{ "id": 1666, "date": "2025-11-19T12:38:34", "date_gmt": "2025-11-19T05:38:34", "guid": { "rendered": "https:\/\/dulcedesaigon.com\/?page_id=1666" }, "modified": "2025-12-07T00:39:59", "modified_gmt": "2025-12-06T17:39:59", "slug": "data-storage-policy", "status": "publish", "type": "page", "link": "https:\/\/dulcedesaigon.com\/en\/data-storage-policy\/", "title": { "rendered": "Data Storage Policy" }, "content": { "rendered": "
\n\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

1. Introduction<\/h2>

This Data Storage Policy explains how Dulce de Saigon stores and protects customer data. As a small business, we use standard industry tools and follow Vietnamese data protection laws, including Decree No. 13\/2023\/ND-CP (PDPD).<\/p>

2. How We Store Your Data<\/h2>

2.1 Our Storage Systems<\/h3>

We use a combination of:<\/p>

  • Local Servers<\/strong>: Password-protected servers at our business location<\/li>
  • Google Cloud Services<\/strong>: Google Drive, Google Sheets, and other Google Workspace tools<\/li>
  • Fabi POS System<\/strong>: Our point-of-sale system that complies with local regulations<\/li><\/ul>

    2.2 Data Security<\/h3>

    We protect your data through:<\/p>

    • Strong, unique passwords on all systems<\/li>
    • Google’s built-in security features (two-factor authentication enabled)<\/li>
    • Regular password updates<\/li>
    • Limited access (only business owner and authorized staff)<\/li>
    • Secure internet connections<\/li><\/ul>

      3. What Data We Store<\/h2>

      3.1 Customer Information<\/h3>
      • Names and contact details<\/li>
      • Order history<\/li>
      • Delivery addresses<\/li>
      • Payment records (processed securely through POS)<\/li><\/ul>

        3.2 Business Operations<\/h3>
        • Sales records<\/li>
        • Inventory data<\/li>
        • Supplier information<\/li>
        • Marketing analytics<\/li><\/ul>

          4. Data Retention Periods<\/h2>

          We keep data according to Vietnamese law:<\/p>
          Data Type<\/th>How Long We Keep It<\/th>Why<\/th><\/tr><\/thead>
          Customer orders<\/td>5 years<\/td>Business records and tax requirements<\/td><\/tr>
          Accounting records<\/td>10 years<\/td>Vietnamese accounting law<\/td><\/tr>
          Payment records<\/td>5 years<\/td>Banking regulations<\/td><\/tr>
          Marketing consent<\/td>Until you unsubscribe<\/td>PDPD requirements<\/td><\/tr>
          Website cookies<\/td>Up to 25 months<\/td>Standard analytics<\/td><\/tr><\/tbody><\/table>

          5. Where Your Data is Located<\/h2>
          • Primary Storage<\/strong>: Vietnam (local servers and Google’s systems)<\/li>
          • Google Services<\/strong>: May process data internationally but we maintain control<\/li>
          • Payment Processing<\/strong>: Through Vietnamese-registered payment providers<\/li><\/ul>

            We ensure Vietnamese citizen data protection requirements are met through our service providers’ compliance programs.<\/p>

            6. Third-Party Services We Use<\/h2>

            6.1 Business Partners<\/h3>
            • Fabi POS<\/strong>: Order and payment processing<\/li>
            • GrabFood\/ShopeeFood<\/strong>: Delivery orders<\/li>
            • Google Workspace<\/strong>: Business operations and data storage<\/li>
            • Local Banks<\/strong>: Payment processing<\/li><\/ul>

              6.2 Their Responsibilities<\/h3>

              All our partners:<\/p>

              • Follow Vietnamese data protection laws<\/li>
              • Have their own security measures<\/li>
              • Process data only for specified purposes<\/li><\/ul>

                7. Data Backup<\/h2>
                • Automatic Backups<\/strong>: Google Drive automatically backs up our data<\/li>
                • POS Backups<\/strong>: Daily through Fabi system<\/li>
                • Local Copies<\/strong>: Important records kept on password-protected local drives<\/li><\/ul>

                  8. Your Rights<\/h2>

                  You can request to:<\/p>

                  • See what data we have about you<\/li>
                  • Correct any mistakes<\/li>
                  • Delete your data (where legally allowed)<\/li>
                  • Stop receiving marketing messages<\/li><\/ul>

                    To exercise these rights, contact us directly.<\/p>

                    9. Data Protection Measures<\/h2>

                    9.1 What We Do<\/h3>
                    • Use strong passwords (minimum 12 characters, mixed characters)<\/li>
                    • Enable two-factor authentication on Google accounts<\/li>
                    • Limit access to customer data<\/li>
                    • Train staff on data protection<\/li>
                    • Keep software updated<\/li><\/ul>

