PRIVACY POLICY

I. PURPOSE AND SCOPE OF DATA COLLECTION

The primary data collection on our website includes: full name, email, phone number, and customer address in the contact section. This is the mandatory information that we require members to provide when submitting a request for consultation or purchasing products. This allows us to contact and confirm with customers on the website to ensure consumer rights. Members shall be solely responsible for the security and retention of all service utilization activities under their provided information and electronic mailbox. In addition, members are responsible for promptly notifying our website of any unauthorized use, abuse, or security breaches regarding their registered name and password by a third party, so that appropriate measures can be taken.

II. SCOPE OF INFORMATION USE

We use the information provided by members to:

• Contact and confirm orders, as well as deliver products to members upon receiving their requests;

• Provide product information to customers upon request;

• Send marketing and promotional emails regarding the goods we sell;

• Send notifications about activities on the website;

• Contact and resolve matters with users in special cases;

• Restrict the use of users’ personal information outside of confirmation and communication purposes related to transactions;

• Provide data upon request from judicial authorities, including the Procuracy, courts, and investigative police agencies, in connection with any legal violations committed by the customer.

III. DATA RETENTION PERIOD

Members’ personal data will be stored until a deletion request is made to the administration. Otherwise, in all cases, members’ personal information will be securely maintained on our servers.

IV. PERSONS OR ORGANIZATIONS WITH POTENTIAL ACCESS TO PERSONAL INFORMATION

Subjects granted access to customers’ personal information shall fall into one of the following cases:

• Employees of the company.

• Partners who have signed contracts to perform a portion of the Company’s services. These partners will receive information as per contractual agreements (which may be partial or complete depending on the contract terms) to assist users in utilizing the services provided by the Company.

V. ADDRESS OF THE DATA COLLECTION AND MANAGEMENT UNIT

• Address: No. 3, Lane 26 Nguyen Hong, Lang Ward, Dong Da District, Hanoi.

VI. MEANS AND TOOLS FOR USERS TO ACCESS AND EDIT THEIR PERSONAL DATA

• Members have the right to inspect, update, adjust, or cancel their personal information by contacting the website administration to perform these tasks.

• Members have the right to submit complaints regarding information privacy practices to the website administration. Upon receiving this feedback, we will verify the information and, if the reflection is accurate, implement timely measures depending on the severity of the issue.

VII. MECHANISM FOR RECEIVING AND RESOLVING CONSUMER COMPLAINTS

• Members’ personal information is strictly committed to absolute confidentiality in accordance with our personal information protection policy. The collection and use of each member’s information will only be conducted with that customer’s consent, unless otherwise prescribed by law.

• We do not use, transfer, provide, or disclose a member’s personal information to any third party without the explicit permission and consent of that member.

• In the event that the information storage server is attacked by hackers, resulting in the loss of members’ personal data, we will be responsible for promptly reporting the incident to the competent authorities for investigation and processing, as well as notifying the members.

• Absolute confidentiality is maintained for all online transaction information of members, including digital invoices and accounting documents.

• The management team requires individuals to provide all relevant personal information when registering/purchasing, such as: Full name, contact address, email, phone number, etc., and to be legally responsible for the accuracy of this information. The management team shall neither be held responsible nor resolve any complaints related to the benefits of that member if it is determined that the personal information provided during the initial registration is inaccurate.