Privacy Policy - Rich Products Vietnam

VIETNAM PRIVACY POLICY

Rich Products Vietnam Co., Ltd and their affiliates and subsidiaries (hereinafter collectively referred to as “Rich’s,” “us,” “we,” “our,” or “Company”) have created this Privacy Policy to apply to all users of this website, http://www.richs.com.vnand all digital assets contained or offered therein (collectively, our “Services”). This Privacy Policy describes, among other things, the types of information we collect from users when you use our Services, how we use it, and your rights with respect to your information.

This Privacy Policy is integrated into our Terms & Conditions of Use (“Terms & Conditions”). https://www.rich.com.vn/terms (“Điều khoản & Điều kiện”). By accepting this Privacy Policy and providing us with Information (defined below), you agree and consent to the practices described in this Privacy Policy.

If you have any privacy or data use concerns, please contact us as set out below under the heading “Howto Contact Us.” To make sure you stay informed of all changes, you should check these policies periodically. Updates will be referenced by the “Last Updated” date shown below.

I. DATA CONTROLLER

For purposes of this Privacy Policy, Rich’s is the data controller and processor, with an address at 9th Floor, Flemington Tower, 182 Le Dai Hanh Street, Phu Tho Ward, Ho Chi Minh City, Vietnam.

II. INFORMATION WE COLLECT ABOUT YOU

We may collect the following categories of personal data about you which are described in more detail below: (A) information you provide to us, (B) information we may automatically collect, and (C) information we may receive from third parties. The information listed in (A) - (C) above, are detailed below, and hereinafter referred to as “Information.”

For avoidance of doubts, personal data means any information in the form of symbols, letters, numbers, images, sounds, or similar forms in the electronic environment that is associated with a specific person or helps identify a specific person, including any data about an individual from which that individual is identified or can be identified.

A. Information You Provide to Us

The Information we collect about you is the Information you provide in using our Services, including, without limitation:

(i) Basic Personal Data: Individual identifier such as name, username, birth date, and contact information including email address, mailing address, and telephone number(s);

(ii) Sensitive Personal Data:

Location data identified through location services; and
Other types of data and information as prescribed by the Law on Personal Data Protection 2025 and Decree No. 356/2025/ND-CP elaborating on certain articles and implementation measures of law on personal data protection (“Decree No. 356/2025/ND-CP”).

Please note that your Information may also be collected by us through direct messages opinions and feedback that you provide to us, user preferences (such as in receiving updates or marketing information), other Information that you share with us when you contact us directly (such as for customer support services) and additional Information as otherwise described to you at the point of collection or pursuant to your consent.

B. Information We May Automatically Collect About You

Our Services may automatically collect the following categories of usage and technical Information about you. According to the definitions under the Law on Personal Data Protection 2025 and Decree 356/2025/ND-CP, the Information below is classified as Sensitive Personal Data in the form of data monitoring behavior and activities related to the use of telecommunications services, social networks, online communication services, and other services in cyberspace. This Information is used by Rich’s for the operation of the Services, to maintain quality of the Services, and to provide general statistics regarding use of the Services. This Information may include::

IP address, which is the number associated with the service through which you access the Internet, like your ISP (Internet service provider);
Date and time of your visit or use of our Services;
Domain server from which you are using our Services;
Type of computer, web browsers, search engine used, operating system, or platform you use;
Data identifying the web pages you visited prior to and after visiting our website or use of our Services;
Your movement and activity within the website, which is aggregated with other information;
Geographic data such as country or region;
Mobile device information, including the type of device you use, operating system version, and the device identifier (or “UDID”); and
Mobile application identification and behavior, use, and aggregated usage, performance data, and where the application was downloaded from.

C. Information We May Receive from Third Parties

We may collect additional Information about you from third-party websites, social media platforms, such as but not limited to, Facebook, LinkedIn, YouTube, or Instagram (“Social Media Platforms”), and/or sources providing publicly available information (e.g., from the U.S. postal service) to help us provide the Services to you, help prevent fraud, and for marketing and advertising purposes.

Information about you that we collect from Social Media Platforms and/or from third parties is information that is publicly disclosed or lawfully shared with us and is collected on the basis that you have agreed to the disclosure or sharing of such information in accordance with the applicable terms and privacy policies of the relevant Social Media Platforms and/or relevant third parties. We are not responsible for the accuracy or completeness and have no responsibility to verify the origin of information provided by third parties and you are responsible for ensuring that the provision or public disclosure of your information on such platforms is voluntary and in compliance with applicable laws and regulations.

This Privacy Policy only applies to Information collected by our Services. We are not responsible for the privacy and security practices of those other websites or Social Media Platforms or the information they may collect (which may include IP address). You should contact such third parties directly to determine their respective privacy policies. Links to any other websites or content do not constitute or imply an endorsement or recommendation by us of the linked website, Social Media Platform, and/or content..

