Privacy Policy

This policy explains how AU SUNSHINE Company Limited (“AU SUNSHINE”, “we”) collects, uses, stores and protects personal data when you visit ausunshine.vn and send us information. It is prepared under Vietnam’s Law on Personal Data Protection No. 91/2025/QH15, Decree 356/2025/ND-CP and related regulations.

1. Scope

This policy applies to every page of ausunshine.vn (Vietnamese, English and Chinese) and to the forms on the website: contact, distributor registration, job applications and surveys.

It does not apply to third-party websites, online stores or social media accounts linked from our website (for example Facebook, Zalo, Shopee or brand websites). Those have their own policies.

2. Data we collect

We only collect data you choose to provide through our forms, plus a minimum of technical data:

• When you send the contact or distributor form: name, phone number, email, company/store name, province/city, business type, brand of interest, message.
• When you apply for a job: name, email, phone number, year of birth, place of residence, experience, education, most recent employer, expected salary, availability, English level, CV (file or link), portfolio, cover letter, how you heard about the job.
• When you answer a survey: name, class or organisation, group, phone/Zalo number and your answers.
• When you send any form: IP address, browser information, the page the form was sent from and the time – used to block spam and protect our systems.
• When you browse the website: anonymous page-view statistics (see section 3).

We do not ask for sensitive personal data such as health conditions, ID card numbers or bank account details. Please do not include such information in messages, CVs or surveys. If you do, we only process it as far as needed for the purpose you sent it for.

3. Cookie-free visitor statistics

Page views are counted by a system we run ourselves. We do not use Google Analytics, advertising pixels or tracking cookies. To estimate daily visitors, the system creates a one-way hash from your IP address and browser information combined with a secret key that changes every day. IP addresses are not stored and the hash is deleted automatically after 2 days. Only aggregated figures are kept (views per page, traffic source, device type, language), and they are never used to identify anyone.

4. How we use your data

• To answer your questions, advise you and get back to you as requested.
• To discuss, assess and carry out distribution partnerships.
• For recruitment: reviewing applications, arranging interviews and sharing results; contacting you about other suitable roles if you agree.
• To prepare programmes, classes or events covered by a survey you take part in.
• To run and improve the website and protect it against spam, fraud and unauthorised access.
• To meet legal obligations or lawful requests from competent authorities.

We do not sell or rent personal data, and we do not send you marketing messages without your consent.

5. Legal basis

We process data based on your consent (given when you tick a consent box or actively submit a form after being informed), to fulfil your own request, or where the law requires it. You may withdraw your consent at any time (see section 9); this does not affect the lawfulness of processing carried out before the withdrawal.

6. How long we keep data

• Contact and distributor enquiries: up to 24 months from our last exchange. If we sign a contract, data is kept for the term of the contract and as required by record-keeping rules.
• Job applications: up to 12 months from the application date, or up to 24 months if you agree to be contacted about other roles. Successful candidates’ data becomes part of their employee records.
• Survey responses: up to 12 months after the programme ends.
• Visitor statistics hashes: deleted automatically after 2 days.

When the period ends or you ask us to delete your data, we delete it or make sure it can no longer identify you, unless the law requires us to keep it longer.

7. Sharing

Only authorised AU SUNSHINE staff who need your data to handle your request can access it. We only share data with:

• Server hosting and email providers that run our website, under confidentiality terms and only as needed.
• Brand owners or partners directly involved in your partnership request, when necessary and after letting you know.
• Competent authorities under a lawful request.

8. Where data is stored

The website and its database run on servers in a data centre in Singapore, so the data you send through the website is stored outside Vietnam. We apply the safeguards described in section 10 and transfer personal data abroad in accordance with Vietnamese law.

9. Your rights

For your personal data, you have the right to:

• Be informed about how it is processed;
• Give, refuse or withdraw consent;
• Access, correct or request correction of your data;
• Request deletion or restriction of processing;
• Request a copy of your data and object to processing;
• File complaints or lawsuits and claim compensation as provided by law.

To exercise these rights, send a request by email or phone using the details at the end of this page, with your name and the phone number or email you used, so we can verify your identity. We acknowledge requests within 3 working days and handle them within the time limits set by law.

10. How we protect data

• The whole website uses encrypted HTTPS connections.
• The admin area requires login with role-based permissions; passwords are stored as one-way hashes.
• CV files are stored separately with no public link and can only be opened by logged-in administrators.
• Forms are rate-limited and protected by automatic spam filtering.

No system is completely secure. If personal data is leaked or lost, we will remedy the incident and notify the authorities and affected people as required by law.

11. Children

The website is not intended for children under 16 and we do not knowingly collect their data. If we learn that we have received a child’s data without the consent required by law, we will delete it.

12. Cookies

The website only uses cookies that are strictly necessary for our internal admin area. We do not use advertising or tracking cookies. See our Cookie Policy for details.

13. Changes to this policy

We may update this policy when we change how we handle data or when the law changes. The date of the latest update is shown at the top of the page. We will clearly announce important changes on the website.

14. Contact

For any question or request about personal data, please contact AU SUNSHINE using the details at the end of this page.