giatnhanh PRIVACY POLICY

This privacy policy ("Policy") explains how the operator of giatnhanh ("giatnhanh", "we", "us") collects, uses, shares, stores and protects your personal data when you use the giatnhanh web application ("Platform").

This policy is also a personal data processing notice sent to you before processing, in accordance with the law on personal data protection.

1. Legal basis

• Law on Personal Data Protection No. 91/2025/QH15;
• Decree 356/2025/ND-CP detailing the Law on Personal Data Protection (replacing Decree 13/2023/ND-CP);
• Relevant regulations on electronic transactions, e-commerce, network security and consumer rights protection.

2. Roles of the parties

• giatnhanh is the controller and processor of Users' personal data on the Platform.
• Partner laundry shop receives part of your data to fulfill your order and can only use that data for your order according to the cooperation contract with giatnhanh.
• Service provider (server hosting, SMS/OTP sending, usage analysis...) processes data on behalf of giatnhanh according to the contract. The Platform's data servers are currently located in Singapore (Vercel, sin1 region), so your data is transferred abroad (see section 7).

3. Personal data we collect

3.1. Data you provide

3.2. Data collected automatically

3.3. Data we do not collect

• giatnhanh does not collect bank card information (card number, expiration date, CVV code, OTP code) and does not hold the Customer's payment, because you pay directly at the Shop. Customers may voluntarily save a receiving account, only to receive a refund upon appeal (Appendix C).
• In addition to location data mentioned in section 3.2, giatnhanh does not intentionally collect other sensitive personal data. Please do not send sensitive data (health, religion, identification documents...) via Chat in applications or photos.

3.4. Location data (sensitive personal data)

• According to Decree 356/2025/ND-CP, your location determined through location services is sensitive personal data.
• giatnhanh only collects and saves GPS location when you individually consent for this purpose; You can refuse or withdraw your consent at any time and still use the Platform by manually selecting your district/ward.
• Location data is only used to suggest and arrange stores near you; Only authorized personnel can access; Do not share with the Shop.
• GPS location data is only saved until the order is completely closed, meaning you have received the goods, the Shop has been paid and giatnhanh has collected the commission for that order (through the reconciliation period); then giatnhanh delete immediately. Canceled or rejected applications are considered closed and the position is immediately deleted. If you withdraw your consent earlier, location data is deleted immediately upon your withdrawal.
• giatnhanh quickly prepares documents to assess the impact of processing personal data according to legal regulations.

3.5. Store data

Shop name, address, phone number, shop owner/representative information (CCCD number only records the number, giatnhanh does not store CCCD photos), business documents, payment account (bank name, account number, account owner name - required, for weekly checking; Appendix C), shop image, price list.

4. Purpose of processing

We process personal data for the following purposes:

1. Create and manage accounts, authenticate with OTP;
2. Transfer orders to the Store, display and update order status; When you choose to return items via Shipper: save the delivery address, photo of the bag taken by the Shop before delivering to Shipper and confirm "Received item" as evidence when there is a Complaint;
3. Operate Chat in the application between you and the Shop;
4. Send notifications related to the order (reminder to bring items after 4–6 hours, order canceled after 24 hours, laundry completed...);
5. Issuing and applying promotional codes, referral codes and anti-fraud (limited by phone number and device; IP address tracking);
6. Suggesting shops near you using location data, only if you specifically agree;
7. Check commissions and refund weekly promotions with the Shop;
8. Receive and resolve Complaints (including viewing Chat in the application, notes and pictures of item condition);
9. Show reviews;
10. Ensure system security and safety, fix errors;
11. Statistical analysis to improve the Platform (aggregated/de-identified data preferred);
12. Sending promotional and marketing messages — only with your separate consent and you can opt out at any time;
13. Comply with legal obligations and requirements of competent state agencies.

We do not use data for purposes other than those notified without your consent, except where required by law.

5. Consent

5.1. When registering an account, you are asked to agree to this Policy by proactive action (check the box to agree). Silence or non-response does not constitute consent.

5.2. You can separately consent for each optional purpose (e.g. receiving marketing, location sharing, push notifications). With location data, before asking for consent, giatnhanh clearly informs you that this is sensitive personal data.

5.3. giatnhanh saves evidence of your consent (time, Policy version) in a verifiable format.

5.4. In some cases where the law allows, we may process data without consent (for example, to fulfill contractual obligations with you, at the request of a competent authority, in an emergency that threatens life or health).