III. COOKIES & TECHNOLOGIES USED TO COLLECT INFORMATION ABOUT YOU

We and/or certain service providers operating on our behalf may collect Information about your activity, or activity on devices associated with you over time, on our sites and applications, and across non-affiliated websites or online applications. We may collect this Information by using certain technologies, such as cookies and other similar technologies.Third-party service providers, advertisers, and/or partners may also view, edit, or set their own cookies or place web beacons.

A. Cookies (or browser cookies). Cookies (or browser cookies). Cookies are small digital files that are transferred to your computer or smartphone’s hard drive when you visit a website or click on a URL. Most web browsers automatically accept cookies. You may refuse to accept browser cookies by activating the appropriate setting on your browser. However, if you select this setting, you may be unable to access certain parts of our Services. Unless you have adjusted your browser setting so that it will refuse cookies, our system will issue cookies when you direct your browser to our Services.

B. Analytics. Analytics are tools we use, such as Google Analytics, to help provide us with information about traffic to our website and use of our Services, which Google may share with other services and websites who use the collected data to contextualize and personalize the ads of its own advertising network. Learn more about Google’s Privacy Policy here: https://policies.google.com/privacy?hl=vi. You can opt out of having your activity on our Services made available to Google Analytics by installing the Google Analytics opt-out add-on for your web browser by visiting: https://tools.google.com/dlpage/gaoptout for your web browser.

IV. HOW WE USE YOUR INFORMATION

A. Use and Purpose of Processing Your Information

We will only collect and process your Information when we have the consent of yours for each of the following purposes:

To respond to your inquiries and provide you with requested information and other communications, including by email;
To process your product registration request;
To send you our newsletter and other correspondence you request;
To help you locate retailer, distributor, and wholesaler locations near you;
For general or targeted marketing and advertising purposes, including sending you promotional material or special offers on our behalf or on behalf of our marketing partners and/or their respective affiliates and subsidiaries and other third parties, provided that you have not already opted out of receiving such communications;
To fulfill contracts we have with you;
To manage, improve, and foster relationships with third-party service providers, including vendors, suppliers, and parents, affiliates, subsidiaries, and business partners;
To maintain, improve, customize, or administer the Services, perform business analyses, or other internal purposes to improve the quality of our business, the Services, resolve technical problems, or improve security or develop other products and services;
To comply with our Terms & Conditions;
For analytics for business purposes and business intelligence;
To comply with any applicable laws and regulations and respond to lawful requests; and/or
For any other purposes disclosed to you at the time we collect your Information and/or pursuant to your consent.

B. Sharing or Disclosing Your Information

For the abovementioned use and purposes of Information processing, we may share and/or disclose your Information as set forth in the Privacy Policy and in the following circumstances:

Third-Party Service Providers We may share your Information with third-party service providers or data processors that perform certain functions or services on our behalf (such as to host the Services, store or manage the data, perform analyses, process payments, provide customer service, or send communications for us). These third-party service providers will process this data only for purposes specified by us. In some instances, we may aggregate Information we collect so third parties do not have access to your identifiable Information to identify you individually.
Disclosure of Information for Legal and Administrative Reasons. We may disclose your Information without notice: (i) when required to by law or to comply with a court order, subpoena, search warrant, or other legal process; (ii) to cooperate with or undertake an internal or external investigation or audit; (iii) to comply with legal, regulatory, or administrative requirements of governmental authorities (including, without limitation, requests from the governmental agency authorities to view your Information); (iv) to protect and defend the rights, property, or safety of us, our subsidiaries and affiliates and any of their officers, directors, employees, attorneys, agents, contractors and partners, and the website Service users; (v) to enforce or apply our Terms & Conditions; and (vi) to verify the identity of the user of our Services.
Business Transfers Your Information may be transferred or otherwise conveyed to a third party (“Conveyances”) where we: (i) merge with or are acquired by another business entity; (ii) sell all or substantially all of our assets; (iii) are adjudicated bankrupt; or (iv) are liquidated or otherwise reorganize. You agree to any and all such Conveyances of your Information. We may also share Information with prospective purchasers to evaluate the proposed transaction.
Information Shared with our Subsidiaries, Parents, and Affiliates. We may share your Information with our subsidiaries and affiliates. If you do not want us to share your Information with our subsidiaries and affiliates, please contact privacy@rich.com.
Aggregate and Deidentified Data. We may share general Information, aggregated data or publish information based on aggregated data. However, we will only do so in a way that your personal identity is protected.
Online Communications. Any Information you submit in a public forum (e.g., a blog or social network) may be read, collected, or used by us and other participants, and could be used to personalize your experience. You are responsible for the Information you choose to submit in these instances.
With Your Consent. We may share Information consistent with this Privacy Policy with your consent.. In the case of handling your Information for purposes other than those mentioned above, we will only comply with the agreement with you or obtain your consent.

