{
    "id": 1666,
    "date": "2025-11-19T12:38:34",
    "date_gmt": "2025-11-19T05:38:34",
    "guid": {
        "rendered": "https:\/\/dulcedesaigon.com\/?page_id=1666"
    },
    "modified": "2026-06-15T14:36:03",
    "modified_gmt": "2026-06-15T07:36:03",
    "slug": "data-storage-policy",
    "status": "publish",
    "type": "page",
    "link": "https:\/\/dulcedesaigon.com\/en\/data-storage-policy\/",
    "title": {
        "rendered": "Data Storage Policy"
    },
    "content": {
        "rendered": "<div data-elementor-type=\"wp-page\" data-elementor-id=\"1666\" class=\"elementor elementor-1666\" data-elementor-post-type=\"page\">\n\t\t\t\t<div data-particle_enable=\"false\" data-particle-mobile-disabled=\"false\" class=\"elementor-element elementor-element-f857bb4 e-flex e-con-boxed e-con e-parent\" data-id=\"f857bb4\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t\t\t<div class=\"elementor-element elementor-element-0150f7f elementor-widget elementor-widget-text-editor\" data-id=\"0150f7f\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t\t\t\t\t\t<p><em>Last updated: 15\/06\/2026<\/em><\/p><h2>1. Introduction<\/h2><p>This Data Storage Policy explains how Dulce de Saigon (\u201cwe\u201d, \u201cus\u201d, or \u201cour\u201d) collects, stores, protects, and manages customers\u2019 personal data when they visit <a href=\"https:\/\/dulcedesaigon.com\/en\/\">https:\/\/dulcedesaigon.com<\/a>, place an order, contact us, or use related services.<\/p><p>This policy is prepared with reference to Vietnamese personal data protection regulations, including Decree No. 13\/2023\/ND-CP on Personal Data Protection and other applicable laws and regulations.<\/p><p>We are committed to collecting and storing only the data necessary for reasonable, transparent, and legitimate business purposes related to Dulce de Saigon\u2019s operations.<\/p><h2>2. Data we may store<\/h2><p>Depending on how you interact with our website or services, we may store the following categories of data:<\/p><h3>2.1 Customer information<\/h3><ul><li>Full name;<\/li><li>Phone number;<\/li><li>Email address;<\/li><li>Delivery address or pickup\/delivery area;<\/li><li>Requests or messages you send to us;<\/li><li>Order history, where applicable;<\/li><li>Information related to customer support.<\/li><\/ul><h3>2.2 Order and payment information<\/h3><ul><li>Products ordered;<\/li><li>Order value;<\/li><li>Order date and time;<\/li><li>Order status;<\/li><li>Payment method;<\/li><li>Delivery information.<\/li><\/ul><p>We do not intentionally store full payment card details on the website. Payment transactions, where applicable, are processed through POS systems, banks, e-wallets, or relevant payment service providers.<\/p><h3>2.3 Website and cookie data<\/h3><p>When you visit our website, certain technical data may be collected through cookies or similar technologies, such as:<\/p><ul><li>IP address;<\/li><li>Browser and device type;<\/li><li>Display language;<\/li><li>Pages visited;<\/li><li>Traffic source;<\/li><li>Basic website interaction data.<\/li><\/ul><p>The use of cookies is described in more detail in our Cookie Policy.<\/p><h3>2.4 Business operation data<\/h3><p>We may also store certain data for internal business operations, including:<\/p><ul><li>Sales records;<\/li><li>Inventory data;<\/li><li>Supplier information;<\/li><li>Accounting data;<\/li><li>Business and marketing performance analysis data.<\/li><\/ul><h2>3. Purposes of data storage<\/h2><p>We store data for the following purposes:<\/p><ul><li>Processing customer orders and requests;<\/li><li>Delivering orders or supporting delivery through partners;<\/li><li>Contacting and supporting customers;<\/li><li>Managing payments, invoices, and accounting records;<\/li><li>Improving our website, products, and services;<\/li><li>Analyzing business and marketing performance;<\/li><li>Protecting system security and preventing fraud;<\/li><li>Complying with legal, accounting, tax, and regulatory requirements.<\/li><\/ul><p>We do not sell customers\u2019 personal data.<\/p><h2>4. Systems and storage locations<\/h2><p>Data may be stored on the following systems:<\/p><h3>4.1 Website system<\/h3><p>Some data may be stored on the website or website administration system, such as contact data, technical data, cookies, or data related to user interactions with the website.<\/p><h3>4.2 Google Workspace and cloud storage tools<\/h3><p>We may use Google Drive, Google Sheets, Gmail, or other Google Workspace tools to manage operational data, orders, reports, or contact information.<\/p><h3>4.3 POS \/ ordering systems<\/h3><p>We may use POS systems or ordering systems to process orders, payments, sales reports, and business operations.<\/p><h3>4.4 Delivery, ordering, and payment partners<\/h3><p>When you place an order or make a payment through a third party, certain data may be processed by partners such as delivery platforms, ordering platforms, e-wallets, banks, or payment service providers.<\/p><p>These third parties have their own privacy and data storage policies.