How VinaCoffee Group collects, uses, and protects your personal data — compliant with Luật 91/2025 (Vietnam PDPA).
Effective: March 31, 2026
VinaCoffee Group Joint Stock Company ("VinaCoffee", "we", "us") is committed to protecting your personal data in accordance with Luật Bảo vệ Dữ liệu Cá nhân (Law 91/2025/QH15) and applicable international data protection standards. This policy explains how we collect, use, store, and protect personal data when you interact with our website and services.
You have the right to know what personal data we collect, why we collect it, how it is used, and who it is shared with before or at the time of collection.
You may request a copy of all personal data we hold about you. We will respond to access requests within 72 hours.
You may request correction of any inaccurate or incomplete personal data we hold about you.
You may request deletion of your personal data. We process deletion requests within 72 hours of verification.
You may request that we limit the processing of your personal data in certain circumstances.
You may request your personal data in a structured, commonly used, machine-readable format for transfer to another controller.
You may object to the processing of your personal data for direct marketing or other legitimate interest purposes.
You have the right not to be subject to decisions based solely on automated processing that produce legal or significant effects.
Where processing is based on consent, you may withdraw your consent at any time without affecting the lawfulness of prior processing.
You have the right to lodge a complaint with the Ministry of Public Security (Department of Cybersecurity and High-tech Crime Prevention) if you believe your data rights have been violated.
For any data protection inquiries or to exercise your rights, contact our DPO:
This website uses essential cookies for functionality (language preference, session management). We do not use tracking cookies or third-party advertising cookies. Analytics are processed server-side without personal identifiers.
All data deletion requests are processed within 72 hours of identity verification. Upon deletion, your data is permanently removed from all active systems and backup systems within 30 days.
Last updated: March 31, 2026