Legal
Privacy Policy
Version 1.0 · Effective from 17 September 2026 · Applies to bocdichvotranh.com
Summary
- Casting hexagrams and reading phone numbers: no account, nothing stored. Your question, casting time and phone number are used only to show the result at that moment; our server does not store them.
- We keep nothing unless you contact us. Messages you send us on Messenger are used only to provide the reading you asked for.
- No selling of data, no advertising, no tracking. The site uses no analytics tools and sets no advertising cookies.
- You have rights to access, correct and delete your data, withdraw consent and complain. Contact us via Messenger or [email protected].
1. Scope
This policy explains how Học Viện Bốc Dịch Vô Tranh (“Học Viện”, “we”) processes personal data when you use bocdichvotranh.com (the “Site”) — including Six Lines and Plum Blossom casting, banknote serial hexagrams, quick readings, phone number readings, sample readings and the AI reading guide — and when you contact us for a paid service.
Học Viện is based in Vietnam. This policy is prepared under Vietnam's Law on Personal Data Protection No. 91/2025/QH15 and its implementing regulations, and, for visitors from the European Economic Area and the United Kingdom, the General Data Protection Regulation (see section 14). Services of other companies that you open from the Site (such as Facebook and Messenger) are governed by their own policies.
2. Who is responsible for your data
The Site is run by Vi Nhật Sơn, an individual, under the name Học Viện Bốc Dịch Vô Tranh. Học Viện Bốc Dịch Vô Tranh is a trading name, not a separate legal entity. In this policy, “Học Viện” and “we” mean that operator, who is the controller of personal data collected through the Site.
- Operator
- Vi Nhật Sơn (individual), trading as Học Viện Bốc Dịch Vô Tranh
- Country
- Vietnam
- Data protection contact
- Vi Nhật Sơn
- Privacy enquiries
- [email protected] · Messenger
3. Data we process
| When you… | Data | How it is handled |
|---|---|---|
| Cast a hexagram | Casting date and time, the six lines, the options you pick under “Your question”; for banknote hexagrams, the serial number | Used to build and show the chart immediately. The information lives in the chart's link and is not stored on our server. The site has no free-text question box; you only share your detailed question when you message Học Viện. |
| Read a phone number | The phone number you enter | Used to show the general reading at that moment. Not stored. |
| Message us on Messenger (AI reading, personalized phone reading, payment) | Message content: your question, hexagram details, phone number, the date you started using it, images you send; your Facebook name and profile picture; payment information you provide | Used to deliver the service you requested, to communicate with you and to confirm payment. Messages pass through Meta's Messenger platform (see section 8). |
| Visit the Site | IP address, browser type, time, page address | Your IP address is kept in memory for at most one hour to limit quick readings and prevent abuse; it is not written to disk. Our server's technical logs record the time, page address (without the query part that contains questions or phone numbers) and browser type; they do not record your IP address or cookies. |
Because chart details and phone numbers are part of the page address, they may remain in your browser history and travel with any link you choose to share. You can clear your browser history at any time.
The Vietnamese version of the Site also offers a number-selection request form; that form and the data it collects are described in the Vietnamese policy.
4. Data we do not collect
- No visitor accounts or passwords.
- No identity documents or biometric data.
- No location data.
- No behavioural analytics, advertising trackers, or access to your contacts or other device data.
- No card or bank account numbers through the Site.
5. Purposes and legal bases
| Purpose | Legal basis |
|---|---|
| Building charts, showing quick readings and phone number readings | Performing the request you make when you use the feature (GDPR Art. 6(1)(b)) |
| AI readings, personalized readings and payment via Messenger | Your consent when you send us the information, and performance of the service agreement (Art. 6(1)(a) and (b)) |
| Protecting the Site: rate limits, attack prevention, blocking automated scraping | Our legitimate interest in keeping the Site secure and available (Art. 6(1)(f)) |
| Keeping payment records; responding to lawful requests from authorities | Legal obligations (Art. 6(1)(c)) |
We do not use your data for any other purpose. If we need to, we will ask for your consent first.
6. Sensitive data
We do not ask for sensitive data. However, your question may include information about your health, finances, private life, or other people. When you choose to send such information for a reading, you give your explicit consent for us to process it only for that reading.
- Share only what the question needs. There is no need for full names, addresses or ID numbers.
- When asking about someone else, please respect their privacy.
- Health notes in a reading are for reference only; they are not medical data and do not replace a diagnosis.
9. International transfers
Học Viện is located in Vietnam and some providers above operate in other countries. Your data may therefore be processed outside your country. We carry out the cross-border transfer procedures required by Vietnamese law. For data from the EEA or the UK, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses (and the UK Addendum) where the provider offers them, or other transfer mechanisms permitted by law. Connections to the Site are always encrypted and our backups are encrypted.
