Privacy Policy
This Personal Data Protection and Processing Policy (hereinafter referred to as the “Privacy Policy”) describes how STAREC One Member Company Limited (hereinafter referred to as the “Company” or “STAREC”) processes and ensures the information security of organizations and individuals (hereinafter referred to as the “Customer”) and forms an integral part of the respective terms and conditions governing the relationship between the Customer and the Company.
The Customer acknowledges that they have read, understood, and agreed to this Privacy Policy, including any amended or supplemented versions. The Company reserves the right to amend, supplement, and update this Privacy Policy at any time. Such changes will be posted on the website starec.io and the STAREC App (collectively referred to as “STAREC Platforms”) and shall take effect immediately upon posting. Continued access to or use of STAREC Platforms, purchasing from the Company, or participating in our promotional programs and events constitutes acceptance of the updated Privacy Policy.
The collection and processing of Personal Data by the Company are conducted in compliance with relevant laws, this Privacy Policy, and other agreements (if any) between the Company and the Customer.
1. Definitions
To provide experiences, goods, services, and/or consultancy, STAREC and our Data Processors may process the following types of Personal Data (including sensitive data):
- Basic Personal Data: Full name, date of birth, gender, address, nationality, personal images, phone number, ID/Passport information, personal tax code, marital status, family relationships, digital account information, and data reflecting activities or history on cyberspace (including access details to starec.io and other managed platforms).
- Sensitive Personal Data: Religious views; health status and private life (excluding blood group); genetic data; physical and biological attributes; data regarding crimes or offenses collected by law enforcement; banking/payment intermediary service information (identifiers, accounts, transactions, security assets); location data identified via GPS; and other data specified by law as sensitive requiring special protection.
“Customer” includes:
- Parties accessing or using platforms owned, managed, or operated by the Company, including the website starec.io, apps, social media pages, and groups (collectively, “Platforms”);
- Customers purchasing goods or using the Company's services;
- Individuals participating in promotional programs, surveys, games, or other events organized or co-organized by the Company.
“Personal Data” refers to information in the form of symbols, writing, numbers, images, sounds, or similar forms in an electronic environment that is associated with a specific person or helps identify a specific person.
“Data Processing” refers to one or more activities affecting Personal Data, such as: collecting, recording, analyzing, confirming, storing, editing, disclosing, combining, accessing, retrieving, recovering, encrypting, decrypting, copying, sharing, transmitting, providing, transferring, deleting, or destroying personal data.
“Data Processor” refers to organizations or individuals that process data on behalf of STAREC through a contract or agreement with STAREC.
2. Types of Personal Data Processed
To provide experiences, goods, services, and/or consultancy, STAREC and our Data Processors may process the following types of Personal Data (including sensitive data):
- Basic Personal Data: Full name, date of birth, gender, address, nationality, personal images, phone number, ID/Passport information, personal tax code, marital status, family relationships, digital account information, and data reflecting activities or history on cyberspace (including access details to starec.io and other managed platforms).
- Sensitive Personal Data: Religious views; health status and private life (excluding blood group); genetic data; physical and biological attributes; data regarding crimes or offenses collected by law enforcement; banking/payment intermediary service information (identifiers, accounts, transactions, security assets); location data identified via GPS; and other data specified by law as sensitive requiring special protection.
3. Methods of collection
STAREC and our Data Processors may collect Personal Data through:
- Direct Information: Provided by the Customer during transactions, promotional participation, surveys, account registration, or customer care interactions.
- Platform Interaction: Information shared publicly by the Customer on Platforms (e.g., usernames, avatars, comments).
- System-Generated Data: Data generated from the Customer's access to starec.io and other Platforms or from transactions.
- Third-Party Sources: Sources for which the Customer has consented to share data with STAREC.
- Automated Methods: Using electronic means or other methods compliant with the law
4. Purposes and Scope of Collection
The Customer agrees to allow STAREC to process personal data for the following purposes:
- Service Provision: Delivering and evaluating STAREC’s products and services.
- Account Management: Recognizing, verifying, and maintaining accurate Customer information; ensuring system security.
- Customer Support: Assisting with account management, purchases, and promotional participation.
- Contractual Compliance: Exercising rights and obligations under agreements; investigating and resolving inquiries or complaints.
- Security & Fraud Prevention: Detecting and preventing identity theft, fraud, money laundering, and other illegal activities.
