Personal Data Protection
Vietnam Office processes and protects personal data according to principles of lawfulness, transparency, purpose limitation, minimization, security, and accountability, consistent with Vietnam Office policies and applicable law.
- Basis for processing — Personal data is processed only where an appropriate basis exists, including performance of a transaction/contract, service provision, compliance with legal obligations, legitimate interests, or consent where required.
- Transparency — Vietnam Office discloses data categories, processing purposes, retention periods, sharing recipients, and user rights through the Privacy Policy and related notices.
- Purpose limitation — Data is processed for defined purposes such as Orders, Payments, Invoices, Licensing, Activation, Support, Security, Fraud Prevention, or product operation.
- Data minimization — Vietnam Office aims to collect and use only data necessary for the relevant purpose.
- Accuracy — Data required for transactions, accounts, or licensing may be updated or corrected when inaccurate information is identified.
- Technical and organizational security — Vietnam Office applies appropriate measures to reduce the risk of unauthorized access, data loss, alteration, disclosure, copying, or misuse of personal data.
- Access control — Access to data is limited according to function, role, and business need.
- Limited retention — Personal data is not retained indefinitely merely because it was previously collected; retention follows the Data Retention Policy and applicable legal obligations.
- Controlled sharing — Sharing with service providers or third parties occurs only where necessary, for defined purposes, and with appropriate safeguards.
- Data-subject rights — Users may exercise rights recognized by applicable law and policy, including access, correction, deletion, restriction, objection, or withdrawal of consent where applicable.
- Security Incident — If a security incident affects personal data and meets the applicable notification threshold, Vietnam Office handles and communicates the incident under applicable procedures and obligations.
Personal Data Protection principle: lawful basis → transparency → minimization → protection → controlled access/sharing → controlled retention → respect for data-subject rights.