Privacy policy

The controller and processor of personal data is the owner of the Sương Trà website:

• Website owner: Sương Trà
• [CẦN NỘI DUNG]
• [CẦN NỘI DUNG]
• Email: [email protected]

When you submit the “Get advice” form, we receive only:

• Your name and phone number — so we can call you back.
• The tea you are interested in and your message (optional) — so we can advise you properly.
• The time you consented and the version of the consent text — as proof of consent as required by regulation.

The website sets no cookies and uses no analytics or behaviour-tracking advertising tools. We do not store your IP address or browser information with your request.

To prevent flooding, the server briefly keeps a hash (SHA-256) of the IP address in memory for at most 10 minutes; it is never written to disk and is not linked to the data you send.

Your browser stores a few display choices locally (light/dark theme, paused motion, sound). These are never sent to the server and you can remove them by clearing the site’s data in your browser.

Please do not put health information or other sensitive data in your message.

The data is used only to contact you, advise you on choosing tea and Sương Trà products, as you requested.

The legal basis is your consent: the consent box in the form is not pre-ticked, and silence or no response is not consent. We do not use this data to send advertising or promotions unless you have separately consented to that purpose.

[CẦN NỘI DUNG]

Data is deleted sooner if you withdraw consent or ask for deletion.

Your request is sent to the Sương Trà team’s mailbox; only the members in charge of advice can read it. We do not sell or share data with third parties for advertising.

• [CẦN NỘI DUNG]
• When you place an order and enter an email, the order confirmation email is sent through the Gmail service (Google).
• [CẦN NỘI DUNG]

Data travels over an encrypted connection (HTTPS). Backup files on the server are readable only by the operating account; system logs do not record personal data. If a leak that could cause harm occurs, we will notify the competent authority within 72 hours and notify you where needed.

You have the right to:

• Be informed about the processing of your data; view it and ask for corrections — we act within 10 days.
• Withdraw consent, request restriction of or object to processing — we reply within 2 working days and act within 15 days.
• Request deletion of your data — we reply within 2 working days and act within 20 days.
• Complain, report violations or claim compensation as provided by law.

Email [email protected], stating your request and the phone number you used in the form so we can find the right data.

If you are under 16, please ask a parent or guardian to send the request on your behalf.

When the policy changes, we update the effective date and version at the top of the page. The consent you gave is stored against the exact version in force when you submitted the form.