6. Data sharing

We do not sell your personal data. We only share in the following cases:

External delivery unit (Grab, Ahamove...) – updated October 26, 2026:

• If you order Shipper: you provide information to them yourself according to their own policies.
• If Shop orders Shipper at your request: The Shop provides Shipper with your full name, phone number and delivery address, only to deliver that order. The salon may not use this information for any other purpose.
• giatnhanh does not sign a contract and does not transmit data directly to the delivery unit; That entity processes the data according to its own policies.

Current service provider: Vercel (server, Singapore region), Neon (database, Singapore), Google Fonts (fonts), browser vendor push notification service (only if you enable notifications), and app building platform display widget (grok.com). giatnhanh currently does not use SMS OTP services or external analysis tools; As more use occurs, this list will be updated.

7. Transfer data abroad

Updated October 26, 2026.

• The Platform's servers and database are currently located in Singapore (infrastructure provider Vercel, region sin1). Therefore, the personal data you provide on the Platform, including account information, orders, Order Chat, photos, delivery address and location data (if you consent), is transferred abroad and stored in Singapore.
• This transfer is only for the purpose of operating the Platform according to the purposes in section 4. The infrastructure provider only processes data under a contract with giatnhanh, which has data protection provisions; giatnhanh applies transmission encryption, authorization and access logging as in section 9.
• Quickly prepare and save records assessing the impact of transferring personal data abroad according to the Law on Personal Data Protection 91/2025/QH15 and Decree 356/2025/ND-CP, send them to the agency in charge of personal data protection (Ministry of Public Security) within the prescribed time limit, and update the records when there are changes.
• If giatnhanh later moves the server to Vietnam or uses another provider in another country, giatnhanh will update this Policy and notify you.

8. Storage time

At the end of the term, the data is deleted or de-identified, unless the law requires longer retention.

9. Your rights

Under the Personal Data Protection Law, you have the right to:

1. Be informed about the processing of your personal data;
2. Agree or disagree, request withdrawal of consent;
3. View, edit or request correction of data;
4. Request provision, deletion, restriction of processing data; object to data processing (including objection to receiving marketing messages);
5. Complain, denounce, sue, request compensation for damages according to law;
6. Request measures to protect your personal data.

You also have an obligation to protect your own data, respect the data of others (for example, do not share the information of the Shop or other Customers outside), and provide accurate information.

How to exercise rights: send a request via the Account section on the Platform, Zalo support or hotline 0355851994. We confirm receipt of the request within 72 hours and process it within the time limit prescribed by law. We may need to verify identity before processing.

Note when withdrawing consent or deleting data: this does not affect the lawfulness of previous processing. If you withdraw consent to required data (such as phone number), you may not be able to proceed with the order. Order data that must be saved according to accounting and tax regulations or to serve open complaints may not be immediately deleted; We will notify you clearly.

10. Data protection measures

• Transmission encryption (HTTPS); authenticate by OTP;
• Decentralized access rights: Stores can only view their own order data; giatnhanh staff only views Chat in the application when there is a Complaint or a violation needs to be handled;
• Record access logs and backup periodically;
• Bind confidentiality obligations to personnel, shops and service providers;
• Prepare records to assess the impact of processing personal data (because processing location data is sensitive data) and records to assess the impact of transferring personal data abroad (because the server is located in Singapore);

11. Troubleshooting and data breaches

When detecting violations of regulations on personal data protection that may harm your rights and interests, giatnhanh will:

1. Prevent and overcome consequences;
2. Notify the agency in charge of personal data protection (Ministry of Public Security) no later than 72 hours from the time of discovery, in cases required by law;
3. Make a record confirming the incident and notify affected users when necessary.

12. Children's data

The platform is for people over 16 years old; People under 16 years old can only use it with the consent of their father, mother or guardian (consistent with the Terms of Use, section 3.2). The platform is not intended for children under 7 years old. If we discover that a child's data has been provided without the consent of the parent or legal guardian, we will delete that data.

13. Cookies and local storage

The platform is a web application (PWA) and uses cookies and local storage to stay logged in, save preferences, and work when the network is weak. You can clear this data in your browser settings, but some functions may not work.

14. Policy Changes

We may update this Policy. Changes in processing purposes or data types will be notified on the Platform before application and consent will be obtained when required by law.

15. Contact

• Address: Da Nang
• Hotline: 0355851994
• Person in charge of personal data protection: Minh Hoang

Appendix A. Data of Shipper giatnhanh (added October 28, 2026, version 1.1)

This appendix adds sections 3, 6 and 8; If different, this annex applies.

