Information secure terms

VINBARISTA respects and commits to ensure the privacy of your personal information. Please read the following Privacy Policy to understand our commitments in respecting and protecting the rights of our customers.

Customer Personal Information Processing and Protection Policy

(Personal Information Protection Policy)

October 07, 2026

1. Introduction

This Customer Personal Information Processing and Protection Policy ("Personal Information Protection Policy") explains how Công ty TNHH Hình Khối Châu Á (“Company” or “We”) collects, processes, uses, protects, and shares personal information when customers (“Customer” or “You”) use the website at https://vinbarista.com/ (“Website”) and the Vinbarista application (“Application”), make purchases, or otherwise share personal information with Us.

We value your privacy and trust and are committed to processing and protecting personal information in accordance with applicable laws.

Accessing the Website or Application does not automatically constitute consent to all personal data processing activities. Where consent is required by law, We will inform You of the purposes of processing and request that You provide clear and verifiable consent.

This Policy may be updated and published on the Website or Application. If there is a change to a processing purpose that requires Your consent, We will notify You and obtain Your consent again before carrying out such processing.

Your access to the Website and Application and any privacy-related disputes are governed by this Personal Information Protection Policy, the Terms of Use, and applicable laws.

2. Purposes of Collecting Personal Information

We collect and use Your personal information for the specific purposes set out below. Depending on the relevant activity, We will process such information based on Your consent or another legal basis permitted by law.

2.1. To create and manage Your online account.

2.2. To process Your purchases, exchanges, and returns, whether online or at one of Our retail stores.

2.3. To enable You to participate in contests or promotional programs.

2.4. To arrange delivery to You and the return of goods in the event of an exchange or return.

2.5. To process payments from You and refunds to You.

2.6. To provide You with information about products or services You request from Us or, with Your prior consent, information that We believe may be of interest to You, via email or text message.

2.7. To operate, evaluate, and improve Our business (including developing new products and services; analyzing and improving Our products, services, Website, and Application).

2.8. To better understand Our customers, perform data analysis, and carry out other processing activities (including market and consumer research, trend analysis, and anonymization).

2.9. To respond to Your comments or questions, or receive job applications (if applicable).

2.10. To transfer or share product reviews posted on the Website and Application with Our affiliates for consideration for display on their websites, excluding the transfer or sharing of Your identifying information.

2.11. To comply with legal obligations or for other purposes that have been disclosed to You and for which Your consent has been obtained where required by law.

3. Scope of Use of Personal Information

We only use Your personal information to the extent necessary to fulfill the purposes disclosed in Section 2 and where there is a lawful basis for processing. If personal information is used for another purpose, We will notify You and obtain Your consent before doing so, unless the law permits processing without consent.

4. Personal Information We Receive

Below are the types of information We receive:

4.1. Automatic Information

When You use the Website or Application, We may collect technical information such as Your IP address, browser type, operating system, referring page, pages viewed, and access times.

4.2. Information You Provide to Us

Depending on activities such as account registration, purchases, or contacting customer support, We may collect Your full name, phone number, email address, shipping address, billing information, order information, and information You provide when communicating with Us. We only request information necessary for each disclosed purpose.

4.3. Cookies

We use necessary cookies to ensure that the Website operates properly and to provide the functions You request, including:

• Cookies that maintain browsing sessions and login status;

• Cookies that remember shopping cart contents;

• Cookies used for account authentication and security;

• Cookies that remember Your necessary preferences on the Website; and

• Technical cookies necessary for the proper operation of the Website.

These necessary cookies are used to provide the basic functions of the Website and are not used for advertising purposes.

For cookies used for analytics, measurement, or advertising that involve the processing of personal data, We will provide notice and obtain Your consent where required by law.

You may manage or block cookies through Your browser settings. Blocking necessary cookies may cause certain functions of the Website to not operate properly.

5. Methods of Processing Personal Information

Depending on the disclosed purposes, We process personal information through automated or manual methods, including collection, recording, storage, access, use, analysis, updating, sharing, deletion, or destruction of data.

These activities are carried out only to the extent necessary, based on a lawful basis for processing, and with appropriate safeguards. The sharing of personal information is carried out in accordance with Section 6 of this Policy.

6. Persons or Organizations That May Access Personal Information

Customer information is an important part of the Company’s business operations, and We do not trade, sell, rent, share, or disclose such information to any third party except as provided in this Personal Information Protection Policy.