C. Links to Other Websites

Our Services may contain links to other websites or services that are not owned or controlled by us, including links to Social Media Platforms such as Facebook, Instagram, LinkedIn, or YouTube, or may redirect you off our website away from our Services.

This Privacy Policy only applies to Information collected by our Services. We are not responsible for the privacy and security practices of those other websites or Social Media Platforms or the Information they may collect (which may include IP address). You should contact such third parties directly to determine their respective privacy policies. Links to any other websites or content do not constitute or imply an endorsement or recommendation by us of the linked website, Social Media Platform, and/or content..

V. INFORMATION SECURITY

We use all commercially reasonable and neccessary measures to protect Information and provide our Services. However, you should assume that no data transmitted over the Internet or stored or maintained by us or our third-party service providers can be 100% secure. Therefore, although we believe the measures implemented by us reduce the likelihood of security problems to a level appropriate to the type of data involved, we do not promise or guarantee, and you should not expect, that your Information or private communications will always remain private or secure. We do not guarantee that your Information will not be misused by third parties. We are not responsible for the circumvention of any privacy settings or security features. You agree that we will not have any liability for misuse, access, acquisition, deletion, or disclosure of your Information.

If you believe that your Information has been accessed or acquired by an unauthorized person,, you shall promptly contact us via the How to Contact Us section so that we can quickly take necessary measures.

VI. DATA STORAGE

Within the scope permitted by law, we store your Information from the beginning of establishing a relationship with us until we receive a request for deletion or destruction of Information given by you. We may retain your Information for a longer period needed to provide you the Services, and as necessary for other lawful purpose, such as to comply with our legal obligations, to resolve disputes, and to enforce our policies and agreements, or as otherwise required by applicable law from time to time.

VII. DELETION AND DESTRUCTION OF YOUR INFORMATION

We may delete, destroy certain of your Information when: (i) your Information is no longer necessary for the purposes stated herein or for the compliance with our routine record keeping; (ii) you request deletion of your Information; (iii) you withdraw your consent to the processing of your Information; (iv) as required by a decision of a competent state authority; or (v) as agreed between you and us. We are under no obligation to store such Information indefinitely and disclaim any liability arising out of, or related to, the Information after deletion or destruction.

Deletion and destruction of Information will not be applicable in the following cases upon your request:

When the law prohibits data deletion;
When personal data is processed by competent state agencies for the purpose of serving the operations of those state agencies in accordance with legal provisions;
When personal data has been publicly disclosed in accordance with legal regulations;
When personal data is processed to serve legal requirements, scientific research, or statistics as prescribed by law;
In cases of urgent situations related to natural defense, national security, social order and safety, major disasters, dangerous epidemics, or when there is a risk threatening security and national defense, but the situation has not reached the level of declaring a state of emergency, prevention and combat of riots, terrorism, crime, and law violations.
When dealing with urgent situations that pose a threat to the life, health, or safety of the data subject or other individuals.

VIII. YOUR CHOICES

A. Marketing Communications. If you do not want to receive marketing and promotional emails from us, you may click on the “unsubscribe” link in the email to unsubscribe and opt out of marketing email communications or see the How to Contact Us section below for more information.

B. Opting Out of Direct Marketing by Third Parties. To exercise choices regarding the marketing information you receive, you may also review the following links:

You may opt out of tracking and receiving tailored advertisements on your mobile device by some mobile advertising companies and other similar entities by downloading the App Choices app at www.aboutads.info/appchoices.
You may opt out of receiving permissible targeted advertisements by using the NAI Opt-out tool available at http://optout.networkadvertising.org/?c=1 or visiting About Ads at http://optout.aboutads.info.
You can opt out of having your activity on our Services made available to Google Analytics by installing the Google Analytics opt-out add-on by visiting: https://tools.google.com/dlpage/gaoptout for your web browser.

IX. YOUR DATA SUBJECT RIGHTS

This section applies only to individuals coming to our Services from within Vietnam, and only if we collect through the Services any information from you that is considered “Basic Personal Data” or “Sensitive Personal Data” under the 2025 Law on Personal Protection, Decree No. 356/2025/ND-CP elaborating on certain articles and implementation measures of law on personal data protection.

