PRIVACY AND PERSONAL DATA PROTECTION POLICY
Legal references include Decree No. 52/2013/NĐ-CP on e-commerce, as amended and supplemented by Decree No. 85/2021/NĐ-CP, Law No. 19/2023/QH15 on Protection of Consumers’ Rights and its implementing instruments, and Law No. 91/2025/QH15 on Personal Data Protection and Decree No. 356/2025/NĐ-CP.
1. Scope
This Policy describes how SÁNG VIỆT THỊNH JOINT STOCK COMPANY (the Company) collects, uses, stores, shares, and protects the personal data of customers, website visitors, and business partners when they use sangvietthinh.com, contact the Company for advice, order money counters, or use the Company’s advertising, content production, and communications services.
2. Data We May Collect
- Identification and contact information provided by customers, including full name, company name, phone number, email address, delivery or billing address, and job title, if applicable.
- Transaction information, including products or services of interest, details of requests, orders, quotations, contracts, communication history, and payment and delivery status.
- Files and content that customers choose to submit for advertising services, such as logos, images, videos, brand materials, scripts, and product data.
- Technical data needed to operate the website, including IP addresses, device and browser types, access logs, cookies, and similar data collected according to the website’s configuration.
The Company does not actively store complete payment card details. When customers pay through an intermediary, the payment service provider processes payment data in accordance with its own policy.
3. Purposes of Data Processing
- Respond to requests for advice, prepare quotations, enter into and perform contracts, and fulfill orders.
- Deliver goods, provide warranty and technical support for money counters, and handle after-sales requests.
- Manage production, delivery, revisions, and acceptance of advertising deliverables and services as agreed.
- Verify transactions, prevent fraud, maintain system security, and improve the website.
- Fulfill accounting, tax, and recordkeeping obligations and respond to requests from competent government authorities.
- Send customer care or marketing communications where there is an appropriate legal basis or consent. Customers may opt out at any time using the method provided.
4. Legal Bases and Processing Principles
The Company processes personal data for the purposes it has disclosed, on the basis of the data subject’s consent where required by law, to perform a contract or fulfill a transaction, or on other lawful grounds. The Company applies the principles of data minimization and purpose limitation and processes personal data only to the extent necessary.
5. Sharing Data with Third Parties
The Company shares data only to the extent necessary to complete a transaction or comply with applicable law. Recipients may include carriers, warranty service providers, manufacturers, banks, payment gateway providers, technology infrastructure providers, accounting and invoicing service providers, or competent government authorities. The Company requires its partners to process data for the designated purposes and apply appropriate security measures.
6. Data Retention
The Company retains data for as long as necessary to fulfill the purposes of processing, handle warranty claims or complaints, and meet mandatory retention requirements under applicable laws on accounting, taxation, transactions, and consumer protection. When the data is no longer needed and no retention obligation applies, the Company deletes, destroys, or anonymizes it in accordance with its procedures.
7. Data Subject Rights and Requests
Customers may exercise their rights as data subjects under applicable law. These include the right to request information, access or correct their data, withdraw consent, object to or restrict processing, request deletion, and exercise other rights permitted by law. Some requests may be subject to limitations where the Company is legally required to continue retaining or processing the data.
8. Data Security
- Grant access based on job responsibilities and restrict unauthorized access.
- Apply technical safeguards, backups, monitoring, and security updates appropriate to the systems in use.
- Require personnel and partners to maintain confidentiality and handle incidents in accordance with internal procedures.
- If an incident affects personal data, the Company assesses and addresses the incident and provides notifications as required by applicable law.
9. Cookies and Analytics Tools
The website may use essential cookies to maintain browsing sessions, remember user preferences, and measure website performance. For non-essential cookies or analytics or advertising tools that require consent, the Company will provide appropriate notices and consent mechanisms based on the website’s actual configuration.
10. Contact Information for Personal Data Inquiries
- Email: sangvietthinh2025@gmail.com
- Hotline: 0222 730 0088 – 0325 564 268
- Website: sangvietthinh.com, under Contact/Support.
Operational Note
This Policy must accurately reflect the tools actually used on the website, such as Google Analytics, Meta Pixel, chatbots, and payment gateways. If the Company transfers personal data abroad or uses a data processing service provider located abroad, it should review any additional obligations under the Law on Personal Data Protection and Decree No. 356/2025/NĐ-CP.
sangvietthinh.com | Hotline: 0222 730 0088 – 0325 564 268 | Email: sangvietthinh2025@gmail.com
