(Issued together with Decision No. 002/2026/QD-KSNB-D1 dated 11/06/2026)
1. Definitions
1.1. Consumers (also referred to as Customers): individuals, families, agencies, or organizations that purchase or use products, goods, or services for personal or household consumption and not for commercial purposes.
1.2. Consumer information includes personal information of Consumers, information about the purchase and use of products, goods, or services by Consumers, and other information related to transactions between Consumers and business organizations or individuals.
1.3. The Company means DAYONE ASIA JOINT STOCK COMPANY, enterprise registration number 0316626153, first issued by the Ho Chi Minh City Department of Planning and Investment on 08/12/2020, and/or its affiliated units.
2. Rules for the protection of consumer information
2.1. Purposes of information collection
a. Customer care and support: consulting, answering questions, usage guidance, and technical support related to goods/services provided by the Company.
b. Order confirmation, order status notifications, delivery time, order cancellation confirmation (if any), and other order-related matters; payment processing, activation of goods/services; delivery, installation, setup; warranty and maintenance; transaction reconciliation; refunds; returns; complaint handling; and after-sales service.
c. Performance of contractual commitments, responsibilities, and obligations under contracts and other transaction documents (if any) between the Company and Customers.
d. Creation and maintenance of Customer accounts on the Company’s application for class booking and/or other utilities serving Customer needs and interests.
e. Fulfillment of legal obligations such as issuing VAT invoices, providing information to state authorities upon request, or in cases of disputes, complaints, or lawsuits; protection of Customers’ lawful rights and interests.
f. Providing information to financial companies for receiving, appraising, and approving Customer installment applications.
g. Other purposes with the Customer’s consent.
2.2. Scope of information use
The Company uses consumer information in compliance with applicable laws and the Customer’s specific consent for each scope of use, except where the Company uses Customer information to exercise rights and obligations as prescribed by law.
2.3. Information retention period
a. Consumer information will be retained until deleted/cancelled in the following cases:
- The Customer requests deletion/cancellation and accepts possible risks and damages, provided the request complies with the Law on Personal Data Protection and related regulations.
- The Company has completed the purpose of personal data processing and determines retention is no longer necessary.
- The statutory retention period has expired.
- As required by a decision of a competent state authority.
- As agreed between the Customer and the Company.
- Other cases as prescribed by law.
b. The Company may refuse a Customer’s deletion/cancellation request in cases permitted by law.
2.4. Measures to protect information and ensure information security
To protect consumer information, the Company applies the following measures:
a. Technical measures such as firewall systems and multi-layer authentication when logging into systems.
b. Network security checks for information systems, means, and devices to protect data.
c. Regular inspection and scanning of improperly stored data.
d. Security testing (Pentest) for newly developed or upgraded software systems under programs and projects.
e. Designation of departments and personnel responsible for protecting Customer information.
3. Rights and responsibilities of Customers
3.1. Customer rights
a. The right to know and consent to the purpose and scope of use of Customer information.
b. The right to withdraw consent or request restriction of use of Customer information by written notice to the Company’s email or contact address.
c. The right to request deletion/cancellation of Customer information by written notice, accepting possible risks and damages; the Company may refuse where prohibited by law or where deletion/cancellation would violate applicable laws.
d. The right to request correction of Customer information when it changes and/or contains errors.
e. The right to request provision of Customer information by written request to the Company’s email or contact address.
f. Other rights as prescribed by law.
3.2. Customer obligations
a. Ensure all information provided to the Company is accurate and lawful. The Company is fully exempt from liability if information provided is inaccurate or unlawful.
b. If providing third-party information (including but not limited to relatives, authorized persons, partners, contacts, and/or other individuals), the Customer warrants that consent has been obtained. The Customer is responsible to third parties for the use and provision of such information and must retain proof of consent for the Company and competent authorities as required by law.
c. Other obligations as prescribed by law.
4. Amendments and replacement
4.1. These Rules may be updated, amended, supplemented, or replaced from time to time in compliance with applicable laws and/or to better protect Customer information.
4.2. Any updated, amended, supplemented, or replaced content (if any) will be publicly posted by the Company as required by law from time to time.
5. Effectiveness
These Rules take effect from the date of signing the Decision issued together with these Rules.