X

PERSONAL INFORMATION POLICY

                                     Basic Policy

We recognize the importance of protecting personal information based on the AEON Basic Principles of "pursuing peace, respecting humanity, and contributing to local communities, always with the customer's point of view as its core," and we understand the importance of treating personal information in a careful and secure manner. Personal information reflects uniqueness and values of the holder and must be cared for just as much as the holder itself. We strive to correctly and safely manage the personal information and build up relationships of mutual trusts.

I.  INITIATIVES TO PROTECT PERSONAL INFORMATION

We enforce basic policies on protecting personal information through the following measures.

  1. All executives, employees, probationers, trainees, apprentices, and other workers without labor contract observe internal regulations, laws and regulations related to personal information.
  2. We appoint a department with function of protecting personal information and a personal in charge of protection of personal information and exchange information with the personal information protection authority.
  3. We appoint a personal to be in charge of personal information protection auditing and conduct audits regarding personal information protection.
  4. We will improve internal rules and operations for nonconformities with latest laws and regulations from time to time.
  5. We require our business partners and related parties to cooperate in the protection of personal information.
  6. This policy is available to view at any time on our website and via company information materials.

II.  HANDLING OF PERSONAL INFORMATION

  1. Regarding collection, recording, analysis, confirmation, storage, rectification, disclosure, combination, access, traceability, retrieval, encryption, decryption, copying, sharing, transmission, provision, transfer, deletion, destruction or other relevant activities, the purposes will be clarified before  the time of collection, and the collected personal information will be appropriate for and only proceeded within the scope of the purposes for the necessary period that is appropriate for the purposes. In addition, when it is no longer necessary to process it, we will endeavor to delete the personal information without delay.
  2. When we receive a request to be informed, to amend or delete his/her personal information, to obtain restriction on the processing, to provide his/her personal information, to object to the processing of personal information, to file related to the processing of personal information, we will respond promptly, within a proper period of time, and within appropriate limits within the law and regulations.
  3. We will implement management and technical measures to appropriately safeguard personal information against issues such as unauthorized access, losses, falsification, and leaks.

Enacted June 12th, 2025

 

About the handling of personal information                 

Dong Hung Intergration Development Company Limited (hereinafter referred to as the "Company") pays the utmost care when handling personal information pertaining to customers, so that customers can purchase and use our products and services with confidence. The Company, and its directors, employees, probationers, trainees, apprentices, and other workers without labor contract recognize the importance of protecting personal information and strive to maintain legal compliance and the safe handling of said information.

                              Handling of Customers' Personal Information

I.  TYPE OF PERSONAL INFORMATION TO BE PROCESSED

The personal information of customers to be processed by the Company (the “Personal Information”) includes:

1. Basic personal information

  • Surname, middle name and first name;
  • Date, month and year of birth;
  • Gender;
  • Place of birth, permanent residence address, temporary residence address, current residence address, hometown, contact address;
  • Nationality;
  • Personal image;
  • Phone number, ID card number, personal identification number, passport number, driving license number, license plate, personal income tax number; 
  • Marital status;
  • Information about the individual’s family relationship; 
  • Digital account information; personal information that reflects activities and activity history in cyberspace;
  • Other information associated with an individual or used to identify an individual.

2. Sensitive personal information

Information on customer account of credit institution, foreign bank branch, payment intermediary service provider, and other licensed organization.

II.  PURPOSE OF PROCESSING THE PERSONAL INFORMATION (We will properly acquire and use customer's Personal Information)

The Company processes the Personal Information to help customers to use our services smoothly and efficiently. Particularly, the Company will use the Personal Information for the below-mentioned purposes:

  1. To identify, authenticate and verify customer information; 
  2. To handle orders from our customers related to products the Group manufactures, products the Group sells.
  3. For the delivery of products purchased by customers.
  4. To provide change, return services for products purchased by customers.
  5. To provide customers with procedures and services of customer care.
  6. To register customers for various membership services of the Group.
  7. To inform customers of various commercial events or new store of the Group.
  8. In the case of questionnaires from customers, to achieve the purpose of the questionnaire.
  9. When recording conversations with customers on video or video recording, photography taken at stores, the purpose is to confirm the content of conversations held; manage and monitor business operations or comply with internal regulations of the Group; or for crime prevention.
  10. To analyze information such as customer purchase history and website browsing history and use it for marketing and sales promotion of the Group.
  11. To process payments, we collect information about the customer's debit card, credit card, or other Personal Information, if any, depending on the payment method the customer chooses.
  12. Exercise the rights and obligations of the Company and/or Group as well as that of customers with the competent state agencies in accordance with the law including but not limited to the obligation to disclose information, report in accordance with the provisions of the law on promotion, stored information, audit.
  13. Detect, prevent, investigate and handle complaints, denunciations, accidents, activities that violate the Company's and/or Group’s policies and regulations and/or violate Vietnamese laws.
  14. Sharing the Personal Information to other third parties (for the purposes mentioned above and other appropriate purposes), including but not limited to: affiliated companies, other companies under the same AEON Group; partners, agents, suppliers of goods/services, contractors, consultants of the Company, etc.
  15. Other cases in which the Company and/or Group must process Personal Information in accordance with the law.
  16. For the issuance, sale and other related services of financial instruments, payment intermediary, provided by the Company in coordination with its partners other than those listed in points 1-15 above.

III.  USAGE RESTRICTIONS (Only used within the predetermined purpose of use)

The Company will not use the acquired Personal Information outside the range necessary (outside the purpose of use) for achieving the purpose of use as described in section 2 above.

IV. TRANSFER OF BUSINESS (We will take appropriate measures in such cases as merging, etc.)

As a business, the Company may undergo restructuring (including, but not limited to, full division, partial division, merger, consolidation, sales of assets). In such cases, a customer's Personal Information may be transferred in accordance with law or shared within the scope of the purpose of use, but the Company will take necessary measures to manage said Personal Information, such as requiring the partner company to enter into a non-disclosure agreement.

V. MANAGEMENT OF PERSONAL INFORMATION (We will manage said information appropriately.)

Having appointed a person to be in charge of the management of said information, we make sure to comply with laws and regulations and internal rules concerning personal information. Also, we treat our customers' Personal Information with the utmost care. In addition, we strive to keep customers' Personal Information accurate and up-to-date, and to appropriately manage said information to prevent its unauthorized access, loss, destruction, falsification, leakage, etc. Detailed examples of our management are listed below.

  1. We continuously provide in-house training regarding the protection and appropriate handling of customers' Personal Information.
  2. We conduct audits periodically to review our management system pertaining to the protection of Personal Information.

VI. PROVIDING PERSONAL INFORMATION TO A THIRD PARTY (We will not share information with a third party in an inappropriate manner.)

We do not provide customers' Personal Information to third parties except in the following cases.

1. When there is consent of the customer

We may provide your Personal Information to third parties based on your consent.​ ​
In addition, we may share your Personal Information to third parties to fulfil your obligations and duties towards such third parties according to laws. For example, if the customer purchases a product or uses a service using a debit card, credit card or other payment method, the number of the credit card or other payment cards, the customer's name, and other necessary information may be shared with the bank, the card issuance company or payment service provider in order to settle the payment. In such cases, the customer agrees to the sharing of information by the Company as written above.

2. When required by law

We may provide customer information to third parties in the following cases:

  • When required by law
  • When it is necessary to protect human life, health and it is difficult to obtain consent from the actual individual. For example, when an item bought from us by a customer is recalled by the manufacturer, we may share the customer's contact information with the product's manufacturer.
  • In the event of a state of emergency regarding national defense, security, social order and safety, major disasters, or dangerous epidemics; when there is a threat to security and national defense but not to the extent of declaring a state of emergency; to prevent and fight riots and terrorism, crimes and law violations according to the provisions of law, competent regulatory authorities carrying out an affair prescribed by the law but obtaining the consent of the actual individual creates a risk of hindering the fulfillment of such affairs.

