Last updated: 26 September 2026
This Cookie Policy explains how British University Vietnam ("BUV", "we", "us", "our") uses cookies and similar technologies on buv.edu.vn and its language versions (the "Website"). It should be read together with our Website Privacy Policy, which explains more generally how we collect and use personal data.
When you first visit the Website, a cookie banner asks for your choice. You can accept all cookies, or open "Manage cookies" to switch individual categories on or off. You can change your mind at any time — see Section 6, "Managing your cookie preferences".
1. What are cookies?
Cookies are small text files placed on your device when you visit a website. They allow the website to recognise your device and remember information about your visit, such as your preferences and the actions you take on the site.
We also use similar technologies, such as tracking pixels, tags, and your browser's local storage and session storage. In this Policy we refer to all of these collectively as "cookies", unless we say otherwise.
Cookies set directly by BUV, on a buv.edu.vn address, are called first-party cookies. Cookies set by other organisations whose services are built into the Website (for example, analytics or advertising providers) are called third-party cookies. Session cookies are deleted when you close your browser; persistent cookies stay on your device until they expire or you delete them.
2. Legal basis
This Policy is issued in accordance with the Law on Personal Data Protection No. 91/2025/QH15, its guiding decrees and other applicable regulations of Vietnam. Where cookies involve the processing of personal data:
- Strictly necessary cookies are used because they are needed to deliver the Website you have asked to use, to keep it secure, and to remember your cookie choice. They do not require your consent.
- All other cookies (performance/analytics, functional and marketing) are used only with your consent, which you give or refuse through the cookie banner and can withdraw at any time.
These legal bases are consistent with those described in our Website Privacy Policy.
3. Categories of cookies we use
The Website groups cookies into four categories. These match the categories shown in the cookie banner.
| Category | What it does | Consent |
|---|---|---|
| Strictly necessary | Required for the Website to work: security and protection against bots and attacks, delivering pages and images, and remembering your cookie choice. These do not track you for analytics or marketing. | Always active |
| Performance / Analytics | Help us understand how visitors use the Website (for example, pages visited, time on page and navigation paths) so we can improve content and the user experience. | Only with your consent |
| Functional | Remember choices you make, such as your language, your recent searches or the student type you selected on a fees page, to give you a more personalised experience. | Only with your consent, or when you actively use the feature |
| Marketing / Advertising | Used by us and our advertising partners (Meta and TikTok) to measure the effectiveness of our advertising campaigns, and to show you more relevant BUV adverts on their platforms. | Only with your consent |
4. How our measurement works
4.1 Consent Mode
We use Google Tag Manager with Google Consent Mode. Until you make a choice, every analytics and advertising signal is set to "denied". In that state, Google tags do not read or write analytics or advertising cookies; they may send cookieless signals (for example, that a page was loaded) that carry no cookie identifier. Once you accept a category, the related tags start to use cookies from that point on.
4.2 First-party server-side tagging
Most of our measurement runs through a server-side tagging service operated for BUV on our own sub-domains (data.buv.edu.vn and load.data.buv.edu.vn), hosted by our service provider Stape. Your browser sends events to this BUV address rather than directly to each third party. Our server then forwards the relevant information to Google Analytics 4, the Meta Conversions API and the TikTok Events API, according to the consent you have given. For this reason, several analytics and marketing cookies in Section 5 are set on the buv.edu.vn domain even though the data is ultimately shared with those providers.
Some browsers delete cookies after a short period. With your consent, our server-side service may restore analytics and marketing cookies that your browser has deleted, using the buv_uid identifier described below. If you withdraw consent, buv_uid is deleted on your next page view and no cookies are restored.
5. Cookies used on this Website
The tables below list the cookies and similar technologies found on the Website during a technical scan on 25 September 2026. The expiry shown is the maximum lifetime we or the provider set. Some browsers shorten this — for example, many browsers cap cookies at 400 days, and some limit cookies set by scripts to 7 days.
