Privacy Policy

The purpose and scope of collection are determined by the functions you use and are limited to the information necessary for the purposes disclosed below.

Depending on the function used, we may collect the information you provide, including:

• Full name;
• Phone number;
• Email address;
• Delivery address or service location;
• Order, product, service, and payment method information;
• Content of support requests, feedback, or complaints;
• Other information related to the account or necessary to provide services (if any).

The information collected is used for the following purposes:

• Verify your identity and contact you;
• Receive, confirm, and process transactions;
• Delivery, service provision, payment, returns, and refunds;
• Support and resolve feedback, requests, and complaints;
• Ensure platform security and prevent violations;
• Fulfill legal obligations.

We only use information to the extent necessary to fulfill the purposes disclosed in this Policy.

Your information will not be sold, exchanged, or used for other purposes without your consent, except as required by law or upon request by a competent state authority.

Information is retained for the period necessary to complete transactions, provide goods and services, resolve requests, and fulfill legal storage obligations.

When the purpose and retention period end, information will be deleted, destroyed, or anonymized. API request logs for technical auditing are retained for a maximum of 24 hours; account, order, and payment data may be retained longer for the period necessary to complete transactions, resolve disputes, and meet legal obligations.

Your information may be accessed by:

• Our authorized personnel;
• Units supporting platform operation, data storage, payment, shipping, or related service provision;
• Competent state authorities upon lawful request.

Parties accessing information may only use it within the necessary scope and are responsible for confidentiality as required.

We apply appropriate measures to protect information, including:

• Authorization and control of data access;
• Implement technical measures to prevent unauthorized access, use, or disclosure;
• Backup, monitoring, and handling of data security risks;
• Require personnel and relevant parties to comply with confidentiality obligations;
• Implement remedial measures and notifications as required in case of incidents.

You can view or edit the information fields supported by the account interface. For fields that are not editable on the portal, you can send a request via the phone number or email published on the platform; we will verify your identity before processing:

• Provide identification information and the content to be viewed or edited;
• We check and verify the request;
• After verification, we carry out the edit or guide you to do it and notify you of the result.

You can request to delete, cancel, or restrict the processing of information you have provided by contacting us via the phone number or email published on the platform.

Processing procedure:

• You submit a request and specify the information to be deleted, canceled, or restricted;
• We verify your identity and the scope of the request;
• We carry out the request and notify you of the result after verification.

In cases where the information needs to be retained to complete a transaction, resolve a dispute, or fulfill a legal obligation, we will notify you of the reason and restrict the use of the information to an appropriate extent.

If you discover that information has been collected, used, disclosed, or processed for improper purposes, you can contact:

• STALI JOINT STOCK COMPANY
• Business Registration No. 4500666042, registered on 08-04-2024, issued by the Department of Planning and Investment of Ninh Thuan Province
• Email: [email protected]
• Support: 0797618618

Processing procedure:

• You provide the feedback content, relevant information, and supporting documents if any;
• We confirm receipt within 1 working day;
• We check, verify, and apply appropriate corrective measures;
• The processing result is notified via phone number, email, or contact method you have provided.

Depending on the case, corrective measures may include editing, deletion, restriction of processing, prevention of unauthorized access, and coordination with competent authorities as prescribed by law.