When customers use services, access the website/application, or interact through TIXIMAX’s affiliated platforms, users agree to allow TIXIMAX to collect, process, and store personal information in accordance with Decree No. 13/2023/ND-CP on personal data protection and relevant legal regulations.

Data after being processed, summarized, statisticalized, and analyzed on TIXIMAX’s system will become the business’s property. This data serves research, development, and service quality improvement without the purpose of identifying specific individuals.

2.1. Types of information collected

• Identifiers: Full name, date of birth, phone number, email, residential address, ID/Citizenship card/Passport, personal image.
• Financial information: Bank account, tax identification number, payment data, invoices.
• Behavioral data: Order history, website/app access, activities on affiliated platforms.
• Device information: IP address, device ID, operating system, browser, mobile device type, cookies, location data.
• Sensitive information (if any): Images on personal documents, biometric data, location coordinates, account status.

2.2. Collection methods

• Via registration, order, and payment forms.
• Via direct interaction (calls, emails, live chat, support requests).
• Via applications, cookies, and user behavior tracking systems on the website.
• Via integrated partners (if you log in through Google, Facebook, etc.).

2.3. Data provider’s responsibility
Users must ensure provided data is accurate and legal. If providing information for someone else, you must ensure valid consent. TIXIMAX will not be responsible for disputes arising from inaccurate data or lack of permission.

• Identity verification, account creation and management.
• Executing transactions, processing orders, providing shipping and purchasing services.
• Customer care, feedback resolution, technical support.
• Enhancing quality, optimizing experience, researching user behavior.
• Marketing communications: sending offers, promotional notifications (opt-out available).
• Legal compliance: fraud investigation, protecting the legitimate interests of TIXIMAX and customers.
• Resolving disputes, complaints, or requests from competent state agencies.

TIXIMAX does not intentionally collect information from children under 16. If it occurs (e.g., recipient information), we only process it with valid guardian consent and ensure the child’s rights are protected.

To effectively implement the privacy policy, TIXIMAX applies technical and organizational measures as follows:

• High-security storage systems, encryption of sensitive data.
• Internal access authorization, strict activity monitoring.
• Personnel training on personal information protection.
• Confidentiality agreements with third parties when sharing data.

Data is shared only in the following cases:

• With customer consent.
• When necessary to provide services (e.g., sharing addresses with shipping providers).
• When requested by state agencies as required by law.

TIXIMAX stores personal data until:

• The purpose of collection is completed.
• Users request valid data deletion.
• No legal obligation requires retention.
• After that time, data will be permanently deleted or anonymized from the system.

7.1. Rights:

• Request access, update, correction, or deletion of personal data.
• Withdraw consent for data processing.
• Request restriction or object to data processing with legal grounds.
• File a complaint if data is used improperly or non-transparently.

7.2. Obligations:

• Provide honest and accurate information.
• Do not share other’s data without valid permission.
• Comply with Tiximax’s privacy policy and current legal regulations.