Article 1. Definition of Terms
The terms used in these terms and conditions on personal data protection (hereinafter referred to as the “Terms”) are defined as follows:
1.1. “Data Recipient” or “DripCare” refers to DripCare Cellular Anti-Aging Institute Joint Stock Company.
1.2. “Data Provider” refers to the individual(s) or organization(s) providing personal data to the Data Recipient. In certain cases, the Data Provider may also be the Data Subject.
1.3. “Data Subject” refers to the individual whose Personal Data is reflected.
1.4. “Customer” refers to individuals who use the services provided by DripCare and, at the same time, are the Data Subjects.
1.5. “Personal Data” refers to information in the form of symbols, letters, numbers, images, sounds, or similar formats in an electronic environment associated with or identifying a specific person. Personal data includes basic personal data and sensitive personal data.
1.6. “Basic Data” includes:
a) Surname, middle name, and given name at birth, other names (if any);
b) Date of birth, date of death, or missing;
c) Gender;
d) Place of birth, place of registration of birth, permanent residence, temporary residence, current residence, hometown, contact address;
e) Nationality;
f) Personal image;
g) Phone number, email, ID number, personal identification number, passport number, driver’s license number, vehicle registration number, personal tax code, social insurance number, health insurance card number;
h) Marital status;
i) Information about family relationships (parents, children);
j) Information about personal account numbers; personal data reflecting activities, and activity history in cyberspace;
k) Other information related to or identifying a specific person that is not included in Clause 1.6 of this Article.
1.7. “Sensitive Data” refers to personal data associated with an individual's privacy, which, if violated, will directly affect the individual's legal rights and interests, including:
a) Political views, religious beliefs;
b) Health status and private life as recorded in medical records, excluding blood type information;
c) Information related to racial or ethnic origin;
dd) Information about inherited or acquired genetic characteristics of an individual;
e) Information about the individual’s physical attributes or unique biological traits;
f) Information about the individual’s sexual life or sexual orientation;
g) Information sharing questions, statements, and comments from customers that include some or all of the Customer’s Basic Data, such as name, image, or address;
h) Data about criminal offenses or criminal behavior collected and stored by law enforcement agencies;
i) Information about customers of financial institutions, foreign bank branches, payment intermediary service providers, and other authorized organizations, including customer identification information as regulated by law, account information, deposit information, asset information, transaction information, and information about organizations or individuals acting as guarantors at credit institutions, bank branches, or payment intermediary service providers;
j) Location data of an individual determined through location services;
k) Other personal data specified by law as sensitive and requiring necessary security measures.
1.8. “Personal Data Processing” refers to one or more activities affecting personal data, such as collecting, recording, analyzing, verifying, storing, editing, disclosing, combining, accessing, retrieving, recalling, encrypting, decrypting, copying, sharing, transmitting, providing, transferring, deleting, destroying personal data, or other related actions.
1.9. “Personal Data Processor” may, in certain cases, be DripCare or individuals or organizations acting on behalf of DripCare to process personal data through a contract or agreement with DripCare.
1..10. “Transfer of Personal Data Abroad” refers to the activity of using cyberspace, electronic devices, or other forms to transfer the personal data of Vietnamese citizens to a location outside the territory of the Socialist Republic of Vietnam or using a location outside the territory of the Socialist Republic of Vietnam to process the personal data of Vietnamese citizens.
1.11. “Service” refers to the products and services provided by DripCare to Customers in accordance with the law. The provision of Services to Customers under these Terms is understood to include the provision of Services to individuals or individuals within organizations where the Data Provider is the legal representative, as defined in Clause 1.3 of this Article, regardless of whether the Data Provider—the legal representative—directly uses the Service.
1.12. “Consent” refers to the clear, voluntary, and affirmative expression by the Data Subject granting permission to DripCare to process personal data. Consent from the Data Subject can be expressed in writing, verbally, by ticking a consent box, by using a consent syntax via text message, by selecting technical consent settings, or by another action consistent with legal regulations that indicates this consent.
