I. SCOPE OF APPLICATION

This Privacy and Personal Information Sharing Policy (hereinafter referred to as the "Personal Privacy Policy") is designed to outline the procedures through which SUMITOMO FORESTRY VIETNAM CO., LTD (hereinafter referred to as "SF Vietnam") – the entity owning and operating the Sumi Ơi E-commerce Website (https://sumioi.com), carries out the collection, storage, usage, processing, sharing, and safeguarding of personal information pertaining to organizations and individuals (hereinafter referred to as "Customers") participating in accessing and/or conducting transactions on the Sumi Ơi E-commerce Website located at https://sumioi.com (hereinafter referred to as "Sumi Ơi"). This Policy is established to ensure the security of information relevant to Customers.

By continuing to access or engage in transactions on the Sumi Ơi website, Customers signify that they have read, understood, and agreed to comply with the content of this Policy, including potential future revisions or supplements. SF Vietnam reserves the right to amend, supplement, and/or update this Policy at any time. Such changes will be notified and published on the website https://sumioi.com and shall take effect immediately upon posting. The continued use and access of Sumi Ơi by Customers following such changes implies Customers' consent to the terms and adjustments implemented within the amended, supplemented, and/or updated Policy.

II. DATA COLLECTION SCOPE

The primary data collected on the Sumi Ơi website includes: email address, phone number, username, password, gender, date of birth, and address of the Customer. These are mandatory pieces of information that Sumi Ơi requires Customers to provide when registering on the website and for the purpose of confirming orders, deliveries, payments, and promotional programs.

During the payment transaction process on the website, we only retain detailed information about the orders that Customers have successfully paid for. Information related to Customers' bank account numbers will not be stored and will be kept entirely secure.

Customers are responsible for promptly notifying the Sumi Ơi about any unauthorized, abusive, or security-breaching activities, as well as any instances of disclosing their login credentials to third parties. This will enable us to take appropriate measures to address such situations.

III. PURPOSE OF DATA COLLECTION

1. Purpose of Data Collection:

The personal data collected on the Sumi Ơi website will be utilized for the following purposes:

• Service Provision: The personal information of Customers will be used to provide services, products, and features related to shopping and transactions on the Sumi Ơi website, catering to the needs and preferences of Customers.

• Account Management: Personal information will be utilized to create, manage, and update Customers' accounts on the Sumi Ơi website, including identity verification.

• Transaction Verification: Personal information will be employed to verify and execute transactions, orders, payments, and associated activities, ensuring accuracy and security for both Customers and Sumi Ơi.

• Analysis and Improvement: Personal data will be used to analyze and evaluate activities on the Sumi Ơi website, enhancing the Customer experience, developing new functions, features, and services based on trends and preferences.

• Communication and Promotion: Personal information will be used to send notifications, updates, materials, advertising information, promotions, invitations to events, or promotional programs to Customers.

• Security and Prevention: Personal information will be utilized to detect and prevent fraudulent, abusive, and security-breaching activities, ensuring the safety of Customers' accounts and information.

• Contact and Issue Resolution: Personal information will be employed to communicate, exchange information, and resolve specific issues with Customers when necessary.

• Storage and Backups: Personal information may be stored and backed up for incident recovery, security-related tasks, and data management purposes.

• Market Research: Personal data may be used for market research purposes, trend analysis of usage and activities, with information being anonymized and solely used for statistical purposes.

• Other Legal Purposes: The use of personal data for purposes consistent with the objectives and policies of Sumi Ơi at any given time (if applicable).

Customers' personal data will only be utilized for the purposes outlined above, without being used beyond the scope of confirmation and relevance to transactions on the Sumi Ơi website.

2. Individuals/Organizations with access to the information:

a. Management, Staff of Sumi Ơi:

• Managers/Staff of Sumi Ơi are authorized to access users’ personal information as necessary to fulfill job responsibilities, including activities such as processing orders, providing customer service, resolving disputes and preventing fraud, developing new products and services, conducting marketing and advertising activities, as well as other tasks to support customers.

