Legal
Privacy Policy
Version 1.0 · Effective from 17 September 2026 · Applies to https://bocdichvotranh.com
Summary
- Casting hexagrams and reading phone numbers: no account, nothing stored. Your question, casting time and phone number are used only to show the result at that moment; our server does not store them.
- Paid readings are ordered by message, not through the Site. Pressing an order button opens Messenger; what you write stays in that conversation and the Site stores nothing at that step. The number-selection request does have a form on the Site, and we store what you fill in — used only for that consultation, then deleted once the work is done.
- Payment does not pass through this site. The transfer QR code is sent to you privately in chat, built on our own server, and sends nothing about you to any outside QR service; the transfer itself happens inside your banking app. The site never receives your card number, OTP or banking password.
- No selling of data, no advertising, no tracking. The site uses no analytics tools and sets no advertising cookies.
- You have rights to access, correct and delete your data, withdraw consent and complain. Contact us via Messenger or [email protected].
1. Scope
This policy explains how Học Viện Bốc Dịch Vô Tranh (“Học Viện”, “we”) processes personal data when you use https://bocdichvotranh.com (the “Site”) — including Six Lines and Plum Blossom casting, banknote serial hexagrams, quick readings, phone number readings, sample readings and the AI reading guide — and when you contact us for a paid service.
Học Viện is based in Vietnam. This policy is prepared under Vietnam's Law on Personal Data Protection No. 91/2025/QH15 and its implementing regulations, and, for visitors from the European Economic Area and the United Kingdom, the General Data Protection Regulation (see section 14). Services of other companies that you open from the Site (such as Facebook and Messenger) are governed by their own policies.
2. Who is responsible for your data
The Site is run by Vi Nhật Sơn, an individual, under the name Học Viện Bốc Dịch Vô Tranh. Học Viện Bốc Dịch Vô Tranh is a trading name, not a separate legal entity. In this policy, “Học Viện” and “we” mean that operator, who is the controller of personal data collected through the Site.
- Operator
- Vi Nhật Sơn (individual), trading as Học Viện Bốc Dịch Vô Tranh
- Country
- Vietnam
- Data protection contact
- Vi Nhật Sơn
- Privacy enquiries
- [email protected] · Messenger
3. Data we process
| When you… | Data | How it is handled |
|---|---|---|
| Cast a hexagram | Casting date and time, the six lines, the options you pick under “Your question”; for banknote hexagrams, the serial number | Used to build and show the chart immediately. The information lives in the chart's link and is not stored on our server. The site has no free-text question box; you only share your detailed question when you message Học Viện. |
| Read a phone number | The phone number you enter | Used to show the general reading at that moment. Not stored. |
| Ordering a paid reading (AI hexagram reading, personalised phone reading, full destiny reading) | The Site has no order form. Pressing an order button opens Messenger with a message pre-written with the service name; everything you send after that lives in the conversation. | The Site receives and stores nothing at this step. What you write — the question, its background, hexagram details or birth time, and how to reach you — travels through Meta's Messenger platform (see section 8) and is used by the academy to produce the reading you ordered. The contact details you give are used only about your own order — never for marketing, never shared. |
| Bank transfer | After the conversation, the academy sends you privately in chat a QR code carrying the receiving account, the amount and the order code. Payment details are never published on the Site. | The QR is built on our server, so nothing about you is sent to an outside QR service. The transfer happens inside your banking app; the site never receives your card number, account number or banking password. The academy only sees the incoming amount and the order code on its bank statement. |
| Message us on Messenger or Zalo | Message content: your question, hexagram details, phone number, the date you started using it, images you send; your Facebook name and profile picture; payment information you provide | Used to deliver the service you requested, to communicate with you and to confirm payment. Messages pass through Meta's Messenger platform (see section 8). |
| Visit the Site | IP address, browser type, time, page address | Your IP address is kept in memory for at most one hour to limit quick readings and prevent abuse; it is not written to disk. Our server's technical logs record the time, page address (without the query part that contains questions or phone numbers) and browser type; they do not record your IP address or cookies. |
Because chart details and phone numbers are part of the page address, they may remain in your browser history and travel with any link you choose to share. You can clear your browser history at any time.
The Vietnamese version of the Site also offers a number-selection request form; that form and the data it collects are described in the Vietnamese policy.
4. Data we do not collect
- No visitor accounts or passwords.
- No identity documents or biometric data.
- No location data.
- No behavioural analytics, advertising trackers, or access to your contacts or other device data.
- No card number, account number, OTP or banking password through the Site — a transfer happens entirely inside your own banking app.
5. Purposes and legal bases
| Purpose | Legal basis |
|---|---|
| Building charts, showing quick readings and phone number readings | Performing the request you make when you use the feature (GDPR Art. 6(1)(b)) |
| AI readings, personalized readings and payment via Messenger | Your consent when you send us the information, and performance of the service agreement (Art. 6(1)(a) and (b)) |
| Protecting the Site: rate limits, attack prevention, blocking automated scraping | Our legitimate interest in keeping the Site secure and available (Art. 6(1)(f)) |
| Keeping payment records; responding to lawful requests from authorities | Legal obligations (Art. 6(1)(c)) |
We do not use your data for any other purpose. If we need to, we will ask for your consent first.
6. Sensitive data
We do not ask for sensitive data. However, your question may include information about your health, finances, private life, or other people. When you choose to send such information for a reading, you give your explicit consent for us to process it only for that reading.
- Share only what the question needs. There is no need for full names, addresses or ID numbers.
- When asking about someone else, please respect their privacy.
- Health notes in a reading are for reference only; they are not medical data and do not replace a diagnosis.