A.1. Data provided by Shipper: full name, phone number, CCCD number, double-sided CCCD photo, license plate number, vehicle document photo, portrait photo, trip history, package photo, reviews, complaints, deposit book and comparison.

A.2. CCCD photos are sensitive personal data (Personal Data Protection Law 91/2025/QH15, Decree 356/2025/ND-CP). giatnhanh is only used to verify Shipper's identity; only giatnhanh administrators can view, each view is logged (who, when). Operators, Customers, Shops and Shipper itself cannot review CCCD photos in the application; CCCD number only shows the last 4 digits. CCCD photos are saved while Shipper is active and up to 12 months after Shipper quits or the application is rejected, then deleted, unless there is a dispute.

A.3. Shipper's location: only pick up when Shipper turns on "Ready to receive orders", to place trip nearby; deleted when Shipper turns off. Does not save travel history.

A.4. Share when there is a trip: Shipper receives the trip and sees the full name, phone number and address (map pin) of the Customer, name, phone number and address of the Shop, only to make that trip; Customers and Shops see Shipper's full name, phone number, license plate number and portrait photo. Chat in the application including trip's Shipper is running.

A.5. Delivery address: when choosing Shipper giatnhanh, Customers enter the address and pin the location on the map to calculate distance and shipping fee. Pin coordinates are deleted when the order is closed (completed, canceled or rejected); Text address stored as order data (section 8).

A.6. giatnhanh has added CCCD image processing and Shipper location to its personal data processing impact assessment (DPIA) profile.

Appendix B. Shipper push notifications, location and activity (added October 28, 2026, version 1.2)

B.1. Push notifications (only if you enable): giatnhanh stores the browser notification registration code (sending address and encryption key issued by the browser) associated with your account. The notification content (short title, single code) is sent via the browser provider's notification service (Google, Apple, Mozilla, Microsoft) to your phone. Turning off notifications or uninstalling the application will delete the registration code; Expired codes will also be automatically deleted.

B.2. Shipper's position: only taken when Shipper turns on "Ready to receive orders", only keeps the closest position to arrange trip nearby, delete when Shipper is off, locked or off; Does not save movement history. Customers and Shops cannot view Shipper location.

B.3. Shipper's operations: quickly saves "Ready" on/off time, number of trips received, completed, returned, evaluated and types of Shipper (internal / partner, with change history) for operation, control and quality monitoring. Retention time: 12 months from the date of occurrence, then deleted or de-identified (unless there is a complaint or dispute).

B.4. Internal Shipper account created by giatnhanh: giatnhanh enter full name, phone number, CCCD number and photo, license plate, photo of vehicle documents, portrait photo provided by Shipper; Apply as Appendix A (CCCD images can only be viewed by administrators, with logs).

B.5. Address for Grab / Ahamove: the address you enter to copy to Grab / Ahamove is only saved on your phone, not sent to giatnhanh. When pasted into a company's application, data is processed according to that company's policies.

Appendix C. Receiving account and giatnhanh laundry detergent bottle (added October 29, 2026, version 1.3)

C.1. Receiving account includes: bank name, account number, account holder name (in capital letters without accents). income:

• of Shop (required): to transfer money for weekly reconciliation (refund giatnhanh discount code sponsored) and receive money paid by the Shop;
• of Shipper (required): to refund deposit and transfer money for reconciliation;
• by Customer (voluntary): only to receive a refund when the complaint is resolved. Do not save an account and still use the Platform normally; When a refund is needed, giatnhanh will remind you further.

C.2. giatnhanh does not collect card information (card number, expiration date, CVV, OTP), password or banking application login code, and never requests this information.

C.3. Who can see: besides the giatnhanh administrator, everyone (including account owners and operators) can only see the hidden form, for example "Vietcombank •••• 1234 – NGUYEN VAN A". Administrators view the full number when needing to transfer money; each view is logged. Account edit history is only saved in hidden form. Each time an edit is made, the account waits for giatnhanh to be re-verified and the account owner receives a notification.

C.4. VietQR code: when the transfer QR code is displayed, the account number, account holder name, amount and transfer content are sent to the VietQR image creation service (img.vietqr.io) to create the code image. Self-imported banks (not on the VietQR list) do not generate QR codes.

C.5. Save time: the receiving account is saved until you delete the giatnhanh account or until all reconciliations / refunds are open to you, then delete.

C.6. giatnhanh laundry detergent bottle: giatnhanh stores the number of ml added / subtracted from each order, the number of filled bottles and the promotional code issued to operate the program and detect fraud (for example, the shop owner places his own order). Not used for third-party advertising.