<\/p><h2>5. Data retention period<\/h2><p>We store data only for as long as necessary for the relevant processing purposes, unless a longer retention period is required or permitted by law.<\/p><p>Indicative retention periods are as follows:<\/p><table><thead><tr><th>Type of data<\/th><th>Expected retention period<\/th><th>Purpose<\/th><\/tr><\/thead><tbody><tr><td>Customer contact information<\/td><td>Until the request is completed or for as long as necessary for customer support<\/td><td>Contact and customer support<\/td><\/tr><tr><td>Order data<\/td><td>Up to 5 years or as required by law<\/td><td>Order management, reconciliation, tax, and accounting<\/td><\/tr><tr><td>Accounting records, invoices, and supporting documents<\/td><td>According to accounting and tax law requirements<\/td><td>Legal compliance<\/td><\/tr><tr><td>Payment data<\/td><td>According to the rules of banks, e-wallets, or payment providers<\/td><td>Transaction processing and reconciliation<\/td><\/tr><tr><td>Marketing consent<\/td><td>Until you withdraw your consent or unsubscribe<\/td><td>Managing marketing preferences<\/td><\/tr><tr><td>Cookie and website analytics data<\/td><td>According to our Cookie Policy and each tool\u2019s settings<\/td><td>Website analytics and performance measurement<\/td><\/tr><tr><td>Backup data<\/td><td>According to internal backup cycles<\/td><td>System recovery when needed<\/td><\/tr><\/tbody><\/table><p>When data is no longer necessary, or when we receive a valid request from you, we will delete, anonymize, or restrict the processing of data in accordance with applicable law and technical feasibility.<\/p><h2>6. Third-party services<\/h2><p>We may use third-party services to operate our website and business activities, including but not limited to:<\/p><ul><li>Google Workspace;<\/li><li>Google Analytics;<\/li><li>Google Tag Manager;<\/li><li>Google Ads or Google conversion tracking tools;<\/li><li>Google Maps;<\/li><li>Google Fonts;<\/li><li>Facebook \/ Meta;<\/li><li>Instagram;<\/li><li>TikTok;<\/li><li>POS systems or ordering platforms;<\/li><li>GrabFood, ShopeeFood, or other delivery platforms where used;<\/li><li>Banks, e-wallets, or payment service providers;<\/li><li>Hosting, security, backup, and website optimization providers.<\/li><\/ul><p>These third parties should only process data for purposes related to the services they provide. We aim to select service providers that apply appropriate security measures and maintain clear data processing policies.<\/p><h2>7. Cross-border data transfer<\/h2><p>Some third-party services, especially cloud, analytics, marketing, or international platform services, may process or store data outside Vietnam.<\/p><p>Where such transfer or processing outside Vietnam occurs, we aim to apply appropriate safeguards in accordance with applicable Vietnamese personal data protection requirements.<\/p><h2>8. Data protection measures<\/h2><p>We apply reasonable measures to protect personal data, including:<\/p><ul><li>Using strong passwords for administrative accounts;<\/li><li>Limiting data access to authorized personnel;<\/li><li>Using two-factor authentication where possible;<\/li><li>Keeping website software, plugins, and related systems up to date;<\/li><li>Performing regular data backups;<\/li><li>Using secure HTTPS connections;<\/li><li>Monitoring and addressing security risks when detected;<\/li><li>Providing guidance or training to staff on the protection of customer data.<\/li><\/ul><h2>9. Data backups<\/h2><p>To ensure business continuity and recovery in case of incidents, we may perform data backups through:<\/p><ul><li>Website or hosting backup systems;<\/li><li>Google Drive or cloud storage tools;<\/li><li>POS systems or sales software;<\/li><li>Password-protected internal copies where necessary.<\/li><\/ul><p>Backup data is mainly used for system recovery, reconciliation, or ensuring business continuity.<\/p><h2>10. Your rights<\/h2><p>Under personal data protection regulations, you may have rights relating to your personal data, including:<\/p><ul><li>The right to be informed about personal data processing activities;<\/li><li>The right to request access to your personal data;<\/li><li>The right to request correction or updating of inaccurate data;<\/li><li>The right to withdraw consent for processing activities based on consent;<\/li><li>The right to request deletion, restriction of processing, or objection to processing within the limits permitted by law;<\/li><li>The right to stop receiving marketing communications;<\/li><li>The right to complain or contact a competent authority if you believe your data is processed improperly.<\/li><\/ul><p>To exercise these rights, please contact us using the contact details provided in the \u201cContact\u201d section below.