Applicant Privacy Notice

This notice explains how personal information is handled when you submit a CV through the recruitment form on the Maison RMI website. The form asks for your agreement to processing for recruitment before submission.

Contact

Recruitment through this website is operated by Maison Retail Management International Corporation (Vietnam business registration number: 0313175103). Send privacy, access, correction, withdrawal, or deletion requests to HR at the relevant office:

• Ho Chi Minh City HR: tuyendung@maisonrmi.com
• Hanoi HR: tuyendung.hn@maisonrmi.com

Ho Chi Minh City office: 189–197 Duong Ba Trac Street, Chanh Hung Ward, Ho Chi Minh City, Vietnam. Hanoi office: Phu Dien Building (Level 3), 83A Ly Thuong Kiet Street, Cua Nam Ward, Hoan Kiem District, Hanoi, Vietnam.

Information collected and purpose

The form may collect your name, phone number, email address, selected office, position, CV description, LinkedIn link, comments, and CV file. The information is used to receive, review, and route your application to HR for the selected office, and to contact you about your application.

Cloudflare Turnstile is used during submission to help distinguish people from automated traffic. The challenge token is verified during submission and is not stored in the application package.

Storage and recipients

Your CV and application information are stored in a private Cloudflare R2 bucket in the APAC region. Information may be processed outside Vietnam through storage, email, and other provider systems. A copy of your application and CV is sent through the Resend email service to the corresponding Ho Chi Minh City or Hanoi HR inbox. HR staff with access to that inbox and service providers may process the information to provide their services.

Cloudflare D1 stores a minimal operational ledger, such as an opaque application ID, hash, status, and timestamps; identifying details and the CV are stored in R2, not in that ledger.

Retention and deletion

When an applicant is rejected, the operational process calls for prompt deletion after the rejection decision. If it has not already been deleted, the system schedules deletion of the R2 copy 90 days after receipt. A maintenance task checks for expired applications every 30 minutes; if deletion fails, it retries during a later maintenance run.

The application deletion process removes the object from R2 and retains a minimal tombstone ledger row. HR must separately delete the email and CV from the mailbox, downloads, and operational copies. Deleting the R2 object does not itself delete copies held by Resend, recipient mailboxes, or other exports. Provider and mailbox copies require separate handling.

Your requests

You may contact HR using the email addresses above to request access, correction, withdrawal of consent, or deletion. HR may need to verify your identity using the email address used for the application. Some operational metadata may remain after application contents are deleted; requests concerning that data will be referred to the privacy/legal owner for review.

Last updated: 14 October 2026