Privacy Policy
1. Personal Data Collected and Collection Methods
1) Items Collected
- Inquiry / Contact form: name, email address, phone number, company name, position, inquiry content (including any attached files)
- Automated web-usage records: IP address, cookie and session identifiers, access date and time, service usage history, error logs, device and browser information
- Offline business contact (when applicable): name, company, position, contact information, records relating to commercial contracts or trade exhibitions
2) Collection Methods
- Inquiry and contact forms submitted through the Website
- Automated collection during Website usage (cookies and server logs)
- Email, telephone, or in-person communication during commercial contracts, trade shows, or exhibitions
2. Purposes of Processing and Retention Periods
| Purpose | Retention Period |
|---|---|
| Inquiry handling — identity verification, fact investigation, response delivery | 3 years after completion of the inquiry |
| Commercial correspondence — quotation, contract execution, order fulfillment, payment processing | 5 years after completion of the transaction (in accordance with commercial and tax laws) |
| Service operation and security — access management, security monitoring, fraud prevention, log analysis | Access logs: 3 months · Security logs: up to 1 year |
| Marketing (opt-in only) — newsletters, product updates, event notices | Retained until the user withdraws consent |
Where applicable laws require a longer retention period, such legal requirements take precedence.
3. Disclosure to Third Parties
The Company does not disclose personal data to third parties without the user’s consent, except (i) where required by law, (ii) in response to a lawful request from a competent authority, or (iii) where strictly necessary for the fulfillment of a contract with the user. For commercial fulfillment, minimum necessary information may be shared with logistics providers, banks, customs authorities, or freight forwarders. In such cases, the recipient, purpose, data categories, and retention period are disclosed in advance where required by law.
4. Outsourcing of Personal Data Processing
To operate the Website and provide Services efficiently, the Company may engage service providers for the following tasks:
- Web hosting and system operation — server operation, backup, and incident response
- Email delivery — transactional and inquiry-response email
The Company requires its service providers by contract to comply with applicable personal-data-protection laws, implement technical and organizational safeguards, limit sub-processing, cooperate with audits, and destroy personal data upon termination of the contract.
5. International Transfer of Personal Data
In limited cases, personal data may be transferred to the Republic of Korea in connection with shared business operations with the Company’s Korean affiliates. Any such transfer is conducted in compliance with Vietnamese PDPD and, where applicable, Korean PIPA and the GDPR. Transfers are subject to appropriate safeguards including contractual protections and transport-layer encryption (HTTPS). Users will be notified and, where required by law, their consent will be obtained prior to any international transfer.
6. User Rights and How to Exercise Them
Users are entitled to exercise the following rights at any time with respect to their personal data:
- Access — obtain confirmation that personal data is being processed and request a copy
- Rectification — correct inaccurate or incomplete personal data
- Deletion — request deletion of personal data, unless retention is required by law
- Restriction of processing
- Withdrawal of consent, where processing is based on consent
- Objection to processing, where applicable
- Data portability, where applicable under GDPR
Requests may be submitted by email to metalstrapping@gmail.com or through the contact form on the Website. The Company will respond within the period required by applicable law (as a general rule, within 30 days).
The Website is not directed to children. Children under the age of 14 (Vietnam / Republic of Korea) or 16 (EU, depending on member-state law) should not submit personal data. If personal data of a child is inadvertently collected, it will be deleted without delay upon verification.
7. Destruction of Personal Data
- Procedure: When the retention period expires or the purpose of processing is fulfilled, personal data is destroyed without delay. Data required to be retained under other laws is stored separately and destroyed immediately upon the end of the required retention period.
- Method: Electronic files are deleted using technically irreversible methods. Paper documents are shredded or incinerated.
8. Cookies
- Purpose: session management, access statistics, and user convenience features.
- Opt-out: Users may block or delete cookies through browser settings (for example, in Chrome: Settings → Privacy and security → Cookies and other site data).
- Blocking cookies may limit the functionality of some Services.
9. Security Measures
The Company implements administrative, technical, and physical safeguards to protect personal data, including:
- An internal data-protection management plan and periodic review
- Access controls and least-privilege authorization for personnel
- Encryption of credentials and sensitive data; HTTPS for data in transit
- Installation and periodic update of security software
- Employee training and oversight of service providers
- Logging, monitoring, and anomaly detection
10. Public Postings and External Links
Information voluntarily posted by users in public areas of the Website (such as forums or comment sections, if any) may be viewable by other users. Users are advised not to include personal data in publicly accessible posts. The Company is not responsible for personal data disclosed by users through their own posts. When following links to external websites, users should review the privacy policies of those websites.
11. Marketing Communications
Marketing communications (including newsletters and product announcements by email) are sent only to users who have provided prior opt-in consent. Users may unsubscribe at any time by following the opt-out instructions in each message or by contacting the Company directly.
12. Data Protection Contact
- Data-Protection Contact: Sales Head, SAM HWAN VINA CO.,LTD.
- Email: metalstrapping@gmail.com
- Tel: +84-251-3569-400 | Fax: +84-251-3569-401
- Address: Road 2, Nhon Trach 5 Industrial Zone, Nhon Trach District, Dong Nai Province, Vietnam
13. Complaints and Supervisory Authorities
If a user believes that the Company has not adequately handled their personal data, the user may lodge a complaint with the relevant supervisory authority:
- Vietnam: Ministry of Public Security — Department of Cybersecurity and High-Tech Crime Prevention
- Republic of Korea: Personal Information Protection Commission (call 118 from within Korea); Personal Information Dispute Mediation Committee (1833-6972); KISA Privacy Infringement Reporting Center (call 118)
- EU/EEA: Relevant national Data Protection Authority
14. Changes to This Policy
This Privacy Policy may be updated from time to time to reflect changes in law, technology, or business practice. Material changes will be notified through the Website. The “Last updated” date at the top of this Policy indicates when it was most recently revised.