Skin365 respects privacy and is committed to protecting customers' personal data during the process of accessing, inquiring, registering an account, ordering, paying, receiving goods, participating in promotions or using features on the website skin365.vn

This policy explains how Skin365 collects, uses, stores, shares and protects customers' personal data; At the same time, guide customers to exercise their rights related to personal data.

This policy is applied in accordance with Vietnamese laws on personal data protection, consumer rights protection, e-commerce and other relevant legal regulations in effect.

1. Information about the unit handling personal data

The unit operating the website and responsible for processing personal data according to this Policy is:

1. Name of the unit: Skin365 Business House
2. Brand name: Minh Cosmetics - skin365.vn
3. Registered address: 20 Ly Nhat Quang, Son Ward Tra, City. Da Nang
4. Website: skin365.vn
5. Email to receive requests for personal data: minh.cosmetics@gmail.com
6. Customer care hotline line: 0913.991.345

To the extent required by law, Skin365 may act as a personal data controller, personal data processor, or personal data controller and processor, depending on each specific activity. can.

2. Scope of application

This policy applies to customers and users who have one or more of the following activities:

1. Accessing or using the Skin365 website;
2. Registering, Sign in or manage your account;
3. Search, view, compare or buy products;
4. Order, pay, receive delivery, return or request a refund;
5. Sign up to receive promotional information;
6. Participate in membership programs, minigames or promotional programs;
7. Comment, rate, send questions or feedback;
8. Contact Skin365 via website, hotline, email, social networks or customer care channels;
9. Carry out other transactions that involve providing personal data to Skin365.

This policy does not govern the independent data processing of third-party websites, platforms or services that customers can access through links on the Skin365 website.

3. Personal data Skin365 may collect

Skin365 only collects data that is relevant and necessary for each specific purpose.

3.1. Information directly provided by customers

Depending on customer activities, collected data may include:

1. Full name;
2. Phone number phone;
3. Email address;
4. Delivery address, billing address;
5. Province, city, district, ward, commune;
6. Date, month, year of birth or gender, if the customer voluntarily provides it to participate in the membership program or receive appropriate incentives;
7. Login name, encrypted password and information related to the account;
8. Order content, purchased products, quantity, value and delivery method;
9. Information needed to issue invoices;
10. Content of communication, comments, reviews, complaints or support requests;
11. Images, videos or documents Customers proactively send Skin365 to check the status of goods, process returns, complaints or after-sales support;
12. Consignee information provided by the customer;
13. Other information that the customer owns automatically provided to Skin365.

Skin365 does not require customers to provide bank passwords, PIN codes, OTP codes or payment card security codes.

3.2. Information generated during the transaction process

Skin365 can store information such as:

1. Order code and purchase history;
2. Payment status payment, delivery, returns and refunds;
3. History of using discount codes, reward points or membership benefits;
4. Customer Support and contact history;
5. Product review content;
6. Fraud prevention data and unusual transaction signs;
7. Control information with shipping units, payment gateways or service providers.

3.3. Information collected automatically

When customers access the website, Skin365 or technical service providers can automatically record:

1. IP address;
2. Device type;
3. Operating system;
4. Browser type and version;
5. Language and time zone;
6. Access date and time;
7. Pages viewed, products viewed and actions on website;
8. Access source;
9. Interaction time;
10. Cookies, device identifiers and similar technical data;
11. Data related to system errors, performance and safety.

This information is used to operate the website, ensure security, analyze performance and improve user experience.

3.4. Sensitive personal data

In normal cosmetic retail operations, Skin365 does not actively collect sensitive personal data such as biometric data, medical records, genetic information, sex life, political opinions, beliefs, full bank account information or real-time exact location.

Customers should not arbitrarily provide the above data in comments, reviews, messages or expressions. contact form.

If in a special case Skin365 needs to process sensitive personal data, Skin365 will clearly notify the type of data, purpose, scope of processing and carry out separate consent procedures in accordance with the law.

4. Data collection sources

Skin365 may collect personal data from the following sources:

1. Directly from customers;
2. From customer activities on website;
3. From the orderer providing information of the consignee;
4. From the shipping unit, payment gateway or transaction support partner;
5. From social networking platforms when customers actively interact with Skin365;
6. From promotions, surveys, minigames or events in which customers participate;
7. From a public, legal or other source authorized by the customer;
8. According to the legal request of a competent state agency.

5. Purpose of processing personal data

5.1. Providing products and performing transactions

Skin365 may process data to:

1. Create and manage customer accounts;
2. Receive, confirm and order processing;
3. Verify order information when necessary;
4. Notify order status;
5. Delivery arrangements;
6. Payment processing, reconciliation, refunds;
7. Invoicing;
8. Receive and process return requests;
9. Resolve complaints and disputes;
10. Fact Provide after-sales care and support;
11. Manage reward points, membership tiers, vouchers and related benefits.