10. Retention
| Data | Retention |
|---|---|
| Chart details, questions, phone numbers entered for a reading | Not stored on our server |
| IP addresses used for rate limiting | At most one hour, in memory only |
| Technical logs (no IP address, no query part) | Rotated automatically; the oldest files are deleted once a size limit is reached |
| Encrypted backups | Up to 14 days |
| Messenger conversations and readings sent | Up to 24 months after the last exchange, or sooner if you ask us to delete them. Messages on Messenger are also subject to Meta’s retention policy |
| Payment records | As required by accounting and tax law |
11. How we protect your data
- Data minimisation: most features store nothing.
- Encryption: HTTPS everywhere; encrypted internal connections; backups encrypted with a key that is not kept on the server.
- Access control: only people assigned by Học Viện can access submitted data; the admin area is protected by multiple layers and login-attempt limits.
- Separation: processing components are isolated; internal servers are not exposed to the internet.
- Network protection: firewalls, traffic filtering, denial-of-service protection and rate limits.
- Updates: security patches are applied automatically.
- Content isolation: documents displayed on the Site run in a sandbox and cannot read your session.
- People: everyone with access is bound by confidentiality.
No system is completely secure. If you find a vulnerability, please tell us at [email protected].
12. Data breaches
If a personal data breach could harm users, Học Viện notifies the competent Vietnamese data protection authority within 72 hours of becoming aware of it, as required by Article 23 of the Law on Personal Data Protection. For affected people in the EEA or UK we also follow GDPR Articles 33 and 34, including informing you without undue delay where the breach is likely to result in a high risk to you.
13. Your rights
You have the right to:
- be informed about how your data is processed;
- give, refuse or withdraw consent;
- access your data and receive a copy;
- correct inaccurate data;
- delete your data, or restrict its processing;
- object to processing based on legitimate interests;
- complain, and seek remedies or compensation under applicable law.
How to make a request
- Message us on Messenger or email [email protected] with the subject “Personal data request”.
- Tell us what you want (access, correction, deletion…) and anything that helps us find your data.
- We may ask for information to confirm your identity, so that nobody else can obtain your data.
- We acknowledge requests within 3 business days and respond within the time required by law (for GDPR requests, within one month, extendable where permitted).
Withdrawing consent does not affect processing carried out before the withdrawal.
14. Visitors from the EEA and the UK
If you are in the European Economic Area or the United Kingdom, the GDPR (or UK GDPR) gives you the rights in section 13 and also:
- the right to data portability — to receive data you provided to us, based on consent or contract, in a structured, machine-readable format;
- the right to object at any time to processing based on our legitimate interests;
- the right to lodge a complaint with the data protection supervisory authority in your country of residence or work (in the UK, the Information Commissioner's Office).
The legal bases we rely on are listed in section 5. Where we rely on consent, you can withdraw it at any time.
We have not appointed a representative in the EU or the UK: our processing of data about people there is occasional, small in scale and does not include large-scale processing of special categories of data (GDPR and UK GDPR Article 27(2)). You can contact us directly at [email protected].
15. Children
The Site is not intended for anyone under 16. Younger users should use our services only with the consent and supervision of a parent or guardian. If we learn that we hold a child's data without valid consent, we delete it. Parents and guardians may contact us to exercise rights on a child's behalf.
16. Automated processing and AI
- Quick readings and profiles on the chart page are generated automatically by Học Viện's rule system, using only the hexagram code, time and your options — not your question and not any information that identifies you.
- AI readings are prepared with the help of artificial intelligence tools; Học Viện is responsible for each reading before it is sent to you. We send only what the reading needs, use AI services under their developer terms, and do not allow that content to be used to train models, to the extent the provider’s terms permit.
- No result on the Site produces a decision with legal or similarly significant effects on you (GDPR Article 22). All decisions remain yours.
17. Third-party links and services
The Site links to Facebook, Messenger and other sites. Their handling of your data is governed by their own policies. Sample reading documents may contain external links, which open in a new tab.
18. Advertising and marketing
We do not use your data for advertising, do not share it with advertising businesses, and do not send marketing messages without your consent. We do not “sell” or “share” personal information as those terms are defined in U.S. state privacy laws.
19. Changes to this policy
We may update this policy when our practices or the law change. The new version will be posted here with its version number and effective date. For significant changes affecting your rights, we will give clear notice on the Site before they apply and ask for consent again where the law requires.
20. Contact and complaints
Questions and requests: Messenger · [email protected].
If you are not satisfied with our response, you may contact the personal data protection authority under Vietnam's Ministry of Public Security, your local supervisory authority if you are in the EEA or UK, or bring a claim under applicable law.
This English version is provided for convenience. If it differs from the Vietnamese version, the Vietnamese version prevails, except where the law of your country requires otherwise.