01 — Collection
Information We Collect
Anh Hair (operated by Hoang Duc Import Export, located at Dong Nguyen, Tu Son, Bac Ninh, Vietnam) collects two categories of information when you interact with us or place an order.
Information You Provide Directly
-
Contact details: name, email address, WhatsApp number, country, shipping address
-
Order information: products selected, length, color, quantity, special instructions
-
Payment information: bank or card details handled by OnePay; recipient identification for Western Union or MoneyGram. We do not store full card numbers on our own servers.
-
Communications: messages you send by Email or WhatsApp, including attached photos and product specifications
Information Collected Automatically
-
Device and browser data: IP address, browser type, operating system, screen resolution, language preference
-
Usage data: pages visited, time spent, referral source, search terms used on our site
-
Cookies and similar technologies: session cookies, analytics identifiers, marketing pixels (see Section 4)
02 — Use
How We Use Your Information
We use the information we collect for the following purposes:
-
Order fulfillment: processing payments, manufacturing or preparing your order, arranging FedEx International shipment, providing tracking updates
-
Customer support: answering questions, resolving issues, processing returns and exchanges
-
Account and order records: keeping accurate records of purchases for warranty, returns, and tax compliance
-
Service improvement: understanding how visitors use our site so we can improve product information, navigation, and checkout
-
Marketing communications: sending occasional emails or WhatsApp messages about new products, bulk pricing, or restocks — only if you have asked us to keep you informed
-
Legal compliance: meeting Vietnamese export regulations, FedEx customs requirements, and applicable international shipping law
-
Fraud prevention: verifying buyer identity and payment legitimacy, particularly for high-value bulk orders
03 — Sharing
Sharing & Disclosure
Anh Hair does not sell your personal information. We share the minimum information required with the following categories of service providers:
-
FedEx International — receives your name, shipping address, phone number, and package contents description for customs and delivery
-
OnePay — receives card payment details directly through their PCI-DSS compliant gateway; Anh Hair only sees the transaction confirmation, not card numbers
-
Banking partners — receive Bank Transfer (T/T) sender details for reconciliation
-
Western Union and MoneyGram — receive recipient verification information when these channels are used
-
Google LLC — for analytics and advertising services (Google Analytics 4, Google Tag Manager)
-
Meta Platforms (Facebook) — for advertising measurement via the Meta Pixel, when you reach us through Facebook or Instagram
-
Legal authorities — when required by Vietnamese law, foreign court order, or to protect the legal rights of Anh Hair, our buyers, or third parties
04 — Cookies
Cookies & Tracking Technologies
Our site uses cookies and pixels to operate, understand usage, and improve the experience. The specific tools we deploy are:
-
Google Analytics 4 (GA4) — anonymous traffic and behavior analytics. Opt-out: tools.google.com/dlpage/gaoptout
-
Google Tag Manager — manages the deployment of analytics and marketing tags on the site
-
Meta Pixel — measures the effectiveness of our Facebook and Instagram advertising. Opt-out via your Facebook ad preferences.
-
Session and functional cookies — required for cart functionality, language preferences, and basic site operation
You can disable cookies in your browser settings, but some site features may not work correctly without them.
05 — Retention
Data Retention
We retain personal information only for as long as needed for the purposes described in this policy or as required by law:
-
Order records and invoices: 7 years (Vietnamese tax and export compliance requirement)
-
Customer support communications: 3 years from the date of last contact
-
Marketing subscription data: until you unsubscribe, then deleted within 30 days
-
Website analytics (GA4): 14 months at user-level, then aggregated
-
Payment proof documents: 7 years for banking and audit purposes
After the retention period ends, data is securely deleted or anonymized.
06 — Security
Data Security
We protect personal information using industry-standard safeguards:
-
SSL/TLS encryption across our site for all data in transit
-
PCI-DSS compliance via OnePay — card data is processed entirely within OnePay's certified environment; Anh Hair systems never receive raw card numbers
-
Restricted access — only authorized Anh Hair staff with a legitimate business need can view customer order records
-
Two-factor authentication on all internal accounts handling order, payment, or customer data
-
Regular security review of our storefront, plugins, and hosting environment
No system is 100% impenetrable. If a data security incident affects your information, we will notify affected users by Email or WhatsApp without undue delay.
07 — Your Rights
Your Privacy Rights
Regardless of your country, you have the following rights regarding your personal information:
-
Right to Access — request a copy of the personal data we hold about you
-
Right to Correction — ask us to update inaccurate or incomplete data
-
Right to Deletion — request deletion of your data, subject to legal retention requirements
-
Right to Portability — receive your data in a structured, machine-readable format
-
Right to Object — opt out of marketing communications or specific data uses at any time
To exercise any of these rights, email us at Anhhairfactory.2019@gmail.com with the subject "Privacy Request". We respond within 30 calendar days.
08 — CCPA
California Residents — CCPA Rights
If you are a resident of California, the California Consumer Privacy Act (CCPA) gives you the following specific rights:
-
Right to Know — request disclosure of the categories of personal information we collect, the sources, the purposes, and the third parties with whom we share it
-
Right to Delete — request deletion of personal information we have collected, subject to legal exceptions
-
Right to Opt-Out of Sale — Anh Hair does not sell personal information. We have not sold personal information in the preceding 12 months and have no plans to do so.
-
Right to Non-Discrimination — we will not deny service, charge different prices, or provide a different level of quality if you exercise your privacy rights
To submit a CCPA request, email Anhhairfactory.2019@gmail.com with the subject "CCPA Request". We respond within 45 days as required by CCPA. You may need to verify your identity before we can process your request.
09 — GDPR
European Users — GDPR Rights
If you are located in the European Economic Area, the United Kingdom, or Switzerland, the General Data Protection Regulation (GDPR) applies to our processing of your personal data.
Our legal bases for processing are: (1) contract performance when fulfilling your order, (2) legitimate interest for fraud prevention and service improvement, (3) consent for marketing communications, and (4) legal obligation for tax and export compliance.
In addition to the rights in Section 7, GDPR gives you the right to lodge a complaint with your local data protection authority. To exercise your GDPR rights, contact Anhhairfactory.2019@gmail.com.
10 — Children
Children's Privacy
Anh Hair products and services are intended for adults aged 18 and over. We do not knowingly collect personal information from children under 13 years of age (or 16 in jurisdictions where that is the applicable threshold).
If we learn that we have collected personal information from a child without verified parental consent, we will delete that information promptly. If you believe a child has provided us with personal information, please contact us immediately.
11 — International
International Data Transfers
Anh Hair is based in Vietnam and serves customers in more than 50 countries. By placing an order or contacting us, you understand that your personal information may be transferred to, stored in, and processed in Vietnam and other countries where our service providers operate.
Where required by applicable law, we use appropriate safeguards for international transfers, including Standard Contractual Clauses for transfers from the European Economic Area.
12 — Changes
Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, services, or applicable law. The "Effective Date" at the top of this page indicates when the policy was last revised.
For material changes, we will notify you by Email (if you have given us your address) or by posting a prominent notice on our site before the change takes effect. Continued use of our services after the effective date constitutes acceptance of the updated policy.
