Customer Information Protection Policy

Effective from July 6, 2023, until further notice
Please refer to the attached form: “Notification and Consent for Personal Data Processing.pdf”

1. Introduction

Welcome to Vietnam Dairy Products Joint Stock Company (Vinamilk).

Vinamilk, headquartered at No. 10, Tan Trao Street, Tan My Ward, Ho Chi Minh City, is the owner and operator of the website vinamilk.com.vn, the Vinamilk app, and the nationwide Vinamilk Store system.

We highly value your privacy and the protection of your personal data.

Vinamilk reserves the right to amend or supplement this Privacy Policy at any time. Any changes will be announced to customers and publicly posted on vinamilk.com.vn, the Vinamilk app, Zalo Notification Service, and Vinamilk SMS Brand Name at least 7 days prior to enforcement.

We encourage customers to regularly review this policy to stay informed and exercise their data subject rights.

If you disagree with any changes, you may stop using our services and notify us via email at eshop@vinamilk.com.vn. We will then fulfill our obligations to protect your rights, including account deactivation, data deletion, and permanent cessation of data use for any purpose.

Continued use of your Vinamilk account will be deemed as acceptance of the updated policy.

By successfully registering a Vinamilk customer account, you confirm that you understand and agree to the methods, requirements, and policies described herein, and authorize Vinamilk to collect, use, disclose, and/or process your personal data as outlined. If you do not agree, please do not register for a Vinamilk account.

Our app uses Apple Pay for fast and secure payments. When using Apple Pay, we may collect device type, location, and transaction data (excluding actual card numbers).

We commit to protecting your personal data using technical measures such as encryption and authentication. All transactions require Face ID, Touch ID, or passcode verification.

We do not store card numbers and do not share personal data with third parties, except as required to complete transactions with banks or payment service providers.

You may request access, correction, or deletion of your personal data at any time by contacting eshop@vinamilk.com.vn.

2. Purpose of Information Collection

The primary data collected through the Vinamilk website, app, and store system includes: email, phone number, address, and username. These are mandatory for service registration and order confirmation to protect consumer rights.

For loyalty programs, customers may also be asked to provide date of birth.

Customers are responsible for maintaining the confidentiality of their username, password, and email account. They must promptly notify Vinamilk of any unauthorized use, abuse, or security breach involving their credentials so that appropriate action can be taken.

3. Scope of Information Use

Vinamilk uses customer-provided information to:

- Deliver services related to customer accounts

- Send notifications about interactions between customers and Vinamilk’s platforms

- Share promotional offers and account benefits

- Prevent account misuse or impersonation

- Communicate and resolve issues in special cases

Vinamilk does not use personal data for purposes beyond those related to transactions unless required by law.

In legal cases, Vinamilk will cooperate with judicial authorities (e.g., prosecutors, courts, police) to provide customer data as required. No other party has the right to access customer information without consent.

4. Information Retention Period

Customer personal data is stored until a deletion request is made. Otherwise, all member data is securely stored on Vinamilk’s servers.

Data Controller Contact Information:

Vietnam Dairy Products Joint Stock Company (Vinamilk)

Head Office: 10 Tan Trao, Tan Phu Ward, District 7, Ho Chi Minh City

Phone: 08.54.155.555

Fax: 08.54.161.226

Email: vinamilk@vinamilk.com.vn

5. Means and Tools for Users to Access and Modify Their Personal Data

Customers have the right to check, update, and correct their personal information by logging into their account and editing their profile, or by requesting Vinamilk’s management team to do so.

Customers may also submit complaints regarding the disclosure of personal data to third parties. Upon receiving such feedback, Vinamilk will verify the information, provide an explanation, and guide the customer on how to restore and secure their data.

6. Commitment to Customer Information Security

Vinamilk commits to absolute confidentiality of customer data on its website, app, and store system, in accordance with its privacy protection policy. Data collection and usage are only conducted with the customer’s consent, unless otherwise required by law.

Vinamilk does not use, transfer, provide, or disclose personal data to any third party without the customer’s permission.

In the event of a data breach due to hacking, Vinamilk will promptly notify authorities and affected users, and take appropriate remedial action.

All online transaction data, including digital invoices and documents, are securely stored in Vinamilk’s central data system.

Vinamilk requires all members registering or purchasing to provide accurate personal information (e.g., full name, contact address, email, ID number, phone number, bank account, and payment card details). Vinamilk is not responsible for resolving complaints related to inaccurate information provided by users during registration.

Vinamilk will make every effort to protect and resolve complaints from verified account holders.

7. Complaint Resolution Process for Personal Data Issues

Customers may submit complaints related to personal data via:

- Phone: 1900 636 979 (Press 1) or 028 5416 1271

- Email: eshop@vinamilk.com.vn

Upon receiving a complaint, Vinamilk will immediately verify the issue, determine the cause, and take corrective action. If necessary, Vinamilk may engage cybersecurity experts for support.

Vinamilk will notify the customer of the complaint status within 3 working days of receipt.

If the issue is found to be Vinamilk’s fault, the company will compensate the customer for any actual damages resulting from the breach of this privacy commitment.