Privacy Policy

This policy explains how we collect, use, store and protect your information. Please read it carefully before giving us information or entering into a transaction.

1Purpose and scope of collection

Depending on the feature you use, we may collect the following information that you provide:

• Full name;
• Phone number;
• Email address;
• Delivery address or the place where a service is to be provided;
• Order, product, service and payment method details;
• The substance of a support request, feedback or complaint.
• Other information relating to your account or necessary to provide the service, if any

Information is collected in order to:

• Verify your identity and contact you;
• Receive, confirm and carry out a transaction;
• Deliver goods, provide services, take payment, handle exchanges and refunds;
• Support you and resolve feedback, requests and complaints;
• Keep the platform secure and prevent misuse;
• Meet our obligations under the law.

2Scope of use

We use your information only to the extent necessary for the purposes published in this policy.

Your information is not sold, exchanged or used for any other purpose without your consent, except where the law so provides or a competent state authority so requires.

3How long information is kept

Information is kept for as long as needed to carry out a transaction, supply goods or services, resolve a request, and meet the retention obligations imposed by law.

Once the purpose and the retention period have ended, the information is deleted, destroyed, or the personal identifiers within it are removed.

4Who may access your information

Your information may be accessed by:

• Our authorised staff;
• Providers supporting platform operation, data hosting, payment, delivery or other related services;
• A competent state authority acting on a lawful request;
• Any party granted access may use the information only to the extent necessary and is bound by a duty of confidentiality.

5How we protect information

We apply appropriate measures to protect your information, including:

• Permission levels and access control over the data;
• Technical measures to prevent unauthorised access, use or disclosure;
• Backups, monitoring, and response to data security risks;
• Requiring staff and related parties to observe their confidentiality duties;
• Taking remedial action and giving notice as required by law in the event of an incident.

6Floor plans and photographs you upload

When using the Feng Shui tools, you may upload photographs of the floor plan of a home or premises. This is private data, and we handle it on the following principles:

• Hidden data stripped on arrival: a photograph taken on a phone usually carries hidden data, including the GPS coordinates of where it was taken, the device model and the time. The server strips all of this before writing the image to disk. We do not keep the coordinates of where a photograph was taken.
• Stored outside the web folder: the image does not sit in a public folder of the site, its filename is an unguessable random string, and it cannot be opened by a direct link.
• Only your own account can open it: every view of an image checks that you are signed in and that the record belongs to you. A request from any other account is refused.
• You can delete it yourself at any time: deleting a record in the tool deletes the attached image from the server, not merely hides it.
• Not used for anything else: floor plan images are used only to prepare and present your own Feng Shui report. We do not use them for advertising, do not share them with any third party, and do not use them to train models.
• Retention: an image is kept alongside its record for as long as the account remains active and you have not deleted it. When you ask for your account to be deleted, the images go with it.
• Limits: each account may hold up to 10 records, and each record up to 5 images. Only JPEG or PNG image files are accepted, and any other file type is refused outright.

7Viewing and correcting your information

You can view and correct your information yourself from your account. Where you cannot do so, you may send a request by the telephone number or email published on the platform, following this procedure:

• Provide identifying details and say what you wish to view or correct;
• We check and verify the request;
• Once verified, we make the correction or guide you through it, and tell you the outcome.

8Deleting, destroying or restricting the processing of information

You may ask us to delete, destroy or restrict the processing of information you have given us, by contacting us on the telephone number or email published on the platform.

How the request is handled:

• You send the request and state clearly what information is to be deleted, destroyed or restricted;
• We verify your identity and the scope of the request;
• We carry out the request and tell you the outcome once verification is complete.
• Where information must continue to be kept in order to complete a transaction, resolve a dispute or meet a legal obligation, we will tell you why and will restrict its use to what is appropriate.

9Feedback and complaints about your information

If you find that information has been collected, used, disclosed or processed other than for its stated purpose, you may contact:

• CÔNG TY CP TẬP ĐOÀN UK MASTER
• Address: 11/5 Street No. 5, Quarter 16, Binh Hung Hoa Ward, Ho Chi Minh City
• Telephone: 08534.77687
• Email: thayungkhiem@gmail.com

How the request is handled:

• You give us the substance of the matter, the related details, and supporting documents if any;
• We confirm receipt within one working day;
• We check, verify, and apply a suitable remedy;
• The outcome is sent to you by telephone, email or the contact method you provided.
• Depending on the case, remedies may include correction, deletion, restriction of processing, blocking unauthorised access, and cooperation with the competent authority as required by law.