5.1 Strictly necessary cookies
| Cookie name | Provider | Purpose | Expiry | Party |
|---|---|---|---|---|
| buv_cookie_consent | BUV | Stores your cookie choices (which categories you accepted) so that we respect them and do not ask again on every visit. | 12 months | First |
| cf_clearance | Cloudflare | Records that your browser has passed Cloudflare's security check, so that genuine visitors are not challenged repeatedly while attacks and malicious bots are blocked. | 1 year | First |
| __cf_bm | Cloudflare | Bot management. Distinguishes human visitors from automated traffic on the services that deliver our images and our tagging script. | 30 minutes | Third |
| Google reCAPTCHA (e.g. _GRECAPTCHA) | Protects our enquiry, registration and newsletter forms from spam and abuse by checking that a form is being submitted by a person. | Up to 6 months | Third |
5.2 Performance / Analytics cookies
| Cookie name | Provider | Purpose | Expiry | Party |
|---|---|---|---|---|
| _ga | Google Analytics 4 | Distinguishes unique visitors by assigning a randomly generated client ID. | 2 years | First |
| _ga_YNZ98TT253 | Google Analytics 4 | Stores session state for BUV's Google Analytics 4 property (session count, session start time). | 2 years | First |
| FPID | Google Analytics 4 (via BUV server-side tagging) | First-party identifier set by our server, used by Google Analytics 4 to recognise returning visitors more reliably. Not readable by scripts on the page. | 2 years | First |
| FPLC | Google Analytics 4 (via BUV server-side tagging) | Short-lived cross-domain linker derived from FPID, used to keep a visit consistent across BUV websites. | 20 hours | First |
| _dcid | BUV server-side tagging (Stape Data Tag) | Client identifier that links the events your browser sends to our server-side tagging service, so that analytics and marketing events from the same visit are processed together. | 2 years | First |
| buv_uid | BUV | Random visitor identifier used only to restore analytics and marketing cookies deleted by browser limits (see Section 4.2). Set only if you accept Performance or Marketing cookies; deleted if you withdraw that consent. | 400 days | First |
5.3 Functional cookies
| Cookie name | Provider | Purpose | Expiry | Party |
|---|---|---|---|---|
| buv_locale | BUV | Remembers the language (English or Vietnamese) you chose with the EN/VI switcher, so that when you next open the Website's home address you are taken to that language. Set only when you click the switcher. Without it, your first visit follows your browser's language setting. | 1 year | First |
Other functional features that remember your choices use your browser's storage instead of cookies; they are listed in Section 5.5.
5.4 Marketing / Advertising cookies
| Cookie name | Provider | Purpose | Expiry | Party |
|---|---|---|---|---|
| _fbp | Meta (Facebook / Instagram) | Identifies your browser to Meta so that we can measure the results of our adverts and show relevant BUV adverts. Used together with server-side Meta Conversions API events. | 90 days | First |
| _fbc | Meta | Stores the click identifier (fbclid) when you arrive on the Website from a Meta advert, so the visit can be attributed to that advert. | 90 days | First |
| fr | Meta | Set on the facebook.com domain. Used by Meta to deliver, measure and improve the relevance of adverts. | 90 days | Third |
| _gtmeec | BUV server-side tagging (Stape, for Meta Conversions API) | Stores, in encrypted form, information you have provided (for example, in a form) so that later events sent to the Meta Conversions API in the same period can be matched more accurately. | 90 days | First |
| _ttp | TikTok | Identifies your browser to TikTok to measure the performance of our TikTok adverts and to help show relevant BUV adverts. Set on both buv.edu.vn and tiktok.com. | 13 months | First / Third |
| _tt_enable_cookie | TikTok | Checks whether your browser accepts cookies for the TikTok Pixel. | 13 months | First |
| ttcsid, ttcsid_[pixel ID] | TikTok | Stores the TikTok Pixel session identifier, used to group the events of one visit. | 13 months | First |
| ttclid | TikTok (via BUV server-side tagging) | Stores the click identifier when you arrive on the Website from a TikTok advert, so the visit can be attributed to that advert. | 30 days | First |
| _gtmeec-tt | BUV server-side tagging (Stape, for TikTok Events API) | Stores, in encrypted form, information you have provided so that later events sent to the TikTok Events API can be matched more accurately. | 90 days | First |
| _sbpee | BUV server-side tagging (Stape Enricher) | Stores, in encrypted form, identifiers captured during your visit (for example, click identifiers or information entered in a form) so that later marketing events can be enriched with them. | 90 days | First |
5.5 Similar technologies (browser storage)
The following items are stored in your browser's local storage (kept until deleted) or session storage (deleted when you close the tab). They are not sent to our servers automatically.
