Privacy Policy

Bupbes operates this store and website, including all related information, content, features, tools, products, and services, in order to provide you, the customer, with a curated shopping experience (the "Services"). This Privacy Policy describes how we collect, use, and disclose your personal information when you visit, use, or make a purchase or other transaction using the Services or otherwise communicate with us. If there is a conflict between our Terms of Service and this Privacy Policy, this Privacy Policy controls with respect to the collection, processing, and disclosure of your personal information.

Please read this Privacy Policy carefully. By using and accessing any of the Services, you acknowledge that you have read this Privacy Policy and understand the collection, use, and disclosure of your information as described herein.

I. PURPOSE AND SCOPE OF PERSONAL INFORMATION COLLECTION

We collect and process personal information necessary to deliver, manage, and optimize our Services:

Contact Details: Full name, billing address, shipping address, phone number, and email address.

Financial & Transactional Data: Credit/debit card details, transaction history, payment verification, and order details.

Account Credentials: Username, encrypted password, security questions, and shopping preferences.

Device & Technical Information: IP address, browser type, device identifiers, cookies, and browsing logs.

Customer Communications: Support inquiries, customer service records, and feedback.

II. SCOPE OF INFORMATION USE

Your personal data is used strictly for legitimate business operational purposes, including:

Fulfilling orders, processing payment transactions, issuing invoices, and arranging shipping.

Providing customer support, notifying order statuses, and confirming transactions.

Personalizing user experience, product recommendations, and platform features.

Authenticating account access, detecting fraud, preventing unauthorized activity, and ensuring system security.

Sending promotional communications and marketing offers (only with explicit user consent or opt-in).

Complying with applicable statutory legal, accounting, and tax requirements.

III. DATA STORAGE PERIOD AND RETENTION DETERMINATION

Retention Period: Personal information is retained for as long as necessary to fulfill the operational purposes set forth in Section II, maintain active accounts, resolve disputes, and comply with legal or financial obligations.

Determination Method: Financial and transaction records are retained for a minimum of 5 years as required by Vietnamese tax and accounting laws. Personal account data and contact information remain active until the customer submits a formal account deletion or data erasure request, provided no unresolved legal obligations exist.

IV. AUTHORIZED ENTITIES WITH ACCESS TO PERSONAL DATA

Personal data is handled with strict confidentiality and disclosed only to authorized entities under legitimate terms:

Internal Personnel: Authorized administrative, customer support, and logistics staff of BUPBES on a strict need-to-know basis.

E-Commerce Platform Provider: Our third-party e-commerce infrastructure, hosting, and checkout platform provider, operating under strict security protocols and contractual data protection obligations.

Third-Party Service Providers: Licensed logistics and shipping carriers (for delivery), payment gateway partners, IT management, and accredited data analytics providers.

Competent State Authorities: When mandated by applicable law, subpoenas, court orders, or formal regulatory requests.

V. DATA SECURITY AND PROTECTION MEASURES

We enforce comprehensive technical, organizational, and physical safeguards to safeguard personal information:

Transmission Security: All sensitive transaction data and payment information are encrypted using industry-standard Secure Sockets Layer (SSL/TLS) technology during transmission.

Access Control: Restricted access controls are applied to internal databases; only authorized personnel with unique credentials can access user records.

System Safeguards: Continuous monitoring, firewalls, and regular security updates delivered through our PCI-DSS compliant hosting infrastructure.

Account Safeguards: Customer passwords are encrypted using secure hashing mechanisms.

VI. PROCEDURES FOR ACCESSING, EDITING, OR CORRECTING PERSONAL DATA

Data subjects maintain full control over their personal records and can view, review, or edit their information through the following channels:

Self-Service Editing: Log in to your personal account at bupbes.com/account to view, edit, or update your contact details, shipping address, and account settings directly.

Assisted Correction Request: Submit a formal request via email to sales@bupbes.com detailing the specific information to be corrected. Our support team will verify your identity and complete the updates within 24 to 48 business hours.

VII. PROCEDURES FOR ERASURE, DELETION, OR RESTRICTION OF DATA PROCESSING

Data subjects have the right to request the deletion or restriction of processing of their personal data:

Submission Procedure: Send an email request titled "Personal Data Erasure / Restriction Request" to sales@bupbes.com from your registered email account.

Verification & Processing: Upon receipt and identity verification, we will proceed with the erasure or restriction of your data within 3 business days, provided the data is not subject to legal retention mandates under accounting or tax law.

VIII. PROCEDURES FOR RECEIVING AND RESOLVING PRIVACY COMPLAINTS

If a user suspects a breach of personal data privacy or unauthorized processing, the following complaint resolution workflow applies:

Submission: Submit your complaint or reflection via email to sales@bupbes.com with relevant details and proof.

Acknowledgment & Investigation: Our Data Protection team will acknowledge receipt within 24 hours and conduct an internal review of the system/logs.

Resolution Proposal: Within 3 business days, BUPBES will issue an official response providing explanation and corrective measures taken.

Escalation: If the matter cannot be resolved amicably, the data subject may lodge a complaint with the Department of E-Commerce and Digital Economy (Ministry of Industry and Trade - MOIT) or the competent data protection authority in Vietnam.

IX. CONTACT INFORMATION & DATA CONTROLLER

Should you have any questions regarding this Privacy Policy or wish to exercise your data protection rights, please contact us at:

Data Controller Name: Bupbes Business Household (HỘ KINH DOANH BUPBES)

Registered Address: 149A NGUYỄN PHÚC NGUYÊN, NHIÊU LỘC WARD, HO CHI MINH CITY, VIETNAM.

Official Contact Email: sales@bupbes.com