PERSONAL DATA PROTECTION POLICY

a. Data you voluntarily provide when using features on the Website:

• Requesting a consultation: Full name, phone number, email (optional), province/city, district, address, and products of interest;
• Messaging through the live chat box on the Website: Name, phone number, email, and message content;
• Placing orders and making payments: Full name, phone number, email, province/city, district, delivery address, order notes, and selected payment method (cash on delivery or bank transfer);
• Registering an electronic warranty: Customer name, phone number, address, province/city, product model, purchase date, and store of purchase.

b. Data generated during transactions: order history, warranty registration history, and payment information.

c. Data collected automatically when you visit the Website through cookies and online measurement and advertising tools integrated into the Website: IP address, device/browser type, access times, and pages/products viewed. This category of data is primarily used for statistical purposes, advertising measurement, and improvements to the Website experience; We do not use this data to identify you directly, unless it is combined with the data in item (a).

Providing the personal data mentioned above is voluntary. However, for mandatory information fields (marked with *) in each feature, if you do not provide all required information, We may be unable to fulfill the corresponding consultation, order, or warranty registration request.

The Website and related services are not intended for individuals under 16 years of age. If We discover that personal data of an individual under 16 has been provided without the lawful consent of their father, mother, or guardian, We will delete such data immediately upon discovery.

2. Purposes of Processing Personal Data

2.1 Purposes related to transactions and services provided to you:

• Receiving and confirming consultation requests; helping you select suitable products;
• Processing orders: confirmation, delivery, installation, invoicing, payment, returns and exchanges, and periodic filter replacement;
• Receiving and processing electronic warranty registration requests;
• Receiving and resolving your complaints and feedback to improve product and service quality;
• Fulfilling obligations required by law (issuing invoices and providing information to competent state authorities upon lawful request).

2.2 Purposes unrelated to transactions, carried out only with your consent:

• Sending information about new products, promotional programs, and marketing content from the Company – only when you actively consent (through a separate checkbox that is not preselected) within the relevant feature;
• Analyzing and improving Website content and experience, and measuring and optimizing advertising (through cookies and online measurement and advertising tools).

You have the right to customize your acceptance of each cookie category (Necessary/Analytics/Marketing/Personalization) – accept all, reject all, or customize – upon accessing the Website.

3. Retention, Deletion, and Destruction of Personal Data

Your personal data is stored in Vietnam, on the Company’s management systems (SAP, Salesforce) for consultation requests, orders/payments, and electronic warranty registrations, and/or on the messaging service provider’s platform (Pancake) for communications through the live chat box.

Data is retained until:

• You request the deletion of your personal data, except where deletion is not permitted by law;
• We have fulfilled the purposes of collection and processing and determine that retention is no longer necessary;
• The retention period prescribed by law or required by a competent state authority expires.

We delete data within the applicable time limits prescribed in the Decree guiding the current Law on Personal Data Protection, by deleting electronic data or destroying paper documents (if any). Invoices and accounting documents arising from purchase transactions are retained for a minimum of 10 years in accordance with accounting law.

4. Sharing Personal Data

When you interact with the Website, certain data may be collected directly by third-party platforms and tools integrated into the Website to help Us operate the Website, provide customer care, and conduct marketing activities (for example: customer data management platforms, messaging/live chat platforms, and online measurement and advertising tools). Each of these platforms and tools has its own personal data processing policy, independent of this Policy. We do not control and are not responsible for the policies or data processing practices of these third parties; please refer directly to each party’s policy on its official website.

In addition, We do not sell or rent your personal data, and We only share data to a reasonable and necessary extent for the purposes set out in Section 2, with:

• Product delivery, installation, and warranty partners;
• Providers of payment, accounting, auditing, and legal advisory services to the Company;
• Competent state authorities upon lawful request in accordance with the law.

5. Use of Technology Platforms and Personal Data

The Company is a commercial enterprise operating in Vietnam and uses your personal data only to support its business activities within the territory of Vietnam. Some technology platforms used by the Company to store data (such as SAP and Salesforce) may have servers located overseas; however, these are only data storage tools – the Company does not transfer your personal data to its parent company or any third party overseas for processing for that party’s own purposes. Responsibility for data security on these platforms rests with the respective service providers under the service agreements.

If an actual need arises to transfer your personal data to a party overseas for processing, the Company will complete all procedures required under the Law on Personal Data Protection 2025 and Decree No. 356/2025/NĐ-CP before doing so.

6. Your Rights Regarding Personal Data

You have the right to:

• Be informed about processing activities and consent to or refuse Our processing of your personal data;
• Withdraw consent previously given;
• Access, view, and request corrections to your personal data;
• Request the deletion of or restrictions on the processing of your personal data;
• Object to processing and request that your personal data be provided to you;
• Lodge complaints, report violations, initiate legal proceedings, and claim compensation for damages in accordance with the law.

To exercise these rights, please contact Us using the information in Section 9. We receive and respond to your requests as soon as possible, in accordance with current personal data protection laws; We may require you to verify your identity before processing a request for security purposes, and We have the right to refuse requests where they are not permitted by law or where necessary verification information is missing.

Please note: withdrawing consent or requesting data deletion may affect Our ability to continue processing your consultation requests, orders, or warranties.

7. Your Obligations

• Provide accurate and complete personal data and update it when changes occur;
• Protect your own personal data, keep your account login information confidential, and do not share it with third parties;
• If you provide another person’s personal data (a family member, an authorized person, etc.), you warrant that you have obtained that person’s lawful consent and assume responsibility for providing such data.

8. Security Measures and Incident Handling

We apply appropriate technical and organizational measures (firewalls, SSL connection encryption for payment transactions, and access permissions) to protect personal data against unauthorized access, use, and disclosure. However, We cannot guarantee absolute security against sophisticated cyberattacks beyond the Company’s reasonable control.

If an incident affecting personal data occurs, We undertake to proactively review and promptly address the incident and fully fulfill Our notification obligations to the specialized personal data protection authority and affected customers (if any), within the time limits prescribed by Decree No. 356/2025/NĐ-CP and relevant laws.

9. Complaint Receipt and Resolution Mechanism

If you discover that your personal data has been used for purposes or beyond the scope stated in this Policy, please contact Us using the information below so that We can receive your complaint and coordinate its resolution:

10. General Provisions

We may amend and update this Policy from time to time to reflect actual operations and current legal requirements; the updated version will be published on the Website.

By continuing to use the Website or providing personal data to Us, you are deemed to have read, understood, and agreed to the contents of this Policy.

This Policy takes effect on: 01/01/2026