9. International transfers
Học Viện is located in Vietnam and some providers above operate in other countries. Your data may therefore be processed outside your country. We carry out the cross-border transfer procedures required by Vietnamese law. For data from the EEA or the UK, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses (and the UK Addendum) where the provider offers them, or other transfer mechanisms permitted by law. Connections to the Site are always encrypted and our backups are encrypted.
10. Retention
| Data | Retention |
|---|---|
| Chart details, questions, phone numbers entered for a reading | Not stored on our server |
| IP addresses used for rate limiting, and to avoid double-counting reads of Library articles | At most one hour, in memory only. For read counting the IP is never held as such — only a one-way hash of it. What is stored is an article name and a number, nothing else |
| Technical logs (no IP address, no query part) | Rotated automatically; the oldest files are deleted once a size limit is reached |
| Encrypted backups | Up to 14 days |
| Ordering conversations and readings already delivered | Until the reading is delivered and the follow-up period ends, and no longer than 12 months; sooner if you ask us to delete it. Messages on Messenger are also subject to Meta's retention policy |
| Orders placed on the Site (order code, email address, amount, credit codes delivered) | 90 days after delivery — exactly as long as a credit code stays valid — then deleted automatically. We keep it for that period so your codes can be resent if you lose the email. Unpaid orders expire after 48 hours |
| Messenger conversations and readings sent | Up to 24 months after the last exchange, or sooner if you ask us to delete them. Messages on Messenger are also subject to Meta’s retention policy |
| Payment records | As required by accounting and tax law |
11. How we protect your data
- Data minimisation: most features store nothing.
- Encryption: HTTPS everywhere; encrypted internal connections; backups encrypted with a key that is not kept on the server.
- Access control: only people assigned by Học Viện can access submitted data; the admin area is protected by multiple layers and login-attempt limits.
- Separation: processing components are isolated; internal servers are not exposed to the internet.
- Network protection: firewalls, traffic filtering, denial-of-service protection and rate limits.
- Updates: security patches are applied automatically.
- Content isolation: documents displayed on the Site run in a sandbox and cannot read your session.
- People: everyone with access is bound by confidentiality.
No system is completely secure. If you find a vulnerability, please tell us at [email protected].
12. Data breaches
If a personal data breach could harm users, Học Viện notifies the competent Vietnamese data protection authority within 72 hours of becoming aware of it, as required by Article 23 of the Law on Personal Data Protection. For affected people in the EEA or UK we also follow GDPR Articles 33 and 34, including informing you without undue delay where the breach is likely to result in a high risk to you.
13. Your rights
You have the right to:
- be informed about how your data is processed;
- give, refuse or withdraw consent;
- access your data and receive a copy;
- correct inaccurate data;
- delete your data, or restrict its processing;
- object to processing based on legitimate interests;
- complain, and seek remedies or compensation under applicable law.
How to make a request
- Message us on Messenger or email [email protected] with the subject “Personal data request”.
- Tell us what you want (access, correction, deletion…) and anything that helps us find your data.
- We may ask for information to confirm your identity, so that nobody else can obtain your data.
- We acknowledge requests within 3 business days and respond within the time required by law (for GDPR requests, within one month, extendable where permitted).
Withdrawing consent does not affect processing carried out before the withdrawal.
14. Visitors from the EEA and the UK
If you are in the European Economic Area or the United Kingdom, the GDPR (or UK GDPR) gives you the rights in section 13 and also:
- the right to data portability — to receive data you provided to us, based on consent or contract, in a structured, machine-readable format;
- the right to object at any time to processing based on our legitimate interests;
- the right to lodge a complaint with the data protection supervisory authority in your country of residence or work (in the UK, the Information Commissioner's Office).
The legal bases we rely on are listed in section 5. Where we rely on consent, you can withdraw it at any time.
We have not appointed a representative in the EU or the UK: our processing of data about people there is occasional, small in scale and does not include large-scale processing of special categories of data (GDPR and UK GDPR Article 27(2)). You can contact us directly at [email protected].
15. Children
The Site is not intended for anyone under 16. Younger users should use our services only with the consent and supervision of a parent or guardian. If we learn that we hold a child's data without valid consent, we delete it. Parents and guardians may contact us to exercise rights on a child's behalf.
16. Automated processing and AI
- Quick readings and profiles on the chart page are generated automatically by Học Viện's rule system, using only the hexagram code, time and your options — not your question and not any information that identifies you.
- AI readings are prepared with the help of artificial intelligence tools; Học Viện is responsible for each reading before it is sent to you. We send only what the reading needs, use AI services under their developer terms, and do not allow that content to be used to train models, to the extent the provider’s terms permit.
- No result on the Site produces a decision with legal or similarly significant effects on you (GDPR Article 22). All decisions remain yours.
17. Third-party links and services
The Site links to Facebook, Messenger and other sites. Their handling of your data is governed by their own policies. Sample reading documents may contain external links, which open in a new tab.
18. Advertising and marketing
We do not use your data for advertising, do not share it with advertising businesses, and do not send marketing messages without your consent. We do not “sell” or “share” personal information as those terms are defined in U.S. state privacy laws.
19. Changes to this policy
We may update this policy when our practices or the law change. The new version will be posted here with its version number and effective date. For significant changes affecting your rights, we will give clear notice on the Site before they apply and ask for consent again where the law requires.
20. Contact and complaints
Questions and requests: Messenger · [email protected].
If you are not satisfied with our response, you may contact the personal data protection authority under Vietnam's Ministry of Public Security, your local supervisory authority if you are in the EEA or UK, or bring a claim under applicable law.
This English version is provided for convenience. If it differs from the Vietnamese version, the Vietnamese version prevails, except where the law of your country requires otherwise.