To clarify, DripCare currently records Customer Consent using the following methods:
a) If the Customer provides their Personal Data through DripCare's online systems and ticks the consent box, the system will automatically send the Customer an email confirming the contents of the Personal Data that the Customer has agreed to allow DripCare to collect and process.
b) If the Customer has provided or will provide Personal Data to DripCare through channels other than DripCare’s online information collection system, DripCare will record the Customer’s Consent by either signing a confirmation document with the Customer or sending a notification to the Customer's email, requesting the Customer’s consent for DripCare to collect and process personal data.
c) In any case, if the Customer receives a notification from DripCare but does not take any action as requested by DripCare to express Consent, and the Customer continues to use DripCare's services, DripCare will consider this as an expression of the Customer's Consent.
Article 2. Application Principles
2.1. The Data Provider is responsible for carefully reading the content of these Terms before expressing Consent. By performing actions to express Consent, the Data Provider confirms that they have read, understood, and fully agreed with the content outlined in these Terms.
If the Data Provider does not perform actions to express Consent, DripCare reserves the right to:
a) Refuse to provide the Service, and/or
b) Unilaterally terminate the Services being provided to the Data Provider and request compensation for damages (if any), if DripCare assesses that the Data Provider's lack of Consent causes or will cause a risk of violating the law and/or damages to DripCare..
2.2. DripCare will only process Personal Data within the scope authorized by the Data Subject.
2.3. DripCare reserves the right to unilaterally modify, supplement, or replace these Terms from time to time to ensure compliance with legal regulations and DripCare’s internal policies. Modifications, supplements, or replacements of these Terms will be determined by DripCare, including but not limited to agreements in writing, electronic agreements, text messages, and/or other legal forms. The Data Provider is responsible for clearly and specifically expressing Consent in accordance with DripCare’s requirements, depending on the form set forth in the amended, supplemented, or replaced terms.
2.4. The Data Provider agrees that these Terms are entered into voluntarily by both parties, without coercion or deceit, and that the content of these Terms is clear, transparent, and in compliance with the law.
ĐiArticle 3. Purpose of Personal Data Processing
DripCare processes Personal Data for the following purposes:
3.1. Ensure the provision of Services to the Data Subject and/or the Data Provider.
3.2. Ensure the operation of our Services in accordance with established internal standards and regulations. This includes, but is not limited to, the following activities:
a) Contacting to confirm the Service when the Data Subject registers to use the Service on the website or application legally owned by DripCare to ensure consumer rights;
b) Processing requests and/or transactions of the Data Subject and/or the Data Provider;
Provide necessary information related to or maintain the provision of services to the Data Subject and/or the Data Provider.
c) Providing necessary information related to or maintaining the provision of the Service to the Data Subject and/or the Data Provider;
d) Personalizing the experience of the Data Subject and/or the Data Provider, such as preferences, favorite services, areas of interest, service recommendations;
e) Sending products or services provided by DripCare that meet the needs or interests of the Data Subject and/or the Data Provider;
f) Investigating or detecting unauthorized, illegal, or abusive use of DripCare’s services, systems, or other materials;
g) Conducting other necessary activities to provide the Service and ensuring that these activities comply with legal regulations.
3.3. To serve the activities of state agencies as prescribed by specialized law related to DripCare’s service provision activities.
3.4. In certain cases related to the use of specific Services and for purposes of using Personal Data not mentioned above and/or requiring the specific consent of the Data Subject, DripCare will request the Data Subject’s Consent for the use of Personal Data, and DripCare will only proceed after receiving such permission.
Article 4. Types of Personal Data Collected by DripCare
DripCare collects Basic Personal Data and Sensitive Personal Data of the Data Subject, including the following types of information:
a) Identification information including but not limited to full name, date of birth, gender, nationality, ID card/personal identification number or passport number, issue date, place of issue, and image of ID card/citizen ID or passport;
b) Contact information such as phone number, email address, residential address, and mailing address;
c) Login credentials such as username, login password, IP address, access logs, online identifiers, device identifiers, and location of the Data Subject;
d) Transaction information including purchase history, transaction value, product/service delivery methods, and payment details;
e) Other necessary information for DripCare to provide services or to fulfill legal rights/obligations under relevant agreements as required by law;
f) During the provision of services to you, DripCare may collect and process additional personal data, depending on your consent or when required or permitted by law.
