This policy applies to data collected and processed through the PHAM OFFICIAL website and its official support channels.
1.1 Purpose and Scope of Collection
PHAM OFFICIAL collects and processes personal data as needed to operate the website, supply goods, carry out transactions, assist customers, keep its systems secure and comply with legal obligations.
Contact information such as full name, phone number, email and delivery address.
Website account information, login history and user preferences.
Order details such as products, sizes, colors, quantities, value, order number and processing status.
Payment information needed to confirm, reconcile or refund transactions. PHAM OFFICIAL does not ask customers for their bank account passwords.
Correspondence, support requests, feedback, complaints, exchange and return information and relevant supporting documents.
Technical data such as IP address, device type, browser, access times, error logs and cookies necessary for the website to function.
Invoicing information or other information the customer chooses to provide to complete a transaction.
1.2 Uses of Data
Create, confirm, process and deliver orders, and handle returns and refunds.
Contact customers about availability, payment, delivery, exchanges, returns, refunds or any issues that arise.
Manage accounts, provide login functions and assist with account recovery.
Provide customer care and receive and resolve feedback, requests and complaints.
Reconcile transactions, keep accounts and records, and fulfill legal obligations.
Prevent fraud and meet legal, accounting and tax obligations.
Send marketing communications when you have subscribed or where the law permits.
1.3 Retention Periods
Retention periods depend on the purpose of processing, type of data, transaction status, complaint or dispute resolution periods, and applicable record retention obligations.
Account data is retained while the account is active and for up to 24 months after deletion, locking or termination, unless the law requires a longer period.
Contact or inquiry data that does not lead to a transaction is retained for up to 24 months after the last communication.
Order, invoice, delivery, payment and refund data is retained as needed to complete the transaction and for the mandatory periods under accounting, tax and other applicable rules.
Exchange, return, complaint and dispute records are retained throughout the case and for at least 3 years after it closes, unless a different period is required by law.
Cookies and technical logs are usually kept for no more than 12 months unless needed longer to address incidents, prevent fraud or comply with legal obligations.
Once the necessary period has expired and there is no legal requirement to retain the data, the data will be deleted, destroyed, anonymized or subject to processing restrictions by appropriate means.
1.4 Organizations and Individuals Who May Access Data
The representative and designated personnel of PHAM Business Household.
Shipping, delivery and returns providers.
Banks or payment support providers to the extent needed to process transactions.
Providers of website hosting, administration, maintenance, security or technical support.
Accounting, advisory or other professional service providers subject to confidentiality agreements.
Competent government authorities or other organizations or individuals where required by law or agreed to by the customer.
Parties with access may process the data only to the extent necessary for their work and must comply with confidentiality obligations.
1.5 Address of the Organization Collecting and Managing Data
PHAM Business Household (HỘ KINH DOANH PHAM)
Address: 336/11/18 Phan Van Tri, Quarter 28, Binh Loi Trung Ward, Ho Chi Minh City, Vietnam.
Phone: 082 889 1789
Email: hellophamofficial@gmail.com
Website: https://pham-official.com/
1.6 Security Measures
Assign and limit access rights according to job duties.
Use appropriate administrator accounts, passwords and authentication measures.
Update and maintain systems and address vulnerabilities or information security incidents.
Require staff and service providers to keep the information they access confidential.
Back up data, keep activity logs and monitor risks to detect and prevent unauthorized access or fraud.
Protect communications, devices and databases in a manner appropriate to the nature and scale of processing.
Follow incident response and remediation procedures and notify or coordinate with data subjects and competent authorities where required by law.
1.7 How Data Subjects Can View, Update or Request Corrections to Their Data
Customers can view or update information in their account or send a request to hellophamofficial@gmail.com, call 082 889 1789, or write to PHAM OFFICIAL at the address above.
Step 1 — Submit a request. Provide your full name, the phone number or email you used, the order number if applicable, the information you want to view or correct, and details of your request.
Step 2 — Verification. PHAM OFFICIAL verifies the requester and their connection to the data to reduce the risk of unauthorized access or changes.
Step 3 — Review and action. Identify the data held and allow it to be viewed or updated to the extent covered by the valid request.
Step 4 — Response. Communicate the result. If the request is refused in whole or in part, PHAM OFFICIAL will give the applicable reason.
PHAM OFFICIAL expects to acknowledge receipt within 3 business days and handle valid requests within 10 business days, unless more time is needed for verification or the law sets a different deadline.
1.8 Requests to Delete, Destroy or Restrict Processing of Data
Customers may send a request to the published email address or phone number and specify the data and the scope of processing to be deleted, destroyed or restricted.
PHAM OFFICIAL acknowledges receipt and verifies the requester’s identity.
The request is reviewed in light of the purpose of processing, transaction status, retention obligations and the lawful interests of the parties.
PHAM OFFICIAL carries out the request to the extent possible and communicates the result or explains why it cannot yet be carried out.
Data may be retained, or deletion may be restricted, where necessary to complete a transaction, resolve a dispute, prevent fraud or comply with accounting, tax or other legal obligations.
1.9 Handling Data Security Complaints, Requests and Reports
If customers discover or suspect misuse, use beyond the disclosed scope, unauthorized access or improper disclosure of their data, they may report it to hellophamofficial@gmail.com, call 082 889 1789, or write to 336/11/18 Phan Van Tri, Quarter 28, Binh Loi Trung Ward, Ho Chi Minh City, Vietnam. Reports should include contact information, a description of the issue and relevant documents.
Step 1 — Receive and record the report, supporting documents and the sender’s contact information.
Step 2 — Verify the data subject, the data processing history, system logs and the parties involved.
Step 3 — Take appropriate corrective action, such as limiting access, correcting or deleting data, revoking access rights, asking relevant parties to stop processing or fixing vulnerabilities.
Step 4 — Communicate the outcome and explain next steps where needed.
The initial response is expected within 3 business days. Resolution is expected within 15 business days. Complex cases may take longer, up to 30 business days, and PHAM OFFICIAL will keep the requester informed of progress.