| Name | Provider | Purpose | Storage | Category |
|---|---|---|---|---|
| buv:student-type | BUV | Remembers the student type you chose on a fees page, so tuition fees are shown for that type on other pages. | Local | Functional |
| buv:recent-searches | BUV | Remembers your recent searches on the Website so you can repeat them quickly. | Local | Functional |
| buv:form-attribution | BUV | Keeps the campaign details in the link you arrived with (for example, utm_source or an ad click ID) for the current tab, so that if you submit an enquiry form we know which campaign brought you to us. | Session | Functional |
| _xsd | BUV server-side tagging (Stape) | Records whether an ad blocker prevented our tagging script from loading, so the script can be loaded from our own domain instead. | Local | Analytics |
| lastExternalReferrer, lastExternalReferrerTime, multiFbc | Meta Pixel | Record the external site that referred you and any Meta ad click identifier, used for ad attribution. | Local | Marketing |
| tt_sessionId, tt_pixel_session_index, tt_appInfo, tt_adInfo | TikTok Pixel | Keep the TikTok Pixel session and advert click information for the current visit. | Session | Marketing |
5.6 Embedded services and cookieless tools
- Google Maps. Some pages show an embedded Google map of our campus. When the map loads, Google may set or read its own cookies under the Google Privacy Policy.
- Google reCAPTCHA. Our forms use reCAPTCHA (see Section 5.1). Its use is subject to the Google Privacy Policy and Terms of Service.
- Cloudflare Web Analytics. We use Cloudflare's privacy-first web analytics to monitor the Website's performance. It does not use cookies or local storage and does not identify individual visitors.
- Messaging links. The Messenger and Zalo buttons on the Website are simple links. No cookies from those services are set until you click through to their websites or apps, where their own policies apply.
6. Managing your cookie preferences
6.1 Using our cookie banner
When you first visit the Website, a cookie banner appears with two options:
- Accept — allows all four categories of cookies.
- Manage cookies — opens the preference centre, where you can switch Performance, Functional and Marketing cookies on or off individually and save with "Confirm my choices". All optional categories are switched off by default. Strictly necessary cookies are always active.
As stated in the banner, closing the banner window to continue browsing is treated the same as clicking "Accept". If you do not want to accept all cookies, please use "Manage cookies" instead.
6.2 Changing or withdrawing your consent
You can change your preferences at any time by clicking "Change cookie settings" at the top of every page of the Website. Your new choice applies from that moment. Cookies that were already set may stay on your device until they expire or you delete them, but we will stop using them for the categories you have switched off. Withdrawing consent does not affect processing carried out before you withdrew it.
6.3 Using your browser settings
You can also control or delete cookies through your browser settings. Most browsers let you refuse cookies, delete existing cookies, or be notified when a cookie is set. Please note that blocking or deleting strictly necessary cookies may affect how the Website works, and deleting the buv_cookie_consent cookie means the banner will ask for your choice again.
- Google Chrome: Settings > Privacy and security > Third-party cookies / Delete browsing data
- Safari: Settings > Privacy > Manage Website Data
- Microsoft Edge: Settings > Cookies and site permissions
- Mozilla Firefox: Settings > Privacy & Security > Cookies and Site Data
You can also manage advertising preferences directly with our partners, for example through your Meta ad preferences (Facebook or Instagram settings) and TikTok ad settings, or opt out of Google Analytics with the Google Analytics Opt-out Browser Add-on.
7. Cross-border data transfer
Some of the third-party providers named in Section 5 — Google, Meta, TikTok, Cloudflare and our server-side tagging provider Stape — may store or process data collected through cookies outside Vietnam, including in the United States, Singapore and the European Union. We take steps consistent with the Law on Personal Data Protection and its guiding decrees to ensure an appropriate level of protection for such transfers, as described in our Website Privacy Policy.
8. Children and minors
Where a visitor to the Website is under 18, cookies are set on the same basis as for other visitors described in this Policy: strictly necessary cookies always, and other cookies only with consent given through the banner. We do not knowingly use cookie data to build advertising profiles specifically targeting minors. Parents or guardians using shared devices should be aware that cookie consent applies to the browser and device, not to an individual person.
9. Changes to this Cookie Policy
We may update this Cookie Policy from time to time, including to reflect changes in the cookies we use or in applicable law. Material changes will be shown by updating the "Last updated" date at the top of this Policy and, where appropriate, by asking you to review your cookie preferences again.
10. Contact us
If you have questions about this Cookie Policy or how we use cookies, please contact us at info@buv.edu.vn.
