PRIVACY & PERSONAL DATA PROTECTION POLICY

LOTUS BLEU ASIA

Operated by KAPYWINGS COMPANY LIMITED

1. Introduction

Lotus Bleu Asia respects the privacy of its customers and is committed to protecting personal data collected through its website, https://lotus-bleu.asia.

This Privacy & Personal Data Protection Policy explains what personal information we collect, why we collect it, how it is used, how long it is retained, and how customers can exercise their rights.

The website operates on a guest-checkout-only basis. Customers are not required or permitted to create customer accounts to place orders.

Personal information provided during checkout is used for the purposes of processing and fulfilling orders and related legal obligations.

2. Entity Responsible for Personal Data

The entity responsible for collecting, determining the purposes and means of processing, and controlling customer personal data through the Lotus Bleu Asia website is:

Legal Entity: KAPYWINGS COMPANY LIMITED

Vietnamese Legal Name: CÔNG TY TNHH KAPYWINGS

Enterprise Registration Number: 0319368013

Registered Head Office: No. 2 Thi Sách Street, Sài Gòn Ward, Ho Chi Minh City, Vietnam

Telephone: +84 984 802 785

Email: contact@lotus-bleu.asia

Website: https://lotus-bleu.asia

KAPYWINGS COMPANY LIMITED acts as the personal data controller and, where it processes customer data directly, as the personal data controller and processor, in accordance with applicable Vietnamese personal data protection legislation.

3. Personal Data Collected

When customers place an order, we may collect the following information:

  • Full name of the customer or recipient
  • Telephone number
  • Delivery address
  • Email address, where provided or required for order communication
  • Order details, including products purchased, quantities, prices, and order reference
  • Selected payment method and payment confirmation information
  • Billing information required for issuing invoices, where applicable
  • Customer communications relating to the order, delivery, return, refund, or complaint

We do not require customers to create accounts, establish passwords, or maintain customer profiles.

We do not request online banking passwords, one-time passwords (OTP), or payment card credentials as part of our checkout process.

4. Purposes of Personal Data Collection and Processing

Customer personal data is collected and processed for the following purposes:

  1. Receiving, confirming, and processing orders placed on lotus-bleu.asia.
  2. Contacting customers when necessary to clarify order details.
  3. Arranging delivery of purchased products.
  4. Verifying bank transfer payments or coordinating Cash on Delivery (COD) payments.
  5. Issuing invoices and maintaining legally required accounting records.
  6. Handling order-related customer service, returns, refunds, and complaints.
  7. Complying with applicable legal and regulatory obligations.

Customer information collected during checkout is not used for unrelated marketing, advertising campaigns, or the creation of customer profiles.

We do not sell or rent customer personal data.

Any new processing purpose requiring additional consent will be presented separately, where required by law.

5. Scope of Personal Data Use

Personal data submitted through the checkout process is used strictly for the operation and fulfillment of orders placed on lotus-bleu.asia, associated customer support, and applicable legal obligations.

Access is limited to authorized personnel and service providers who require the information to perform their assigned functions.

Personal data may be shared only to the extent necessary with:

  • Delivery and logistics providers, to transport and deliver orders.
  • Banking and payment service providers, to verify or complete transactions.
  • Accounting and invoicing service providers, to prepare and maintain legally required records.
  • Website hosting, technical maintenance, or order-management providers, where necessary to operate the checkout and order-processing systems.
  • Competent government authorities, where disclosure is required by law.

These parties receive only the information reasonably necessary for their functions and must handle it in accordance with applicable legal and contractual obligations.

6. Guest Checkout and Customer Accounts

Lotus Bleu Asia does not offer customer account registration.

Customers provide their information directly when placing an order, without creating a username, password, or permanent customer profile.

Order information may remain in our order-management, invoicing, or accounting systems for the periods described below.

The absence of customer accounts does not mean that transaction records are automatically deleted immediately after delivery.