The necessary data to fulfill orders must be fully and accurately provided by the customer. In case the customer does not provide the necessary data, Skin365 may not have sufficient facilities to process the order or provide the corresponding service.

5.2. Customer care

Skin365 can use data to:

1. Receive and respond to questions;
2. Product information consultation;
3. Support in handling arising problems;
4. Verify reflected content;
5. Contact clarify return or complaint requests;
6. Satisfaction survey;
7. Improve service quality.

Skin365's cosmetic consulting information is for reference only. within the scope of routine personal care and is not a substitute for medical diagnosis, examination or treatment.

5.3. Operate and improve the website

Skin365 can process data to:

1. Maintain stable operation of the website;
2. Remember customers' shopping carts and choices sales;
3. Analyze traffic;
4. Evaluate the effectiveness of content, interface and sales programs;
5. Detect errors and improve page load speed;
6. Develop new features;
7. Personalize the content and products displayed;
8. Evaluate the effectiveness of communication campaigns.

5.4. Marketing and promotions

With appropriate customer consent, Skin365 may use full name, phone number, email, purchase history or interaction behavior to:

1. Send information about new products;
2. Send discount codes and offers;
3. Introduce promotional programs;
4. Send information about loyalty programs set;
5. Personalize marketing content;
6. Measure advertising effectiveness;
7. Organize minigames, gift programs or events.

Customers can refuse to receive marketing information at any time according to the instructions in each message, email or by contacting Skin365.

Opting out marketing content does not affect necessary notifications related to orders, accounts, transactions or system safety. system.

5.5. Ensuring safety and preventing fraud

Skin365 can process data to:

1. Authenticate accounts and transactions;
2. Detect fake orders, unusual orders or incentive abuse;
3. Prevent unauthorized access;
4. Protect websites, accounts and systems;
5. Investigate and handle fraud;
6. Protect the legitimate rights and interests of Skin365, customers and related parties.

5.6. Legal Compliance

Skin365 may process, retain or provide data as necessary to:

1. Perform accounting, tax and invoicing obligations;
2. Resolve Resolve complaints, disputes or compensation requests;
3. Implement legal requests of competent state agencies;
4. Prevent and combat violations of the law;
5. Protect the legitimate rights and interests of Skin365, customers or third parties;
6. Perform other obligations according to the law.

6. Basis for processing personal data

Depending on each case, Skin365 processes data on one or more of the following bases:

1. The customer has given his consent to the processing;
2. Processing necessary to enter into or carry out transactions with customers;
3. Processing necessary to carry out Skin365's legal obligations;
4. Processing Processes permitted by law without consent;
5. Processing necessary to protect the life, health or legitimate rights and interests of customers or others where permitted by law;
6. Basis Other legal provisions according to applicable regulations.

When consent is required by law, Skin365 will provide the necessary information so that customers can give voluntary, clear and verifiable consent.

Skin365 does not consider the customer's silence or non-response as consent, unless otherwise provided by law.

7. Cookies and similar technologies

7.1. What are cookies?

Cookies are small data files saved on the browser or device when a customer visits a website. Cookies help websites remember some customer information and choices.

7.2. Skin365 cookie groups may use

Essential cookies:

Necessary for the website to operate, maintain login sessions, store shopping carts, security and process transactions.

Functional cookies:

Remember choices such as language, region, product interests or display preferences.

Segmentation cookies Analytics:

Supports measuring visits, traffic sources, page performance and how users interact with the website.

Advertising and marketing cookies:

Supports measuring campaigns, limiting ad impressions and providing content more relevant to user interests.

Non-essential cookies are only used after the customer makes the appropriate selection on the management tool cookies, if required by law.

7.3. Cookie management

Customers can:

1. Accept or reject individual groups of non-essential cookies;
2. Change the selection on the website's cookie management tool;
3. Delete or block cookies through your browser settings.

Disabling essential cookies may cause some features such as login, shopping cart or checkout to not work properly.

8. Sharing personal data

Skin365 does not sell or trade customers' personal data to profit from it.

To the extent necessary for the stated purposes, Skin365 may share data with:

8.1. Transport unit

Including delivery unit, postal service or delivery partner. Information shared may include full name, phone number, delivery address, order code, value to be collected and delivery notes.

8.2. Payment partners

Including banks, e-wallets, intermediaries or payment gateways. These units process payment information according to their own security policies and standards.

