PRIVACY POLICY

(Personal Data Protection Policy)

This Privacy Policy informs users about how UPBASE TECHNOLOGY JOINT STOCK COMPANY collects, uses, stores, and protects users’ personal data when accessing and using the website, services, or e-commerce platforms provided or operated by UpBase.

UpBase is committed to protecting users’ personal data in accordance with Vietnamese law, including Decree No. 13/2023/ND-CP on Personal Data Protection and other relevant legal regulations.

1. Data Controller Information

Company Name: UPBASE TECHNOLOGY JOINT STOCK COMPANY

Tax Code: 0109361325

Date of Issuance: September 30, 2020

Issuing Authority: Hanoi Department of Planning and Investment – Business Registration Office

Head Office Address: J03.LO21 Building, Nam Cuong Urban Area, To Huu Street, Duong Noi Ward, Ha Dong District, Hanoi, Vietnam

Contact Email: support@upbase.vn

UpBase acts as the entity responsible for collecting, processing, and managing personal data of users when they access and use the website or services provided by UpBase.

2. Types of Personal Data Collected

UpBase may collect various types of personal data from users, including but not limited to the following:

2.1. Personal Identification Information

  • Full name
  • Phone number
  • Email address
  • Shipping address or contact address

2.2 Transaction Information

  • Order information
  • Transaction history
  • Payment information (to the extent necessary for transaction processing)

2.3 Technical Information

  • IP address
  • Browser information
  • Access time
  • Cookie data

Users are responsible for providing accurate and lawful information. UpBase shall not be liable for issues arising from incorrect or misleading information provided by users.

3. Purpose and Scope of Personal Data Processing

UpBase collects and processes personal data to provide and operate E-commerce Enabler services, including but not limited to:

  • Creating and managing user accounts on systems or e-commerce platforms;
  • Operating e-commerce stores for customers or partners;
  • Receiving, processing, and managing orders generated from e-commerce platforms;
  • Performing e-commerce operational activities such as store management, order processing, customer support, warehouse management, and delivery coordination;
  • Implementing marketing, advertising, communications, livestream activities, or promotional campaigns to support sales;
  • Contacting users to confirm orders, provide customer support, and handle complaints;
  • Conducting surveys and customer experience evaluations to improve service quality;
  • Ensuring system security, fraud prevention, and information protection;
  • Fulfilling legal obligations or providing information to competent government authorities as required by law.

UpBase commits to using personal data only within the necessary scope and for the purposes disclosed in this policy.

4. Sharing Personal Data with Third Parties

In the course of providing services, UpBase may share certain necessary personal data with the following parties:

  • E-commerce platforms
  • Shipping and logistics service providers
  • Payment partners
  • Marketing or advertising partners
  • Technology partners supporting system operations

Data sharing will only be conducted when:

  • It is necessary for providing services; or
  • The user has given consent; or
  • It is required by competent government authorities under applicable laws.

UpBase requires all partners to comply with personal data protection obligations in accordance with applicable laws.

5. Data Retention Period

Users’ personal data will be retained:

  • For the period necessary to fulfill the purposes of data processing; or
  • Until the user requests deletion of the data; or
  • In accordance with mandatory retention periods required by law.

After the applicable retention period, personal data will be deleted or anonymized in accordance with relevant regulations.

6. Personal Data Security

UpBase implements technical and organizational measures to protect users’ personal data, including:

  • Secure server infrastructure
  • Data access control mechanisms
  • Data encryption where necessary
  • Internal data protection procedures

However, due to the nature of the internet environment, UpBase cannot guarantee that all data transmissions over the internet are completely secure.

Users are therefore recommended to:

  • Not share account information with third parties;
  • Not provide payment information via email or other unsecured communication channels.

7. Use of Cookies

The UpBase website may use cookies to:

  • Recognize users when they access the website
  • Store session information
  • Improve user experience

Users may refuse cookies through their browser settings. However, doing so may affect certain functionalities of the website.

8. Rights of Data Subjects

In accordance with personal data protection laws, users have the following rights:

  • The right to be informed about the processing of their personal data
  • The right to access their personal data
  • The right to request correction or updates to their data
  • The right to request deletion of their personal data
  • The right to restrict or object to data processing
  • The right to withdraw consent for data processing
  • The right to lodge complaints, report violations, or claim damages in accordance with applicable laws

Requests related to personal data may be submitted to UpBase through the contact channels published on the website.

9. User Commitments

Users agree to:

  • Provide accurate and lawful personal information
  • Not use the website for illegal purposes
  • Not interfere with or damage the website system

Any violations may be handled in accordance with applicable laws.

10. Governing Law

This Privacy Policy shall be governed by the laws of Vietnam.

In the event of disputes related to the use of the website or personal data, such disputes shall be resolved in accordance with Vietnamese law and fall under the jurisdiction of the competent courts in Vietnam.