• In this case, Managers/Staff of Sumi Ơi must adhere to the Personal Privacy Policy to ensure the security and privacy of users' personal information.

b. Parent Company, Affiliated Companies, and Related Companies:

• Users' personal information shall only be used for the purpose of carrying out agreed-upon scopes of work or services with Sumi Ơi.

• Disclosure of information to any third party other than the listed related organizations by Sumi Ơi is not permitted.

c. Contractors, Service Providers, and Other Third Parties:

• These are individuals or organizations that we hire to support or supplement our business operations. These parties include, but are not limited to, providers of administrative services or other services such as postal companies, telecommunications companies, advertising and communication partners, information technology companies, e-commerce operating organizations, and data centers.

• They are only permitted to use users' personal information for the purpose of carrying out agreed-upon work or services with Sumi Ơi and are not allowed to disclose information to any other third party. They must also adhere to the provisions of the Personal Privacy Policy to protect users' personal information.

d. Competent State Authorities:

• Sumi Ơi will provide users' personal information to competent state authorities upon lawful request as stipulated by law, including:

  • Requests for investigation, prosecution, and trial of crimes

  • Requests to ensure national security and social order and safety

  • Other requests as provided by law

• Sumi Ơi will notify users of the provision of personal information to competent state authorities, except in cases where such notification may affect criminal investigation, prosecution, and trial activities.

Besides the cases mentioned above, Sumi Ơi will specifically notify customers when it is necessary to disclose personal information to a third party. In this case, Sumi Ơi commits to only disclose personal information with the consent of the customer.

Information of the entity collecting and managing personal information on the website https://sumioi.com:

• SUMITOMO FORESTRY VIETNAM CO., LTD

• Address: 12th Floor, HMC Tower, 193 Dinh Tien Hoang, Da Kao Ward, District 1, Ho Chi Minh City

• Phone: 0906.253.700

• Email: info@sumioi.com

IV. DATA RETENTION PERIOD

Personal data of members will be stored until there is a request for deletion or until the member themselves log in and initiate the deletion. In all other cases, members' personal information will be securely maintained on our server.

V. CONTACT INFORMATION OF THE ENTITY COLLECTING AND MANAGING PERSONAL INFORMATION

VI. COMMITMENT TO CUSTOMER PERSONAL INFORMATION SECURITY

Personal information of members on the Sumi Ơi website is committed to absolute confidentiality according to the personal information protection policy. The collection and use of information from each member will only be carried out with the consent of the respective customer, except for cases where other legal regulations apply.

No utilization, transfer, provision, or disclosure to any third party of a member's personal information shall occur without the explicit consent of the member.

In the event of a server storing information being attacked by hackers resulting in the loss of members' personal data, Sumi Ơi (https://sumioi.com) will be responsible for promptly notifying the relevant authorities for investigation and taking appropriate actions, as well as informing the affected members.

Absolute security is maintained for all online transaction information of members, including digitally numbered accounting invoices and documents.

The management board of SUMITOMO FORESTRY VIETNAM CO., LTD requires individuals to provide complete and relevant personal information, such as full name, contact address, date of birth, gender, email, telephone, when registering/purchasing as a member. Individuals are responsible for the legal accuracy of the provided information. The management board of SUMITOMO FORESTRY VIETNAM CO., LTD will not be held liable and will not address any complaints related to the rights of the member if it is found that all personal information provided by the member during the initial registration is inaccurate.

VII. MECHANISM FOR RECEIVING AND RESOLVING USER COMPLAINTS REGARDING PERSONAL INFORMATION USAGE

We commit to ensuring the security of your personal information and unequivocally pledge not to engage in the buying, selling, or exchanging of customer information with third parties for commercial purposes. In the event that the server storing customer information experiences a security breach due to a hacker attack resulting in the loss of customer personal data, we will take full responsibility. We will promptly notify the relevant authorities for investigation and resolution and inform the affected customers about the incident.

If you discover that your personal information is being used for unauthorized purposes or beyond the scope of consent, please send a complaint email to the following contact information:

We commit to responding promptly, or at the latest within 3 business days (excluding Saturdays and Sundays), from the time of receiving the complaint.

Thank you for your trust and choosing to accompany Sumi Ơi in your business's purchasing activities. We wish you a wonderful shopping experience on the Sumi Ơi E-commerce Website!