Skin365 does not directly store the full card number, CVV/CVC code, PIN code or OTP code of the customer.

8.3. Technology service providers

Include providers of hosting, servers, domain names, sales management software, email, messaging, customer care, data analysis, website measurement, network security or technical support.

8.4. Marketing partners

In case the customer consents to marketing activities, Skin365 may use advertising, measurement or communication platforms to analyze performance and distribute appropriate content.

8.5. Suppliers, distributors or brands

In case it is necessary to verify products, handle complaints about quality, origin, warranty, returns or complaints, Skin365 may share relevant information to the minimum extent necessary.

8.6. Professional consulting unit

Skin365 can provide necessary information to lawyers, auditors, accountants, insurance consultants or specialized units to protect legitimate rights and interests and comply with the law.

8.7. Competent state agencies

Skin365 may provide data upon legal requests of state agencies or in cases prescribed by law.

8.8. In case of business reorganization

In the case of merger, consolidation, conversion, transfer or business restructuring, data may be transferred to the receiving party in accordance with the law. Skin365 will apply reasonable measures to ensure that the receiving party continues to protect personal data.

Skin365 requires data receiving parties to only process data for the correct purpose and scope and apply appropriate protection measures.

9. Transfer of personal data outside the territory of Vietnam

Some technology providers, storage platforms, analytics, email, advertising or operational support that Skin365 uses may locate servers or process data outside the territory of Vietnam.

When a transfer of personal data occurs abroad, Skin365 will:

1. Determine the purpose and scope of data transfer;
2. Only transfer necessary data;
3. Choose a unit with appropriate security measures;
4. Implement necessary documents, assessments, notifications or procedures according to the law;
5. Apply measures to protect the legitimate rights and interests of customers.

10. Data retention period

Skin365 stores data for the time necessary to fulfill the processing purpose and fulfill legal obligations.

Retention period may be determined based on:

1. Time required for customer to maintain account;
2. Time required for order processing and after-sales support;
3. Warranty period, return or complaint settlement;
4. Term for storing accounting documents, invoices and transaction records;
5. Statute of limitations for resolving disputes
6. Request of a competent state agency;
7. Consent or valid request of the customer;
8. Other deadlines as prescribed by law.

When data is no longer needed or the storage period expires, Skin365 will delete, destroy, anonymize or apply appropriate handling measures, unless the law requires continued storage.

11. Personal data security

Skin365 applies technical and management measures appropriate to the scale, nature of operations and level of risk, including:

1. Using the HTTPS/SSL protocol to protect data during transmission;
2. Decentralization and access control;
3. Limiting personnel access to data;
4. Use password, authentication, and account protection mechanisms;
5. Encrypt or one-way encrypt passwords according to system capabilities;
6. Back up and recover data;
7. Use firewalls, anti-malware tools and appropriate security solutions;
8. Record and check system access activities when necessary;
9. Train and require personnel with confidentiality obligations;
10. Review vendors who have access to or process data;
11. Establish a process for receiving and handling incidents.

No system can completely eliminate all risks. When detecting an incident that may affect personal data, Skin365 will implement measures to prevent, fix, limit damage and fulfill notification obligations according to legal regulations.

12. Security of payment information

Online payment transactions on the Skin365 website are made through payment partners or payment intermediary service providers selected from time to time.

Skin365 only stores information necessary to manage and control transactions, for example:

1. Order code;
2. Transaction code;
3. Bar status payment;
4. Amount;
5. Name of payment unit or bank;
6. Time transaction time.

Information that can directly establish a card transaction such as the entire card number, CVV/CVC security code, PIN code and OTP code is not required by Skin365 from customers via phone, email, comment or text message.

Customers need to check the correct Skin365 website domain name before logging in or making payment and do not provide OTP codes to any individual, including people claiming to be employees. Skin365.

13. Customers' rights regarding personal data

To the extent prescribed by law, customers have the following rights:

1. To know about personal data processing activities;
2. To agree to consent or not to consent to processing operations requiring consent;
3. Access and view personal data;
4. Request for personal data;
5. Request correction of inaccurate data;
6. Withdraw consent;
7. Request deletion of data;
8. Request restriction of data processing;
9. Oppose data processing activities where permitted by law;
10. Claim, denounce or sue;
11. Claim compensation for damages according to the law;
12. Protect your own legitimate rights and interests
13. Other rights as prescribed by law from time to time.

Withdrawing consent does not affect the lawfulness of processing activities carried out before the time Skin365 receives the withdrawal request.

In some cases, deletion, restriction or objection to data processing may be possible. causing Skin365 to be unable to continue providing certain features or services. Skin365 will notify customers of possible effects before implementation, if appropriate.

