Privacy Policy

VinaPouches (vinapouches.vn) is the online retailer that decides what personal data this website collects and for what purpose. Every question or request about your data goes to contact@vinapouches.vn, and we answer from that same address.

VinaPouches collects only what an order or a message actually needs. There is no account system on this site, no customer profile, and no data bought in from anyone else. Four things are collected.

• Orders. Your name, email address, phone number and delivery address, together with what you bought, what it cost and the order reference. Province and postal code are optional fields you may leave blank.
• Contact form. Your name, email address and the message you write. Used to answer you and for nothing else.
• Launch list. If you enter your email address in the pre-launch banner, we store that address, the language you were browsing in, and the fact that it came from the banner.
• Technical data. Your IP address and browser user-agent string reach our servers with every request, as they do on any website. We use them to serve the page, to rate-limit the contact form, and to block abusive traffic.

VinaPouches sets three cookies of its own. None of them carries your name, your address, or any identifier we could trade. All three are written in your browser rather than by the server, which is why scripts on this site can read them.

Google Analytics 4 is the only measurement tool running on this site today. Its script is not requested until the vp_consent cookie records an analytics choice, so the tag is absent from the page rather than merely idle. GA4 receives page paths, page titles, product and cart events, and a randomly generated Google client id. It does not receive your name, email address, phone number or delivery address.

A Meta (Facebook) Pixel id is provisioned for this site and Meta domains are allowed by our content security policy, but as at the date shown above no Meta script is loaded on any page and nothing is sent to Meta. If we switch the pixel on, it will sit behind the same consent cookie and this page will be updated before it goes live.

One event is sent by our server rather than by your browser. When an order is placed, our backend posts the order reference, order value, currency, delivery cost and the items to Google Analytics through its Measurement Protocol, together with the Google client id your browser stored on the cart. No name, email address, phone number or address is included in that call.

Analytics load only when the vp_consent cookie records analytics as accepted; without that cookie the Google tag is never requested. You should know exactly how the cookie gets written. On a first visit VinaPouches writes it with analytics and marketing accepted and shows you the cookie notice at the same moment, so on that first page view the preference is set for you rather than chosen by you.

You can change it at any time. Clear the vp_consent cookie in your browser settings and the Google tag stops being requested, or email contact@vinapouches.vn and we will record your choice and confirm it in writing.

Order data is processed because it is the only way the thing you bought can reach you: a courier cannot deliver to a name and address we do not hold. Contact-form data is processed because you sent us a message and want an answer. Launch-list and analytics data are processed on the basis of your consent, which you can withdraw. VinaPouches does not sell personal data, does not share it for anybody else advertising to you, and does not use it for automated decision-making or behavioural profiling.

VinaPouches is a small operation and uses outside services to run the site and deliver orders. Each one is named below, with what it actually touches and where its infrastructure sits.

Assume your order data is stored outside Vietnam. Our commerce server and its database are hosted in Singapore, the storefront runs on infrastructure operated from the United States, and Google Analytics processes data on Google global infrastructure. Delivery couriers are the exception, being Vietnamese companies operating inside the country.

Decree 13/2023/ND-CP treats moving the personal data of Vietnamese citizens abroad as a cross-border transfer with its own dossier and assessment requirements. That obligation falls on us as the operator. This paragraph exists so that you know where your data physically sits before you place an order.

VinaPouches takes cash on delivery only. You pay the courier in cash when the parcel reaches you. No card number, no CVV, no bank account number and no e-wallet credential is ever entered on this site, transmitted by it, or stored in any system of ours. The only money-related field we hold is the amount the courier is due to collect.

Cart data is discarded when the cart expires. The vp_cart_id and vp_age_verified cookies expire after 30 days, vp_consent after 12 months. Contact-form messages are kept for 12 months and then deleted. Launch-list addresses are kept until you ask us to remove them.

Order records, meaning name, address, phone number, email address, items and totals, are kept for as long as we may need them for returns and complaints, and after that for the period a Vietnamese business must retain accounting and tax records. Ask us and we will tell you the period applying to your specific order.

Decree 13/2023/ND-CP on Personal Data Protection, dated 17 April 2023 and in force from 1 July 2023, lists the rights a data subject holds over their own personal data. As that decree sets them out, they are:

1. To know how your personal data is being processed, except where the law provides otherwise.
2. To give consent, to refuse it, and to withdraw consent you have already given.
3. To access the data held about you and to ask for a copy of it.
4. To have inaccurate data corrected, or to correct it yourself.
5. To have your data deleted, and to ask that its processing be restricted.
6. To object to the processing, including where the purpose is advertising or marketing.
7. To complain, to denounce, and to bring a claim in accordance with the law.
8. To claim compensation for damage caused by a violation of the rules on your personal data.
9. To protect yourself, including by asking a competent authority or a court to require that processing stop.

To exercise any of these, email contact@vinapouches.vn from the address used on the order, or quote the order reference if you ordered cash on delivery without one. We respond within 72 hours of receiving the request, and there is no charge. If we cannot establish that you are the person the data belongs to, we will refuse the request, and that refusal protects you.

Vietnamese personal data rules are changing. This page names the instrument it was written against and the date it was last reviewed. When the published text changes, this page is updated and re-dated.

This is an 18+ site. VinaPouches does not knowingly collect personal data from anyone under 18. The age gate asks you to confirm your age before you can browse, and an order that fails an age check is cancelled. If you believe someone under 18 has given us their data, email contact@vinapouches.vn and we will delete it.

The site is served over HTTPS only, under a content security policy that restricts which scripts a page may load. The commerce database sits on a private server rather than a shared platform and is reachable only through the API it exposes. The contact form is rate-limited per IP address, and its handler deliberately logs the size and timestamp of a message and never the message body, your name or your email address.

No system is immune to a breach. If one affects your data, we will tell you what happened, what was involved, and what we did about it.

The date at the top of this page is the date the text was last reviewed against how the site actually works and against the published rules it names. When either changes, the text and that date change with it. Material changes, meaning a new processor, a new category of data or a new purpose, are announced on the site before they take effect.

Questions about anything on this page, or a request about your own data: contact@vinapouches.vn. Write in Vietnamese or English; both are read.