A. Data Subject Rights

Unless otherwise provided by law, to the extent that the 2025 Law on Personal Protection applies, and we hold your Information in our registry or bank of personal data under the 2025 Law on Personal Protection, you may submit a request to exercise the following rights:

Right to know how your Information is being processed;

Right to consent or withhold consent for the processing of your Information, except for cases where the processing of Information will be conducted without requiring the consent of the data subject;
Right to access your Information to view, edit or request to edit your Information, unless otherwise provided by law;
Right to deletion of or request to delete your Information unless an applicable exception applies;
Right to withdraw your consent for the processing of your Information, unless otherwise provided by law;
Right to provision of your Information to you, unless otherwise provided by law.;
Right to restrict or object to use of your Information, including the right to object to any disclosure or use of your Information for advertising and marketing purposes, unless otherwise provided by law. We will fulfill your request within 7 hours of receiving it, unless otherwise provided by law;
Right to complain, denounce, or initiate lawsuits in accordance with applicable law;
Right to claim damages in accordance with applicable law upon any violation thereof, unless otherwise agreed by the parties or prescribed by law; or
Right to defend yourself and/or request that competent agencies or organizations implement measures to protect your rights.

B. Exercising Your Data Subject Rights

To exercise any of the rights described above, free of charge (subject to certain limitations), please submit a verifiable request to us via the methods described below:

Email: privacy@rich.com

9th Floor, Flemington Tower

182 Le Dai Hanh Street, Phu Tho Ward

Ho Chi Minh City, Vietnam

Only you may make a verifiable request related to your Information. The verifiable request must:

Provide sufficient information that allows us to reasonably verify you are the person about whom we collected Information, or an authorized representative; and
Describe your request with sufficient detail that allows us to properly understand, evaluate, and response to it.

To help protect your privacy and maintain security, if you request access to or deletion of your Information, we may require you to provide certain information to verify your identity before granting you access to your Information or complying with your request. In addition, if you ask us to provide you with specific pieces of Information, we may require you to sign a declaration under penalty of perjury that you are the individual whose Information is the subject of the request. However, please note that there are certain cases as mentioned above where deletion of Information upon your request is inapplicable.

X. GEOGRAPHIC LOCATION OF DATA STORAGE AND PROCESSING

Our Services collect, process, and store your Information in databases located in Vietnam and, when necessary for business operations, in other in other countries or territories, including where our affiliates or parent company operate. Accordingly, we may transfer, store, or process Information on servers located outside Vietnam.

If you access our Services from outside Vietnam, you acknowledge that your Information may be transferred to and processed in countries that may have data protection laws different from those of your country of residence. By accessing our Services and providing your Information, you consent to such transfer, storage, and processing of your Information for the purposes described in this Policy and in accordance with applicable laws.

XI. CHILDREN’S INFORMATION

The Services are intended only for users over the age of seven (7) years of age. If we become aware that a user is under seven (7) years of age (or a higher age threshold, where required by law) and has provided us with Information without the consent of their parent or legal guardian, we will use commercially reasonable efforts to:

(i) delete such Information as soon as reasonably practicable;

(ii) if deletion is not possible, ensure that such Information will not be further used for any purpose and will not be disclosed to any third party; and

(iii) allow any parent or legal guardian who has questions about our processing of Information, or who believes that we have inadvertently or unintentionally collected Information from a child under seven (7) years of age, to contact us using the contact details provided in the section titled “How to Contact Us”.

Our processing of a user’s Information who is 7 years of age or above must have the consent of the user and have the consent of his/her parents or legal guardians as prescribed by current law, except for cases where the law allows the processing of Information without consent. Parents or legal guardians of the user have the responsibility to verify the age of the user and collect the consent of the user aged 7 or above for allowing us to process the personal data of the user before providing Information. When requested, the parents or legal guardians of the user must provide us with a copy of the user’s consent.

XII. DIFFICULTY ACCESSING OUR PRIVACY POLICY

Individuals who have lost or have limited civil act capacity, or who have difficulties in perception or controlling their behavior and are unable to access our Privacy Policy online may contact us to inquire how they can obtain a copy of our policy in another, more easily readable format.

XIII. CHANGES TO THIS PRIVACY POLICY

We reserve the right to change, modify, or amend this Privacy Policy at any time to reflect changes in our products and service offerings, accommodate new technologies, regulatory requirements, or other purposes. If we modify our Privacy Policy, we will update the “Last Updated” date below and notify you via reasonable methods, such changes will be effective immediately upon posting.

XIV. HOW TO CONTACT US

If you have any questions, comments, concerns about this Privacy Policy or wish to withdraw your consent regarding to the Information we have collect about you, or would like to contact our Data Protection Officer (DPO), please contact us at:

Email: privacy@rich.com

9th Floor, Flemington Tower

182 Le Dai Hanh Street, Phu Tho Ward

Ho Chi Minh City, Vietnam

Last Updated: April, 2026