Phuoc Swiss Jewelry & Diamond ("Phuoc Swiss", "we") respects your privacy and is committed to handling personal data lawfully. This policy explains how we collect, use, store and protect personal data, in accordance with Decree 13/2023/ND-CP on personal data protection, the Law on Cyber Information Security No. 86/2015/QH13, the Law on Electronic Transactions No. 20/2023/QH15, and the Law on Protection of Consumer Rights No. 19/2023/QH15.

1. Scope

This policy covers personal data we process when you visit phuocswiss.com, contact us by telephone, email or social media, purchase at a showroom, or use our warranty and aftercare services.

For the purposes of this policy, Phuoc Swiss is the Personal Data Controller in respect of your data.

2. Data we process

Basic personal data:

• Full name, and gender and date of birth where you provide them.
• Telephone number, email address, contact address and delivery address.
• The content of your correspondence with us by telephone, email or message.
• Purchase history, service history and product preferences.
• Technical data when you use the website: IP address, device type, browser, pages viewed and time of visit.

We do not set out to collect sensitive personal data. Where sensitive data is required for a specific transaction, we say so clearly and obtain your separate consent.

We do not store full card numbers. Card payments are processed through a licensed partner's payment gateway.

3. Purposes

• Receiving, confirming and fulfilling orders, and issuing invoices as required by law.
• Delivering your order and keeping you informed of its status.
• Meeting our warranty, exchange and aftercare obligations.
• Advising on products and answering your enquiries.
• Improving the website, our products and our service.
• Sending news of new pieces and offers, where you have agreed to receive them.
• Meeting accounting, tax and other legal obligations.
• Preventing and detecting fraud and keeping our systems secure.

4. Lawful basis and consent

We process personal data on the basis of your consent, or where processing is necessary to perform a contract with you, to comply with a legal obligation, or to protect the life or health of you or another person in an emergency.

Consent is given clearly and specifically for each purpose. Silence or non-response does not constitute consent. You may withdraw consent at any time; withdrawal does not affect the lawfulness of processing carried out beforehand.

5. Retention

We retain personal data for as long as needed to achieve the purpose notified to you, or for the period the law requires.

• Order and invoice data: for the period required by accounting law.
• Service data: for the warranty period and for the lifetime aftercare of the product.
• Marketing data: until you withdraw your consent.

At the end of the retention period, data is deleted or anonymised.

6. Sharing

We do not sell or trade your personal data. We share it only as far as necessary with:

• Delivery partners, in order to deliver to the address you give us.
• Payment gateways and banks, in order to process transactions.
• Providers of the technical infrastructure and hosting behind the website.
• Independent assessment bodies, where product quality must be verified.
• Competent state authorities, on a lawful written request.

Any party processing data on our behalf must commit to confidentiality and may process the data only within the scope we authorise.

7. Cross-border transfers

Some website infrastructure services may be hosted outside Vietnam. Where personal data is transferred abroad, we carry out an impact assessment and maintain the dossier required by Decree 13/2023/ND-CP, and ensure the recipient applies equivalent protection.

8. Security measures

• Connections to the website are encrypted with HTTPS.
• Access is granted by role; only staff whose duties require it can reach customer data.
• Regular backups and access logging.
• Staff training on personal data protection.

If we become aware of a breach of personal data protection rules, we notify the competent authority within the statutory deadline and inform the customers affected.

9. Cookies

The website uses cookies and similar technologies to remember your language choice, keep your product filters and measure performance. You can refuse or delete cookies in your browser settings; some website functions may not work fully with cookies disabled.

10. Your rights

Under Decree 13/2023/ND-CP you have the following rights in respect of your personal data:

• To know how your personal data is processed.
• To consent, or refuse consent, to processing.
• To access, correct, or request correction of your personal data.
• To withdraw consent already given.
• To request deletion of your personal data.
• To request restriction of processing.
• To request that your personal data be provided to you.
• To object to processing.
• To complain, denounce or bring legal proceedings as provided by law.
• To claim damages where the rules on personal data protection are breached.
• To protect yourself as provided by law.

We respond to your request within 72 hours of receiving it, unless the law provides otherwise.

11. Children's data

Our website and services are not directed at children under 16. Personal data of a child is processed only with the consent of the child, where aged 7 or over, and of a parent or guardian, as required by law.

12. Changes to this policy

We may update this policy as the law or our operations change. Updates are published on this page. Where a change materially affects your rights, we notify you in advance by email or on the website.

13. Contact

For any request concerning personal data, please use the email address or hotline shown in our footer, or write to us at a Phuoc Swiss showroom address.