Skin365 may refuse or limit implementation of the request if the law does not allow it, the data needs to be stored to fulfill legal obligations, resolve disputes, protect legal rights, or Skin365 does not have sufficient basis to verify the person sending the request.

14. How to exercise your rights to personal data

Customers can send requests via one of the following methods:

1. Email: minh.cosmetics@gmail.com
2. Hotline: 0913.991.345

Request content should include:

1. Full name;
2. Phone number or email used for the transaction;
3. Content of rights the customer wants to exercise;
4. Scope of data or transaction involved;
5. Information necessary for Skin365 to verify identity;
6. The way the customer wants to receive feedback.

Skin365 only requests verification information to the extent that it is reasonable and necessary. Customers should not send passwords, OTP codes, PIN codes or full payment card information.

After receiving, Skin365 will:

1. Confirm receipt of the request;
2. Check and verify the requester;
3. Evaluate validity and scope of processing;
4. Notify if additional information is needed;
5. Implement the request or notify the reason for refusal;
6. Respond within the time limit prescribed by law.

15. Customer obligations

Customers are responsible for:

1. Providing accurate, complete and legal information;
2. Updating information when there are changes;
3. Secure accounts, passwords and authentication methods;
4. Do not share OTP codes, PIN codes or login information;
5. Notify Skin365 when you suspect unauthorized access to your account;
6. Do not provide other people's data without their permission or consent;
7. Respect the personal data and privacy of others;
8. Coordinate with Skin365 when needing to verify transactions or troubleshoot issues;
9. Be responsible for the content you post or provide;
10. Comply with legal regulations on personal data protection.

16. Information of consignees and third parties

In case the customer places an order for another person or provides information of the consignee, the customer confirms that:

1. The information provided is accurate;
2. The customer has the right to provide such information;
3. The recipient has been informed or agreed to Skin365's use of the information to confirm and deliver the order;
4. Information is only used to the extent necessary to carry out the transaction and related obligations.

Customers should not provide unnecessary data of the consignee.

17. Children's personal data

The Skin365 website provides cosmetic and personal care products and is not designed for children to conduct transactions on their own without the appropriate supervision of a parent or guardian.

Skin365 does not actively collect children's personal data for marketing purposes.

Where transactions involve personal data of children, parents or guardians Responsible guardian:

1. Monitor website usage;
2. Provide regulatory consent;
3. Ensure the provision of data in accordance with the interests of children;
4. Contact Skin365 when needing to view, edit or delete data.

When detecting children's data being collected improperly, Skin365 will take measures to verify and limit processing or deletion of data according to legal regulations.

18. Vulnerable consumers

Skin365 respects and protects the rights of vulnerable consumers in accordance with the law, including children, the elderly, people with disabilities, pregnant women and other subjects within the scope of the law.

When receiving requests or complaints from vulnerable consumers, Skin365 will:

1. Provide appropriate contact methods;
2. Explain information clearly and easily to understand;
3. Limit requests to provide invalid data necessary;
4. Prioritize reception and processing according to actual conditions;
5. Ensure non-discrimination;
6. Apply reasonable measures to protect customers' legitimate rights and interests.

Skin365 may request appropriate documents or information to determine cases requiring special support mechanisms.

19. Third Party Links and Services

Skin365 Website may contain links or integrations with:

1. Social networks;
2. Video platforms;
3. Delivery units;
4. Payment gateways;
5. Map tools;
6. Chat tools;
7. Analytics or advertising tools;
8. Brand or partner website

These parties have their own privacy policies and can independently decide how to handle data. Skin365 recommends that customers read third party policies before using their services.

Skin365 is not responsible for independent data processing activities beyond Skin365's reasonable control.

20. Changes to Policy

Skin365 may amend this Policy to:

1. Conform to changes in the law;
2. Reflect changes in business practices business;
3. Add features or services;
4. Update security measures;
5. Clarifies the rights and obligations of the parties.

The update will be posted publicly on the website and clearly state the update date.

In case the content changes give rise to a new processing purpose or significantly affects the rights of customers, Skin365 will notify or request consent in accordance with the law.

Customer's continued use of the website after the date the Policy is updated does not constitute consent for activities for which separate consent is required by law.

21. Contact information

For questions, feedback, complaints or requests related to privacy and personal data, please contact:

1. Registered address: 20 Ly Nhat Quang, Son Tra Ward, City. Da Nang
2. Website: skin365.vn
3. Email: minh.cosmetics@gmail.com
4. Reception time: 8:00 - 22:00
5. Hotline: 0913.991.345

Skin365 will receive and process requests in good faith, transparently and in accordance with current legal regulations.