Article 5. Methods of Personal Data Collection
DripCare collects personal data in various ways, including but not limited to:
5.1. Personal Data provided by the Data Provider
a) The Data Provider provides personal data to DripCare through self-registration, login, or interaction via DripCare's communication channels, including but not limited to the website, social media platforms.
b) Through verbal or written communication between the Data Provider and DripCare and/or DripCare’s authorized representatives.
c) Through participation in transactions, competitions, games, programs, or events organized by DripCare.
d) In cases where the Data Provider is not the Data Subject, the Data Provider must ensure they have obtained full consent and acceptance from the Data Subject as required by law to provide information to DripCare and allow DripCare to process the Personal Data.
5.2. Personal Data automatically collected by DripCare
a) DripCare may automatically collect Personal Data when the Data Subject (i) uses the Services and/or (ii) accesses any website, application legally owned/used by DripCare and/or (iii) uses any features or resources available on the website or application.
b) When the Data Subject uses/accesses DripCare’s services, website, or application, the Data Subject's device and browser may automatically disclose certain information considered as Personal Data, such as IP address, browser type, operating system, location, browsing activity information (Cookies), and other technical communication information.
c) DripCare may collect Personal Data if the information deemed to be Personal Data of the Data Subject is publicly available in the media and accessible by anyone.
5.3. Personal Data collected by DripCare from partners, merchants, and third parties
DripCare may collect Personal Data from partners, merchants, and third parties who have legitimate business relationships with DripCare or are legally permitted to provide the Personal Data of the Data Subject (e.g., organizations or individuals acting as representatives or contact points of the Data Subject, Data Provider, or law enforcement agencies).
5.4. Personal Data collected from other legal sources, in which case DripCare ensures that the data is provided to DripCare in accordance with legal regulations.
Article 6. Withdrawal of Consent, Deletion, Restriction, and Objection to Personal Data Processing
6.1. After expressing Consent to the contents of these Terms, the Data Subject may withdraw, restrict, and/or terminate and/or delete Consent for part or all of the Personal Data Processing activities previously accepted by DripCare.
DripCare will take measures to delete/restrict/terminate the Personal Data Processing within the scope requested by the Data Subject after the Data Subject has fully and correctly followed the procedures to initiate a valid request as stipulated in Clause 6.2 of this Article.
6.2. To withdraw Consent, delete, restrict, or object to Personal Data Processing, the Data Subject may do so through one of the following methods:
(i) Online method
If the Customer previously expressed Consent in the manner specified in Point a, Clause 1.12, Article 1 of these Terms, in the notification email sent by DripCare confirming the Customer's consent, there will be an additional feature allowing the Customer to modify/update/withdraw the consent previously provided to DripCare. After each time the Customer submits a modification/update/withdrawal of consent, DripCare will send a confirmation email.
(ii) Written request
If the Customer does not submit a request to withdraw, restrict, and/or terminate and/or delete Consent via the method outlined in Point (i) Clause 6.2 of Article 6 of these Terms, the Customer may do so by sending a written request to DripCare following DripCare's procedures at the time. The following conditions must also be met:
a) The request must be made by the Data Subject themselves. DripCare does not accept requests for withdrawal of Consent, deletion, restriction, or objection to Personal Data Processing through a representative or proxy, except in cases where representation or proxy is required by law.
b) The Data Subject's request must not be for purposes contrary to legal regulations, including but not limited to causing harm to national defense, national security, or public order.
c) The Data Subject must fully understand and agree to take responsibility for any consequences or damages that may arise due to their request.
d) Other conditions as stipulated by DripCare at any given time.
