Our commitment to your data
Last updated: 2026-04-19 · Compliant with Vietnam Decree 13/2023/NĐ-CP
1. Legal entity & Data Protection Officer (DPO)
Thuan Nhien Trading & Services Co., Ltd.
Tax code: 3502578907
Registered address: 104 Le Hong Phong, Vung Tau Ward, Ho Chi Minh City
Legal representative: Đào Trần Kim Lộc
Data Protection Officer (DPO): thuannhien.ld@gmail.com — handles all personal-data requests within 30 business days per Vietnam Decree 13/2023.
2. What we collect
- Info you provide: email, phone, name, shipping address — for order fulfillment.
- Transaction data: purchase history, payment method (we do NOT store credit card — handled by VNPay/MoMo).
- Device data: IP (SHA256 hashed), user agent, pages viewed — only with your consent.
3. How we use it
- Process and ship orders
- Order communications (email / SMS)
- Improve experience (if you consent to analytics)
- Marketing (if you consent)
4. Sharing
We do not sell your data. Shared only with:
- VNPay / MoMo / ZaloPay — payment processing
- GHN / GHTK / VNPost — shipping
- Government authorities when legally required
5. Retention
- Transaction info: 10 years (Vietnamese tax law)
- Account info (if deleted): 30-day soft-delete then permanent deletion
- Analytics data: 365 days
- Security logs (access log, audit trail): 2 years per regulatory requirement
6. Your rights & SLA
Under Vietnam Decree 13/2023, you have the right to:
- View data we hold about you
- Correct inaccurate information
- Delete your account — visit the account deletion page
- Export your data as JSON via email
- Withdraw consent any time via the cookie banner
SLA commitment: Data Subject Requests are handled within 30 business days after identity verification. Account deletion is immediate (email/SMS OTP) — data is soft-deleted and permanently erased after 30 days to protect against accidental requests.
7. Children under 13
Thuần Nhiên's service is not intended for children under 13. We do not knowingly collect data from children. If we learn an account was created by a child under 13, we will delete the account and related data within 7 days. If you are a parent and believe your child has provided information, please contact thuannhien.ld@gmail.com.
8. Security
- Passwords hashed with argon2id — not reversible
- All traffic over HTTPS (TLS 1.3)
- Access log & audit log with 2-year retention
- Secret rotation every quarter per internal procedure
9. Data breach notification
In the event of a personal-data breach, we will notify affected users and the Cybersecurity Authority within 72 hours, per Article 23 of Vietnam Decree 13/2023.
10. Contact
Privacy questions: thuannhien.ld@gmail.com
Customer support hotline: 0856 05 67 68
Or visit our headquarters during business hours.