3. When entrusting the handling of Personal Information

When outsourcing the handling of the customer's Personal Information to an external company, etc., we strictly manage the provision of the customer's Personal Information and only share the minimum amount of required information with the external company. We also cause such external companies to keep the customer’s Personal Information secure and only to process the customer’s Personal Information according to our instructions. 

4. When sharing with a group

We may jointly use your Personal Information in our group.

4.1. Personal Information Used Jointly

  1. Name, date of birth, gender, phone number, address, e-mail address, information about the customer's family, information about the customer's place of employment, public information, and any other information related to the customer or information reported by the customer.
  2. Information on the details of individual transactions with customers, such as the types of products and services which are being traded, transaction dates, transaction amounts, etc.
  3. Information on the use of services provided by the Group, such as purchase history and website browsing history of each customer group company.

4.2. Range of Joint Usage

AEON Co., Ltd and companies established under Vietnamese law in which AEON Co., Ltd directly or indirectly holds part or all of the capital contribution of the owner of that company (collectively referred to as “Group").

AEON CO., Ltd

AEON VIETNAM CO., LTD.

ACS Trading Vietnam Co., Ltd.

AEON DELIGHT (VIETNAM) COMPANY LIMITED 

AEON MALL VIETNAM CO., LTD. 

AEON MALL LONG BIEN CO., LTD.

AEON TOPVALU VIETNAM COMPANY LIMITED 

AEON FANTASY VIETNAM CO., LTD. 

MINISTOP VIETNAM COMPANY LIMITED 

VINH KHANH CONSULTANCY CORPORATION

DONG HUNG INVESTMENT DEVELOPMENT CONSULTANCY JOINT STOCK COMPANY 

4.3. Purposes of use of joint users

Same as "2. Purpose of Processing the Personal Information".

4.4. Person responsible for the management of the Personal Information

General Director of Dong Hung Intergration Development Company Limited.
Address: 96 Cao Thang, Ward 4, District 3, Ho Chi Minh City, Vietnam

VII. INQUIRIES REGARDING PERSONAL INFORMATION (We will handle inquiries within the scope of the law)

We have set up a "Customer Care Division" and promptly make inquiries regarding disclosure, correction, deletion, and suspension or other customers' rights over their Personal Information within the scope of laws and regulations. We will respond. For example, if you have the following requests, please contact the "Customer Care Division".

  • Requests to correct mistakes in the customer's registered information.
  • Requests to stop guidance from the Company received by e-mail, direct mail, mobile phone, etc.

VIII. PERSONAL INFORMATION OF CUSTOMERS UNDER 16 YEARS OLD (We require parental consent)

We also take the utmost care in protecting the Personal Information of customers under the age of 16. The Personal Information of customers under the age of 16 will be processed with (i) the consent of their parents or guardian(s) and (ii) the consent of customers themselves in case customers are from 7 years old to under 16 years old.

IX. METHOD TO PROCESS PERSONAL INFORMATION

Generally, the processing of the customer’s Personal Information covers a wide range of operations, including collection, recording, analysis, confirmation, storage, rectification, disclosure, combination, access, traceability, retrieval, encryption, decryption, copying, sharing, transmission, provision, transfer, deletion, destruction or other relevant activities. It may be performed manually or automatic means. For example, the customers’ Personal Information may be stored in written form or electronic data in the Company’s computer or server. The Company may transfer the customers’ Personal Information to third parties via courier, email, cloud service, and other lawful form. However, the Company will ensure that the forms of processing will be appropriate and within lawful scope and necessary for the purpose of processing the Personal Information in accordance with the laws as stated in Article 2 above.

X. DURATION OF PROCESSING OF THE PERSONAL INFORMATION

The Company will commence the processing of the Personal Information as from the time of obtaining customer’s consent until such customer withdraws their consent or requests to delete the Personal Information.

However, certain Personal Information may be required to be retained even after the duration above to comply with specific laws, such as information needed for tax inspection or audit purposes. The Company will store such Personal Information for the period in accordance with the applicable laws.