<\/p><h2>11. Data incident response<\/h2><p>If we detect an incident that may affect personal data, we will take appropriate steps, including:<\/p><ol><li>Identifying and isolating the incident;<\/li><li>Securing the system and limiting further damage;<\/li><li>Assessing the type of data and number of users that may be affected;<\/li><li>Notifying the competent authority within the legally required timeframe if the incident is subject to notification;<\/li><li>Notifying affected customers where necessary;<\/li><li>Recording, reviewing, and improving protection measures to reduce the risk of similar incidents.<\/li><\/ol><h2>12. Updates to this policy<\/h2><p>We may update this Data Storage Policy when:<\/p><ul><li>There are changes to the website, storage systems, or service providers;<\/li><li>There are changes in how we collect, store, or process data;<\/li><li>There are changes in applicable legal requirements;<\/li><li>We improve our security and data management processes.<\/li><\/ul><p>The latest version of this policy will always be published on this page.<\/p><h2>13. Contact<\/h2><p>If you have any questions about this Data Storage Policy or wish to exercise your rights relating to your personal data, please contact us:<\/p><ul><li>Dulce de Saigon<\/li><li>Contact person: Jamie, Owner<\/li><li>Current address: 382\/15 Nguyen Thi Minh Khai Street, Ban Co Ward, Ho Chi Minh City, Vietnam<\/li><li>Previous reference address: 382\/15 Nguyen Thi Minh Khai Street, Ward 5, District 3, Ho Chi Minh City, Vietnam<\/li><li>Website: <a href=\"https:\/\/dulcedesaigon.com\/en\/\">https:\/\/dulcedesaigon.com<\/a><\/li><li>Email: hello@dulcedesaigon.com<\/li><li>Phone: +84 903 305 993<\/li><\/ul><p>We will make reasonable efforts to respond to valid requests within an appropriate timeframe and in accordance with applicable law.<\/p><h2>14. Legal compliance<\/h2><p>This policy is prepared with reference to relevant Vietnamese laws and regulations, including:<\/p><ul><li>Decree No. 13\/2023\/ND-CP on Personal Data Protection;<\/li><li>Personal Data Protection Law No. 91\/2025\/QH15, when effective;<\/li><li>Law on Cybersecurity No. 24\/2018\/QH14;<\/li><li>Law on Electronic Transactions No. 20\/2023\/QH15;<\/li><li>Relevant accounting, tax, e-commerce, payment, and anti-spam regulations where applicable.<\/li><\/ul><h2>15. Language<\/h2><p>This policy may be provided in both Vietnamese and English. In case of any discrepancy between the two versions, the Vietnamese version shall prevail.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>",
        "protected": false
    },
    "excerpt": {
        "rendered": "<p>Last updated: 15\/06\/2026 1. Introduction This Data Storage Policy explains how Dulce de Saigon (\u201cwe\u201d, \u201cus\u201d, or \u201cour\u201d) collects, stores, protects, and manages customers\u2019 personal data when they visit https:\/\/dulcedesaigon.com, place an order, contact us, or use related services. This policy is prepared with reference to Vietnamese personal data protection regulations, including Decree No. 13\/2023\/ND-CP [&hellip;]<\/p>",
        "protected": false
    },
    "author": 1,
    "featured_media": 0,
    "parent": 0,
    "menu_order": 0,
    "comment_status": "closed",
    "ping_status": "closed",
    "template": "",
    "meta": {
        "_angie_page": false,
        "ai_generated_summary": "",
        "rank_math_title": "Data Storage Policy \u2014 Dulce de Saigon",
        "rank_math_description": "Dulce de Saigon's data storage policy explains how customer data is stored and protected in line with Decree No. 13\/2023\/ND-CP (PDPD).",
        "rank_math_focus_keyword": "",
        "footnotes": ""
    },
    "class_list": [
        "post-1666",
        "page",
        "type-page",
        "status-publish",
        "hentry"
    ],
    "_links": {
        "self": [
            {
                "href": "https:\/\/dulcedesaigon.com\/en\/wp-json\/wp\/v2\/pages\/1666",
                "targetHints": {
                    "allow": [
                        "GET"
                    ]
                }
            }
        ],
        "collection": [
            {
                "href": "https:\/\/dulcedesaigon.com\/en\/wp-json\/wp\/v2\/pages"
            }
        ],
        "about": [
            {
                "href": "https:\/\/dulcedesaigon.com\/en\/wp-json\/wp\/v2\/types\/page"
            }
        ],
        "author": [
            {
                "embeddable": true,
                "href": "https:\/\/dulcedesaigon.com\/en\/wp-json\/wp\/v2\/users\/1"
            }
        ],
        "replies": [
            {
                "embeddable": true,
                "href": "https:\/\/dulcedesaigon.com\/en\/wp-json\/wp\/v2\/comments?post=1666"
            }
        ],
        "version-history": [
            {
                "count": 0,
                "href": "https:\/\/dulcedesaigon.com\/en\/wp-json\/wp\/v2\/pages\/1666\/revisions"
            }
        ],
        "wp:attachment": [
            {
                "href": "https:\/\/dulcedesaigon.com\/en\/wp-json\/wp\/v2\/media?parent=1666"
            }
        ],
        "curies": [
            {
                "name": "wp",
                "href": "https:\/\/api.w.org\/{rel}",
                "templated": true
            }
        ]
    }
}