Information security policy

OSTSOME Vietnam only collects and stores information provided by customers including: Full name, phone number, email address, recipient address.

This information is used for the purposes of order processing, improving service quality, market research, marketing activities, customer care, internal management or as required by law.

Ost Vietnam complies with the Law on Cyber ​​Information Security 2015 No. 86/2015/QH13 (Section 2 Chapter II Ensuring Cyber ​​Information Security Articles 17, 18, 19)

Article 16. Principles of protecting personal information online

1. Individuals protect their personal information and comply with the law on providing personal information when using online services.

2. Agencies, organizations and individuals handling personal information are responsible for ensuring network information security for the information they process.

3. Organizations and individuals handling personal information must develop and publicly announce measures to handle and protect personal information of their organizations and individuals.

4 The protection of personal information is carried out in accordance with the provisions of this Law and other relevant laws.

5. Processing of personal information for the purpose of ensuring national defense, national security, social order and safety or for non-commercial purposes is carried out in accordance with other relevant laws. .

Article 17. Collection and use of personal information

1. Organizations and individuals handling personal information have the following responsibilities:

a) Collect personal information after obtaining the consent of the personal information subject on the scope and purpose of collecting and using that information;

b) Only use collected personal information for purposes other than the original purpose after obtaining the consent of the personal information subject;

c) Do not provide, share, or distribute personal information that you have collected, accessed, or controlled to third parties, except with the consent of the subject of that personal information or upon request. request of a competent state agency.

2. State agencies are responsible for securing and storing personal information they collect.

3. Personal information subjects have the right to request organizations and individuals processing personal information to provide their personal information that that organization or individual has collected and stored.

Article 18. Update, amend and cancel personal information

1. Personal information subjects have the right to request organizations and individuals processing personal information to update, amend and destroy their personal information that that organization or individual has collected and stored. or stop providing your personal information to third parties.

2. Immediately upon receiving a request from the subject of personal information to update, amend, cancel personal information or request to stop providing personal information to third parties, organizations and individuals handle Personal information managers have the following responsibilities:

a) Make requests and notify personal information subjects or provide personal information subjects with access to update, modify, or cancel their personal information;

b) Apply appropriate measures to protect personal information; Notify the subject of personal information in case the request cannot be fulfilled due to technical or other factors.

3. Organizations and individuals handling personal information must destroy stored personal information when the purpose of use has been completed or the storage period expires and notify the subject of personal information. unless otherwise prescribed by law.

Article 19. Ensuring the safety of personal information online

1. Organizations and individuals handling personal information must apply appropriate management and technical measures to protect the personal information they collect and store; Comply with standards and technical regulations on ensuring network information security.

2. When a network information security incident occurs or is at risk of occurring, organizations and individuals handling personal information need to apply remedial and preventive measures as soon as possible.

Subjects accessing customer information:

1. Website administrator

2. Order processing staff

3. Customer service staff

4. Delivery unit

Information storage and security period:

3 years from the date the customer registers the account. After this time, if the customer does not have any interaction with the website, all customer information provided will be automatically deleted by the system.

Ost Vietnam sincerely thanks you for trusting and accompanying us.

Any questions please contact:
Hotline: 028.667.65010
Email: Scavnmarketing@streamcastasia.com