XI. POTENTIAL CONSEQUENCES AND DAMAGES WHEN PROCESSING THE PERSONAL INFORMATION

During the processing of the Personal Information, the Company commits to apply and maintain management measures, technical measures and other necessary measures as required by law to protect the Personal Information. 

 

However, customers please acknowledge that in the event of objective events beyond the Company’s control, including but not limited to, theft at the Company’s office or other business locations, illegal intrusion into the Computer’s system and internal network system, or incidents related to the Company’s relevant equipment and techniques, the Personal Information is still at risk of theft, loss, leakage, illegal use or access and it may cause damage to the customer. 

XII. PERSONAL INFORMATION PROCESSING ORGANIZATIONS AND OTHER ORGANIZATIONS AND INDIVIDUALS RELATED TO THE PURPOSE OF PROCESSING THE PERSONAL INFORMATION

The Company and other third parties, including but not limited to: affiliated companies, other companies under AEON Group, partners, agencies, suppliers, contractors, consultants of the Company etc. will perform the processing of Personal Information in connection with the Purpose of Processing the Personal Information at Section 2.

The Company will require these third parties to comply with personal information protection requirements at least in accordance with our Policy and as required by law.

XIII. RIGHTS AND OBLIGATIONS OF THE CUSTOMER 

1. The customers have the following rights as provided under Vietnamese law:

  • Right to know about the processing of their Personal Information;
  • Right to consent or not to consent the processing of their Personal Information;
  • Right of access to view, edit or request to correct their Personal Information;
  • Right to withdraw their consent to the processing of their Personal Information;
  • Right to delete or request to delete their Personal Information;
  • Right to request restriction of processing of their Personal Information;
  • Right to request the Company to provide them with their Personal Information;
  • Right to object the processing of their Personal Information;
  • Right to complain, denounce or sue according to Vietnamese law;
  • Right to request compensation for damages according to Vietnamese law;
  • Other rights according to Vietnamese law.

2. The customers have the following obligations as provided under Vietnamese law:

  • To protect their Personal Information by themselves or to require other relevant organizations and individuals (including, among others, the Company) to protect their Personal Information;
  • To respect and protect other individuals’ Personal Information;
  • To provide completely and accurately their Personal Information when consenting the processing of the Personal Information;
  • To participate in promoting and disseminating personal information protection skills;
  • To implement regulations on personal information protection and participate in preventing and fighting against any breaches of such regulations;
  • Other obligations under Vietnamese law.

                                                             OTHER

I.  JURISDICTION

In the event of a dispute related to the protection of Personal Information, the competent People's Court according to the Vietnamese law shall be the court of jurisdiction in the first instance.

II.  CUSTOMER CARE DIVISION

Dong Hung Intergration Development Company Limited
Landline:028 3929 1068

III.   REVISIONS

We may revise a part of our personal information protection policy in order to protect the Personal Information or to respond to any changes in laws and regulations and other norms. We will notify you of particularly important changes on our website or in the nearest store in an easy-to-understand manner prescribed by us.

                                                                                                                                                                                                               Enacted June 12th, 2025

                                               About using the website

I.   ABOUT WEBSITE SECURITY

We adopt the SSL (Secure Socket Layer) encryption system to encrypt and communicate data on the pages where customers provide their personal information on our website, so that even in the case of a third party intercepting transmissions, there is no need to worry about the shared content being stolen. In addition, our servers use a firewall system to protect data, which in turn prevents unauthorized access. We make the management and protection of personal information shared with us by our customers a top priority so that it is not leaked to other parties.

II.  ABOUT WEBSITE CONTENT

Although our website can be accessed from countries around the world that have differing laws, the content of our website shall be in accordance with the laws of Vietnam.

III. IMPACT ON THE WEBSITE WHEN REFUSING TO PROVIDE INFORMATION

Our website does not require customers to register or provide personal information when accessing our website. However, to use our website’s online shopping function (if any), customers need to register or provide personal information.

                                                                                                                                                                                                               Enacted June 12th, 2025

 

 

                                                                                                     THANK YOU AND BEST REGARDS!