Privacy and personal data
Legal basis
KBMC processes personal data under the 2025 Personal Data Protection Law (in force from 1 January 2026) and its implementing rules, only with your consent or where the law requires.
Data collected
| Group | Data | When |
|---|---|---|
| Contact | Name, phone, email, delivery address | Orders, appointments, newsletter sign-up |
| Transactions | Orders, invoices, warranty cards, buy-back history | Every transaction |
| Identification | Personal ID number, ID photos, portrait | Transactions from 50 million VND and every buy-back |
| Technical | Cookies needed for the bag and sign-in | When using the website |
KBMC does not sell personal data or share it with third parties for advertising.
Purposes
Fulfilling orders and invoices; warranty and client care; anti-money-laundering and tax duties; sending the newsletter when you subscribe.
Protecting ID data
- ID photos sit in a separate encrypted store, viewable only by compliance staff and approvers; every view is logged.
- Operational screens show only the last 4 digits of ID numbers.
- Data travels over encrypted connections.
Retention
Contact data is kept until you ask for deletion. Transaction records and ID files are kept for the periods required by accounting, tax and anti-money-laundering law, then deleted or anonymised.
Your rights
You may be informed, access, correct, withdraw consent, request deletion, object to marketing and complain. Withdrawing consent does not affect data KBMC must keep by law.
Where data is stored
Data is stored on a cloud provider's infrastructure, with a cross-border transfer file prepared as required.