We only share information on a limited basis with service providers We use from time to time to provide services on Our behalf, such as sending postal mail and emails, removing duplicate information from customer lists, analyzing data, providing marketing, advertising, and promotional support, delivering or returning goods, receiving payments or issuing refunds, and providing customer service. Your information may be maintained and processed by Our service providers. We may disclose personal information where We believe it is appropriate to enforce or apply this Personal Information Protection Policy, the Terms and Conditions of Our Website and Application, and/or other agreements; protect the rights, property, or safety of the Website and Application, Our users, or others; or where otherwise required or permitted by applicable law. This includes exchanging information with other companies and organizations for fraud prevention and credit risk reduction. However, this does not include selling, sharing, or disclosing Customers’ personal information for commercial purposes in violation of the commitments set out in this Personal Information Protection Policy.

We do not sell or rent Your personal information. To the extent necessary for the disclosed purposes and where there is a lawful basis for processing, information may be accessed by:

• Employees authorized to process orders, provide customer service, handle warranties, and perform related tasks.

• Service providers for shipping, payments, data storage, operation of the Website or Application, and related support services.

• Competent government authorities pursuant to lawful requests or where disclosure is required by law.

We only provide the information necessary for each specific task. Service providers processing information on Our behalf must comply with confidentiality requirements and may only use such information within the scope of the services assigned to them. They may not use such information for their own unauthorized purposes.

7. Methods and Tools for Customers to Access, Modify, Update, or Delete Personal Information

You may request to view, obtain, correct, or delete Your personal information; withdraw Your consent; or restrict or object to the processing of Your personal information by submitting a request to the email address or contact address specified in Section 12.

We may request information necessary to verify Your identity to ensure that Your information is not disclosed or modified without authorization. Requests will be received and handled within the time limits prescribed by law. If We are unable to fulfill all or part of a request, We will inform You of the reason.

Withdrawal of consent does not affect the lawfulness of processing carried out before such withdrawal. We may continue to retain or process information where required or permitted by law.

8. Links to Third-Party Websites

The Website or Application may contain links to third-party websites. When accessing and directly providing information to these websites, You should review their privacy policies before doing so.

We do not control the independent collection and processing activities of third-party websites. However, if We provide Your personal information to a third party, such disclosure must still comply with this Policy and applicable laws.

9. Potential Unintended Consequences and Damages

We implement appropriate administrative and technical measures to protect personal information against unauthorized access, use, alteration, disclosure, or data loss.

However, no system can guarantee absolute security. The processing of personal information may involve risks such as data loss due to technical errors or data exposure resulting from unauthorized access.

Upon detecting an incident, We will promptly take measures to prevent, mitigate, and remedy any damage and will notify competent authorities and affected customers in the circumstances and within the time limits prescribed by law.

10. Retention Period for Your Personal Information

We retain personal information for as long as necessary to fulfill the disclosed purposes, specifically:

• Account information: for as long as the account remains active and for the period necessary to resolve related matters after the account is closed.

• Order, payment, invoice, and warranty information: for as long as necessary to complete transactions, provide warranty services, resolve complaints, and comply with statutory record-retention obligations.

• Information used for marketing purposes: until You withdraw Your consent or the marketing purpose ends, whichever occurs first.

When the retention period expires and there is no longer a lawful basis for processing, the information will be deleted, destroyed, or appropriately de-identified. If certain information must continue to be retained by law, We will retain and use only that information for the corresponding purpose.

11. Your Rights and Obligations Under Our Personal Information Protection Policy

11.1. Your Rights

Under applicable law, You have the right to:

• Be informed about the processing of Your personal information.

• Consent to, refuse, or withdraw consent to the processing of Your personal information.

• View, request access to, correct, or delete Your personal information.

• Request restriction of or object to the processing of Your personal information.

• File complaints or reports, initiate legal proceedings, and claim compensation for damages in accordance with applicable laws.

• Request competent authorities, organizations, or relevant parties to implement measures to protect Your personal information.

You may exercise the above rights in accordance with the procedures set out in Section 7. The conditions and scope for exercising these rights are subject to applicable laws.

11.2. Your Obligations

Provide complete and accurate personal information in response to lawful requests and notify Us when updates are required.

Take appropriate measures to protect Your personal information, account, and password.

Respect and protect the personal information of others and comply with personal data protection laws.

12. Address of the Entity Collecting and Managing Information

Công ty TNHH Hình Khối Châu Á is the entity responsible for collecting and managing personal information under this Policy.

If You have any questions, complaints, or requests regarding the exercise of Your rights concerning personal information, please contact:

Công ty TNHH Hình Khối Châu Á

SALA - SARIMI A1-00.10, 74 Nguyen Co Thach Street, An Khanh Ward, HCMC

Phone: 0909 244 388

Email: info@vinbarista.com

When submitting a request by email, please use the subject line “Personal Information Request” and clearly state the assistance You require.