6.3. DripCare and/or the Personal Data Processor reserves the right to refuse the Data Subject’s request if it does not meet all the conditions stipulated in Clause 6.2 of this Article.
6.4. When the Data Subject withdraws, deletes, restricts, or objects to part or all of the Personal Data Processing, depending on the Data Subject’s specific request, such actions may affect the quality of the Service that DripCare provides to the Data Subject. This includes, but is not limited to, the Service being limited, restricted, or temporarily suspended. In such cases, DripCare will not be liable to the Data Subject for any losses that may arise.
6.5. If the Data Subject's Consent is a prerequisite for DripCare to provide the Service, then upon withdrawal of Consent, DripCare reserves the right to unilaterally terminate the provision of the Service without being considered in breach of the contract or agreement made with the Data Subject.
6.6. The Data Subject’s withdrawal, restriction, and/or termination and/or deletion of Consent for the Personal Data Processing does not affect the legality of DripCare's prior actions.
Article 7. Right to Request Access and Correction of Personal Data
7.1. The Data Subject has the right to request DripCare to provide the Personal Data that DripCare has processed.
7.2. The Data Subject has the right to request DripCare to correct their Personal Data that has been processed by DripCare, as stipulated in Article 6 of these Terms.
7.3. DripCare will correct the data within 1-2 working days from the date of receiving the Data Subject’s request for correction and will notify the Data Subject once the correction is completed.
Article 8. Obligations of the Data Subject
8.1. The Data Subject is responsible for protecting their personal data from being accessed when using shared services with others.
8.2. When the Data Subject provides personal data for DripCare to process under these Terms, the Data Subject is responsible for: (i) ensuring the accuracy of the personal data provided; (ii) promptly notifying DripCare of any changes to the personal data provided; and (iii) complying with all applicable requirements related to the provision of personal data as stipulated by law.
8.3. DripCare may process the Data Subject’s personal data to contact them, primarily via email and sometimes by phone, to share information about DripCare’s products and services that the Data Subject may be interested in. If the Data Subject does not wish to receive such information, they can opt-out at any time by contacting customer care or by selecting to unsubscribe from these emails. After opting out, DripCare will stop sending promotional emails but may continue contacting the Data Subject as necessary to provide the services requested.
The Data Subject agrees not to share payment information with any third parties by any means. DripCare is not responsible for any losses the Data Subject may incur from sharing such information with third parties.
Article 9. Personal Data Processing and Processing Duration
9.1. The Data Provider unconditionally and irrevocably authorizes DripCare to carry out necessary procedures (if any) when processing Personal Data through the Personal Data Processor, including but not limited to signing documents and sending confirmation notices that the Data Provider has consented to the Personal Data Processing.
9.2. DripCare and/or the Personal Data Processor has the right to process Personal Data without the Data Subject’s consent, as permitted by law.
9.3. Depending on specific activities, Personal Data may be processed by DripCare immediately after it is provided or collected and will end when the processing is completed in line with the intended purpose, or until the Data Subject requests the deletion of the Personal Data provided.
Article 10. Personal Data Retention Period
DripCare takes appropriate measures to ensure that the Data Subject’s Personal Data is processed only for the necessary duration to meet the purposes outlined in these Terms (including allowing DripCare to provide the services requested by the Data Subject) or as required by law, whichever is longer.
The Data Subject’s Personal Data retained by DripCare will be kept confidential. DripCare will apply reasonable measures to protect the Data Subject’s Personal Data. As permitted by law, DripCare may store Personal Data within Vietnam or abroad.
Article 11. Transfer of Personal Data Abroad
To fulfill the purposes of personal data processing as agreed with the User in these Terms and other agreements made with the Data Subject, DripCare may need to share or transfer the Data Subject’s Personal Data abroad, in accordance with DripCare’s policies and legal regulations.
Article 12. Contact Information
If the Data Subject has any questions regarding these Terms, please contact us using the following information:
133
Useful article?
Useful article?
133
Useful article?
Copyright @
2025 DripCare.
All rights reserved