                      9.2 Google’s Security<\/h3>

                      We rely on Google’s enterprise-level security:<\/p>

                      • Encryption in transit and at rest<\/li>
                      • Regular security audits<\/li>
                      • Compliance with international standards<\/li>
                      • 24\/7 monitoring<\/li><\/ul>

                        10. If Something Goes Wrong<\/h2>

                        10.1 Data Breach Response<\/h3>

                        If a data breach occurs:<\/p>

                        1. We secure our systems immediately<\/li>
                        2. Notify authorities within 72 hours (as required by law)<\/li>
                        3. Contact affected customers if there’s high risk<\/li>
                        4. Document and learn from the incident<\/li><\/ol>

                          10.2 Your Protection<\/h3>
                          • We don’t store unnecessary sensitive data<\/li>
                          • Payment card details are processed through secure POS, not stored<\/li>
                          • Personal data is kept separate from public information<\/li><\/ul>

                            11. International Data Transfers<\/h2>

                            When using Google services:<\/p>

                            • Data may be processed internationally<\/li>
                            • Google provides appropriate safeguards<\/li>
                            • We maintain control over your data<\/li>
                            • You can request information about transfers<\/li><\/ul>

                              12. Updates to This Policy<\/h2>

                              We review this policy annually and update it when:<\/p>

                              • Laws change<\/li>
                              • We add new services<\/li>
                              • We improve our security<\/li><\/ul>

                                Updates will be posted on our website.<\/p>

                                13. Contact Us<\/h2>

                                For questions about how we store your data:<\/p>

                                Dulce de Saigon<\/strong>
                                Contact: Jamie (Owner)
                                Email: [Your email]
                                Phone: [Your phone]
                                Address: [Your address], District 3, Ho Chi Minh City<\/p>

                                We’ll respond within 72 hours to any data protection inquiries.<\/p>

                                14. Legal Compliance<\/h2>

                                This policy complies with:<\/p>

                                • Decree No. 13\/2023\/ND-CP on Personal Data Protection<\/li>
                                • Vietnamese Cybersecurity Law<\/li>
                                • Relevant banking and commerce regulations<\/li><\/ul>

                                  We work with our service providers to ensure ongoing compliance.<\/p>

                                  Note<\/strong>: This policy reflects our actual data storage practices as a small business using standard commercial tools. We are committed to protecting your data while operating efficiently.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>", "protected": false }, "excerpt": { "rendered": "

                                  1. Introduction This Data Storage Policy explains how Dulce de Saigon stores and protects customer data. As a small business, we use standard industry tools and follow Vietnamese data protection laws, including Decree No. 13\/2023\/ND-CP (PDPD). 2. How We Store Your Data 2.1 Our Storage Systems We use a combination of: Local Servers: Password-protected servers […]<\/p>", "protected": false }, "author": 1, "featured_media": 0, "parent": 0, "menu_order": 0, "comment_status": "closed", "ping_status": "closed", "template": "", "meta": { "_angie_page": false, "footnotes": "" }, "class_list": [ "post-1666", "page", "type-page", "status-publish", "hentry" ], "_links": { "self": [ { "href": "https:\/\/dulcedesaigon.com\/en\/wp-json\/wp\/v2\/pages\/1666", "targetHints": { "allow": [ "GET" ] } } ], "collection": [ { "href": "https:\/\/dulcedesaigon.com\/en\/wp-json\/wp\/v2\/pages" } ], "about": [ { "href": "https:\/\/dulcedesaigon.com\/en\/wp-json\/wp\/v2\/types\/page" } ], "author": [ { "embeddable": true, "href": "https:\/\/dulcedesaigon.com\/en\/wp-json\/wp\/v2\/users\/1" } ], "replies": [ { "embeddable": true, "href": "https:\/\/dulcedesaigon.com\/en\/wp-json\/wp\/v2\/comments?post=1666" } ], "version-history": [ { "count": 4, "href": "https:\/\/dulcedesaigon.com\/en\/wp-json\/wp\/v2\/pages\/1666\/revisions" } ], "predecessor-version": [ { "id": 1670, "href": "https:\/\/dulcedesaigon.com\/en\/wp-json\/wp\/v2\/pages\/1666\/revisions\/1670" } ], "wp:attachment": [ { "href": "https:\/\/dulcedesaigon.com\/en\/wp-json\/wp\/v2\/media?parent=1666" } ], "curies": [ { "name": "wp", "href": "https:\/\/api.w.org\/{rel}", "templated": true } ] } }