Privacy Policy

1. Introduction

This Privacy Policy outlines how WHO (we, us, or our) collects, uses, discloses, and protects your personal information when you visit our website https://madebywho.co (the Site), engage with our services, or make purchases. We are committed to safeguarding your privacy and ensuring compliance with applicable data protection laws, including Vietnam's Personal Data Protection Decree (PDPD) and international regulations.

2. Information We Collect

We may collect and process the following categories of personal data:

  • Identification Data: Full name, date of birth, gender.
  • Contact Information: Email address, phone number, mailing address.
  • Transaction Data: Purchase history, payment details (processed via secure third-party payment gateways).
  • Technical Data: IP address, browser type, operating system, device information, and browsing behavior on our Site.
  • Communication Data: Records of correspondence, feedback, and inquiries.

We do not intentionally collect sensitive personal data unless explicitly provided by you for specific purposes, such as custom orders.

3. Legal Basis for Processing

We process your personal data based on one or more of the following legal grounds:

  • Consent: Where you have given explicit consent for processing.
  • Contractual Necessity: To fulfill our contractual obligations to you.
  • Legal Obligation: To comply with legal and regulatory requirements.
  • Legitimate Interests: To enhance our services, provided that such interests are not overridden by your rights and freedoms.

4. Purpose of Data Collection

Your personal data is collected and processed for the following purposes:

  • To process and fulfill your orders.
  • To communicate with you regarding your purchases or inquiries.
  • To improve our products, services, and website functionality.
  • To comply with legal obligations and resolve disputes.
  • To send promotional materials, newsletters, or updates (only with your explicit consent).

5. Data Sharing and Disclosure

We may share your personal data with:

  • Service Providers: Third-party vendors that assist in payment processing, shipping, marketing, and IT services.
  • Legal Authorities: When required by law or to protect our rights.
  • Business Transfers: In the event of a merger, acquisition, or sale of assets.

All third parties are obligated to protect your data and use it solely for the purposes specified by us.

6. International Data Transfers

If we transfer your personal data outside Vietnam, we ensure that adequate safeguards are in place, such as:

  • Standard Contractual Clauses: Agreements that ensure data protection standards.
  • Transfer Impact Assessments: Evaluations as required by the PDPD.

We comply with all requirements set forth by the Ministry of Public Security regarding cross-border data transfers.

7. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes outlined in this policy, unless a longer retention period is required or permitted by law. Once data is no longer needed, we securely delete or anonymize it.

8. Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, disclosure, alteration, or destruction. These measures include:

  • Secure server infrastructure.
  • Encryption of sensitive data.
  • Regular security assessments and updates.

9. Your Rights

Under the PDPD and applicable international laws, you have the following rights:

  • Right to Access: Obtain a copy of your personal data.
  • Right to Rectify: Correct inaccurate or incomplete data.
  • Right to Erasure: Request deletion of your data under certain conditions.
  • Right to Restrict Processing: Limit how we use your data.
  • Right to Data Portability: Receive your data in a structured, commonly used format.
  • Right to Object: Object to data processing based on legitimate interests.
  • Right to Withdraw Consent: Withdraw consent at any time, without affecting the lawfulness of prior processing.

To exercise these rights, please contact us at sup@whoclan.com.

10. Children's Privacy

Our services are not directed to individuals under the age of 16. We do not knowingly collect personal data from children without parental or guardian consent. If we become aware that we have inadvertently collected such data, we will take steps to delete it promptly.

11. Cookies and Tracking Technologies

We use cookies and similar technologies to enhance your browsing experience, analyze site traffic, and personalize content. You can manage your cookie preferences through your browser settings.

12. Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect changes in our practices or legal requirements. Any updates will be posted on this page with the revised effective date. We encourage you to review this policy regularly.

13. Contact Us

If you have any questions or concerns about this Privacy Policy or our data practices, please contact us at:

  • Email: sup@whoclan.com
  • Address: We are based in Vietnam