7. Personal Data Retention Period

Personal data is retained only for as long as necessary to fulfill the purposes for which it was collected or to comply with applicable legal obligations.

In particular:

  • Order fulfillment information: Retained while the order is being processed, delivered, and any related customer service or dispute is being resolved.
  • Accounting and invoicing records: Retained for the periods required under applicable Vietnamese accounting, tax, and recordkeeping laws.
  • Order-related communications: Retained only as long as reasonably necessary to resolve the relevant request, complaint, or legal obligation.

Once the relevant purpose has been completed and no legal retention requirement applies, personal data will be deleted, anonymized, or otherwise securely disposed of in accordance with applicable law.

Where a customer requests deletion, we will assess and process the request under applicable Vietnamese personal data protection legislation. Data that must legally be retained may be preserved for the required period, with its use restricted to the relevant lawful purposes.

8. Personal Data Protection and Security

KAPYWINGS takes reasonable organizational and technical measures to protect customer personal data against unauthorized access, disclosure, alteration, loss, or misuse.

These measures may include:

  • Restricting access to authorized personnel.
  • Using appropriate access controls for website administration and order-management systems.
  • Protecting data transmissions and stored information using appropriate security measures.
  • Limiting personal data shared with delivery and service partners.
  • Reviewing and addressing suspected personal data security incidents.

Although we take reasonable precautions, no internet-based system can guarantee absolute security.

Where a personal data breach occurs, KAPYWINGS will take appropriate remedial measures and fulfill applicable notification obligations under Vietnamese law.

9. Customer Rights

Subject to the conditions and exceptions provided by applicable Vietnamese law, customers may exercise their personal data rights, including the right to:

  • Be informed about the collection and processing of their personal data.
  • Access or request information about their personal data.
  • Request correction of inaccurate or incomplete information.
  • Request deletion of personal data where legally permitted.
  • Withdraw consent or object to processing where the relevant legal conditions apply.
  • Request restriction of processing or exercise other applicable statutory rights.
  • Submit complaints or reports concerning the handling of their personal data.

To exercise these rights, customers may contact KAPYWINGS using the details provided in Section 11.

We may request reasonable information to verify the identity of the requester before disclosing, correcting, or deleting personal data.

Requests will be handled within the time limits and according to the procedures required by applicable Vietnamese law.

10. Cookies and Website Technical Data

The website may use cookies or similar technical technologies necessary for essential functions, such as maintaining a shopping cart, supporting checkout, and protecting website security.

Where non-essential cookies, analytics, advertising technologies, or other tracking tools are introduced, KAPYWINGS will provide appropriate notices and obtain consent where required by law.

This policy does not authorize unrelated advertising or profiling based on information provided during checkout.

11. Contact Information and Privacy Complaints

Customers may request access, correction, or deletion of personal data, or submit privacy-related complaints, through the following channels:

LOTUS BLEU ASIA

Personal Data Controller: KAPYWINGS COMPANY LIMITED

Enterprise Registration Number: 0319368013

Registered Head Office: No. 2 Thi Sách Street, Sài Gòn Ward, Ho Chi Minh City, Vietnam

Privacy Contact Email: contact@lotus-bleu.asia

Telephone / Hotline: +84 984 802 785

When submitting a request, customers should provide sufficient information to help us identify the relevant order or personal data.

We aim to acknowledge privacy-related enquiries within 2 business days and will respond to requests within the deadlines prescribed by applicable Vietnamese law.

Customers also retain the right to lodge complaints with competent authorities or seek other remedies as provided by law.


12. Policy Updates and Applicable Law

This policy is intended to operate in accordance with applicable Vietnamese legislation on personal data protection, consumer protection, and e-commerce.

If any provision conflicts with a mandatory legal requirement, the applicable law will prevail.

KAPYWINGS may update this policy to reflect changes in its operations, data-processing activities, or legal requirements.

Material changes affecting personal data processing will be communicated as required by law.

Last updated: 31 October 2026