Privacy policy

This policy covers baselab.bomax.vn and follows Vietnam's Personal Data Protection Law No. 91/2025/QH15 and Decree 356/2025/ND-CP. The data controller and processor is Hộ kinh doanh Ngô Trường Dũng (household business), owner of the BASELAB CO. brand — seller details are at the bottom of every page.

What we collect

When you order: name, phone number, email, delivery address, order note.
When you create an account: also a password (one-way hashed; we cannot see it) and your address book.
When you subscribe: email and preferred language.
When you review: display name, text, and email if provided (never published).
Payments: for cash on delivery and bank transfer we only store the order's payment status. The website never collects card or wallet details.
Essential cookies: bag, login and cookie choices.
Online behaviour data (Google Analytics, Meta Pixel, TikTok Pixel): only with your consent in the cookie dialog. The law treats this as sensitive data, so it is off by default.

We do not collect other sensitive data (health, biometrics, religion, detailed financial data, etc.).

Purposes and legal basis

Processing, delivering and supporting orders and exchanges — based on the consent you tick at checkout.
Managing your account — based on consent when you sign up.
Newsletters and offers — only if you subscribe; every email lets you unsubscribe.
Analytics and advertising — only if enabled in cookie settings.
Accounting and tax obligations required by law.

Consent is requested separately per purpose. Nothing is pre-ticked, and accepting the terms of sale never includes marketing consent.

Sharing

Couriers: name, phone and address for delivery.
Banks: bank transfers are processed by your bank and ours. When MoMo, ZaloPay or VNPay are added, only the order reference and amount are sent to them.
Infrastructure providers: servers in Vietnam; the Cloudflare network for speed and attack protection; our transactional email service.
Authorities when legally required.

BASELAB does not buy or sell personal data.

Retention

Orders: for the period required by accounting and tax law.
Accounts: until you ask us to delete them.
Newsletter: until you unsubscribe.
Analytics: per Google, Meta and TikTok retention settings (up to 14 months for Google Analytics).

Your rights and our response times

You may know about, access, correct, obtain, delete or restrict processing of your data, object to marketing use, withdraw consent and complain. Email [email protected], call 0862208620 or message BASELAB CO. on Shopee. We:

acknowledge your request within 2 working days;
provide access, corrections or copies within 10 days;
handle withdrawal, restriction or objection within 15 days;
delete data within 20 days (except data the law requires us to keep).

Withdrawing consent does not affect processing lawfully carried out before.

Security and incidents

Data travels over HTTPS, admin access is authenticated and the database is backed up daily. If personal data is leaked or lost, we notify the data protection authority within 72 hours and inform affected people.

Children

This site is not aimed at children under 16. Parents who find that their child has sent us information can contact us to have it deleted.

Cookies

Change your choice at any time via "Cookie settings" in the footer. Declining non-essential cookies does not affect shopping.

Updates

Current version: 3 November 2026. If we change the purpose of processing, we ask for consent again before it applies.

Menu