consent; web fonts; the map on our Contact page), Jotform (the online application form) and our email provider.
- Authorities, if the law requires it.
Transfers Outside Vietnam
STAR-K is based in the United States and our service providers may store data in the US, Europe or elsewhere. Transfers of personal data out of Vietnam are made with your consent and on the conditions the Personal Data Protection Law sets, including the impact assessment it requires. We remain responsible for your data when it is processed abroad.
Cookies and Analytics
The site sets one small cookie to remember your cookie choice. Analytics cookies from Google Analytics are set only if you select “Accept” in the cookie banner. If you decline, no analytics cookies are stored.
You can change your choice at any time using Cookie settings, also in the footer of every page. You can also block or delete cookies in your browser.
Our Contact page shows an embedded Google Map, and the site loads fonts from Google. These connect your browser to Google, which receives your IP address.
How Long We Keep It
We keep enquiry details for as long as needed to deal with your enquiry and any follow-up, and generally for no longer than three years after our last contact. Information that becomes part of a certification file is kept for as long as the certification relationship and our record-keeping obligations require. Analytics data is kept according to Google Analytics retention settings.
Your Rights
Under the Personal Data Protection Law you have the right to:
- be informed of who is processing your data, for what purpose and on what basis;
- access and obtain a copy of the personal data we hold about you;
- complete, update or correct data that is inaccurate or incomplete;
- ask us to stop processing, delete or destroy your data, where the law allows;
- withdraw your consent at any time;
- ask us to delay or restrict processing;
- object to decisions based solely on automated processing (we make none);
- sue and receive compensation for a breach of the law in processing your data;
- complain to the personal data protection authority, the Ministry of Public Security.
Email rabbimushell@star-k.org with your request. We may need to confirm your identity. We reply to requests within the time the law sets.
Security
The site uses HTTPS, and access to enquiries and applications is limited to the people who need it. No system is completely secure, so please do not send passwords or financial details through the forms. If a personal data breach affecting you occurs, we will notify the authority, and you where required, within the time the law sets (72 hours for notice to the authority).
Links to Other Sites
The site links to other websites, including star-k.org and our partners. Their privacy practices are their own.
Changes to This Policy
We may update this policy. The date at the top shows when it last changed.
This policy is also available in Tiếng Việt. If the two versions differ, we will correct both.