Privacy policy

This policy applies to Tiệm Thỏ, operated by HỘ KINH DOANH TIỆM THỎ at 386/61 Lê Văn Sỹ, Phường Nhiêu Lộc, Ho Chi Minh City, Vietnam. Contact us at support@tiemtho.com about this policy or your information.

We collect only information needed to run the shop, fulfill orders, support customers, keep the service secure, and meet legal obligations.

• Account and contact details, such as name, email address, telephone number, sign-in identifiers, and saved addresses.
• Order and delivery details, including products, sizes, colors, shipping address, payment status, and transaction references. Payment providers process payment credentials; we do not store complete card numbers.
• Messages sent to customer support or chat, including attachments and the information you choose to provide.
• Technical and security data, such as device, browser, IP address, request logs, cookies, and authentication or audit events.
• Optional Google Analytics 4 usage data only when you give analytics consent. We do not use your details for newsletters or marketing messages.

We use personal information for the purposes below and only where we have an appropriate legal basis, including performing a contract, complying with law, protecting legitimate interests, or acting on consent.

• Create and administer accounts, carts, checkout, payment verification, orders, delivery, cancellations, remedies, and refunds.
• Answer questions and provide human or AI-assisted customer support.
• Prevent fraud, abuse, and security incidents; maintain reliable records; and enforce our terms.
• Comply with accounting, tax, consumer-protection, and other legal requirements.
• Measure site performance through GA4 only after consent. You may withhold or withdraw analytics consent without affecting shopping functions. Cookie Settings and an enabled Global Privacy Control signal keep optional analytics disabled.

Our support experience may use a private AI system to help answer questions. Messages may be sent to contracted infrastructure and model processors solely to provide, secure, and improve the support service under our instructions. We do not sell chat content or use it for newsletters or advertising.

Avoid sending sensitive information that is not needed to resolve your request. You may ask for human assistance by emailing support@tiemtho.com. AI answers can be incomplete, so order, payment, return, and legal decisions are confirmed by Tiệm Thỏ records and staff.

Stripe processes payments for new Global orders through its hosted checkout. We share order, contact and transaction information needed to process payment, calculate applicable taxes, prevent fraud and handle refunds. Stripe collects payment credentials in its checkout; we do not store complete card numbers. For historical PayPal orders, we use PayPal transaction references and receipt records for manual verification and refunds.

If you use optional address suggestions in Global checkout, your typed search is sent to Geoapify. You may enter your address manually instead. Search suggestions can be cached temporarily; the confirmed delivery address is retained under this policy.

We share the minimum necessary information with processors that host the shop and data, verify payments, deliver orders, provide email or customer support, analyze consented usage, and protect the service. They may process data only for contracted purposes and under applicable safeguards.

• We may disclose information when required by law, a lawful authority, or to protect customers, Tiệm Thỏ, or others.
• If the business is reorganized or transferred, relevant records may transfer subject to this policy and applicable law.
• We do not sell personal information.

Some processors may handle information outside your country. Where required, we use contractual and organizational safeguards appropriate to the transfer. Information remains subject to local legal disclosure requirements in the place where it is processed.

We retain information only as long as reasonably needed for the purpose collected and applicable legal requirements. Our usual limits are:

• Order, payment, invoice, and tax records: up to 10 years.
• Customer support and chat records: up to 24 months.
• Controlled AI service logs: up to 30 days.
• Consented GA4 analytics data: up to 14 months.
• Authentication artifacts: until their configured expiry or earlier revocation.
• Security and administrative audit records: 12 to 24 months.

Depending on applicable law, you may ask to access, correct, delete, restrict, or receive a copy of your personal information, object to certain processing, or withdraw consent. Email support@tiemtho.com. We may need to verify your identity.

We aim to respond within 30 days. A lawful extension or refusal may apply where a request is complex, repetitive, affects another person, or conflicts with tax, payment, fraud-prevention, recordkeeping, or other legal duties. We will explain applicable exceptions.

Purchasers must be at least 18 years old. Our shop is not directed to children under 16, and we do not knowingly collect their personal information. A parent or guardian who believes a child has provided information should contact us for review and deletion where legally permitted.

We use reasonable technical and organizational safeguards, but no internet service is completely secure. Keep account credentials private and contact us if you suspect unauthorized access.

We may update this policy as our services or legal obligations change. The date above identifies the current version. Material changes will be highlighted where appropriate.