THE WHITE

Privacy Policy

GDPR Compliant & Vietnam Data Protection Law

Last updated: 15/04/2026

1. Introduction

TheWhite is committed to protecting your privacy and personal data in accordance with the GDPR (General Data Protection Regulation) and Vietnamese law. This policy explains how we collect, use, store, and protect your personal information when using TheWhite's website and services.

2. Information We Collect

Information you provide: • Name, email address, phone number • Shipping and billing address • Account information (username, encrypted password) • Order information and purchase history • Feedback, product reviews Information automatically collected: • IP address, browser type, operating system • Cookies and similar tracking technologies • Website usage data (pages viewed, access time) • Analytics data from Google Analytics Legal basis: • Performance of a sales contract • Legitimate business interests • Your consent

3. Purpose of Data Usage

We use your data to: ✓ Process and deliver orders ✓ Send order confirmations and shipping updates ✓ Provide customer service ✓ Process payments (via secure payment partners) ✓ Improve user experience and personalize content ✓ Send promotional information (only with your consent) ✓ Analyze and research the market ✓ Detect and prevent fraud ✓ Comply with legal obligations

4. Data Security

Security measures: • SSL/TLS encryption for all data transmission • Password storage hashed with bcrypt • Firewall and intrusion detection systems • Role-based access control • Periodic data backup and encryption • Employee training on information security Retention period: • Account data: Until you request deletion • Order data: 5 years (accounting legal requirement) • Marketing data: 2 years or until opt-out • Cookies: Varies (session or 1-12 months)

5. Data Sharing

We only share data with trusted third parties: Service partners: • Shipping units (Giao Hàng Nhanh, Viettel Post) • Payment gateways (VNPay, MoMo - PCI DSS compliant) • Email marketing services (only with your consent) • Google Analytics (anonymized data) Legal requirements: • When ordered by competent authorities • To protect the rights and safety of TheWhite and customers We do NOT sell or rent your personal data.

6. Your Rights Under GDPR

You have the following rights: Right of access: Request a copy of your personal data Right to rectification: Update inaccurate information Right to erasure ("Right to be Forgotten"): Request deletion of your data Right to restrict processing: Pause data processing in specific cases Right to data portability: Receive data in a readable format Right to object: Refuse data processing for marketing purposes Right to withdraw consent: Cancel consent given at any time How to exercise rights: 📧 Email: contact@thewhite.cool 📞 Hotline: +84 886 402 616 ⏱️ Response time: 30 days

7. International Data Transfer

Some of our partners may be located overseas (e.g., AWS servers in Singapore). We ensure all data transfers comply with GDPR through: • Standard Contractual Clauses (SCC) approved by the EU • Partners certified with ISO 27001 • Full data protection agreements

8. Children's Privacy

Our website is not intended for children under 16. We do not knowingly collect personal data from children. If you are a parent and discover your child has provided information, please contact us immediately to delete the data.

9. Policy Changes

We may update this policy periodically. Significant changes will be notified via: • Email to registered address • Prominent notice on the website • Popup notice upon login Continued use of the service after changes implies acceptance of the new policy.

10. Contact - Data Protection Officer

If you have any questions about the privacy policy or wish to exercise your rights, please contact our Data Protection Officer (DPO):

Company: The White Active

Email: contact@thewhite.cool

Hotline: +84 886 402 616

Website: thewhite.cool

You also have the right to lodge a complaint with the competent Data Protection Authority if you believe your rights have been violated.

Back to Home