- Marketing & Research: Conducting market research, surveys, and promotional activities. Contacting the Customer for direct or indirect marketing, gift exchange, and rewards.
- Development: Analyzing trends and statistics to improve existing products and develop new ones.
- Communications: Sending updates, advertisements, invitations, and holiday greetings from STAREC and its partners.
- Legal Compliance: Storage, management, and backup for troubleshooting or legal regulatory compliance.
5. Data Storage Duration
Personal Data will be stored for the period necessary to fulfill the defined purposes or to ensure compliance with relevant legal regulations. Data is secured on the servers of the Company and/or its authorized data storage partners.
6. Data Sharing
STAREC does not sell Personal Data. We share data only within the necessary scope as follows:
- - STAREC employees and personnel.
- - Parent companies, subsidiaries, affiliates, or other companies within the Economic Group of which STAREC is a member, and partners with mutual customer care agreements.
- - Service providers (IT, marketing, logistics, legal, audit, payment processing, cloud storage, etc.).
- - Parties involved in corporate restructuring (mergers or acquisitions).
- - Third parties responsible for data processing under contract with STAREC.
- - Competent State authorities as required by law or for the protection of the rights and safety of STAREC and its Customers.
7. Personal Data Protection
STAREC applies administrative and technical measures to protect personal data throughout the processing cycle. However, since hardware/software failures or external incidents beyond our control may occur, we continuously update our security protocols to minimize risks such as data leakage or loss.
8.Customer Rights and Obligations
8.1 Rights of the Data Subject:
- The right to be informed, the right to consent, and the right to access and edit data.
- The right to withdraw consent, request data deletion, or restrict/object to data processing.
- The right to complain, denounce, or initiate lawsuits and claim damages as per law.
- Note: Withdrawing consent or requesting deletion may affect the validity of contracts and limit the Customer's access to certain products, services, or experiences.
8.2 Execution of Rights:
Customers can perform these rights by logging into their account on the Platforms or by contacting STAREC via the information in Section 9.
8.3 Marketing Preferences:
Customers may unsubscribe from promotional messages or adjust notification settings on their devices.
8.4 Accuracy of Information:
The Customer is obligated to ensure that the provided information is complete, accurate, and updated.
8.5 Third-Party Data:
If providing third-party personal data (e.g., recipient info), the Customer warrants that they have obtained the necessary consent from that third party.
9. Complaint Handling Mechanism
For any inquiries or complaints regarding the misuse of personal data, please contact:
- Email: cskh@starec.io
- Hotline: 028 2250812
The complaint resolution process follows the general procedure established in the General Terms and Conditions of Transaction of the starec.io website. If unsatisfied with the resolution, the Customer may submit the complaint to competent State authorities.
Payment Policy
The payment system on STAREC's website/app is provided by payment gateway partners that are legally licensed to operate in Vietnam (“Payment Gateway Partners”). Accordingly, STAREC's payment security standards ensure compliance with the security standards of the Payment Gateway Partners.
When customers pay using payment services on STAREC's website/app (cashless payment), STAREC collects the following information:
- - Customer's order code
- - Order value (the amount paid by the customer)
- - Time of customer payment
- - Transaction reference code from the Payment Gateway Partner
STAREC does not collect or store bank account details, account statements, payment card information, or important payment card data used for payment, including but not limited to card details, CVV numbers, or other legally equivalent authentication codes. Your payment information will be stored and secured on our Payment Gateway Partner(s).
Shipping Policy
This Shipping and Delivery Policy outlines the terms and conditions regarding the transport, inspection, and handover of products between STAREC Company Limited (hereinafter referred to as "the Company") and the Customer.
1. Scope of Application
This policy applies to all transactions involving products, equipment, and digital services conducted via our website, e-commerce platforms, or direct contracts with STAREC.
2. Delivery Methods
Depending on the nature of the product, STAREC applies the following delivery methods:
- Physical Delivery (Hardware, equipment, consumer goods):
- Direct Delivery: Applicable for inner-city orders or industrial equipment requiring on-site installation.
- Third-Party Logistics (3PL): Partnership with reputable carriers (GHTK, Viettel Post, DHL, etc.) for nationwide delivery or e-commerce platform orders.
- Digital Delivery (Software, licenses, IT solutions):
- Handover via Email or internal management systems.
- Transfer of user manuals and online activation codes.
3. Delivery Lead Times
- Inner-city areas: 1 – 2 business days from the date of order confirmation.
- Provincial areas: 3 – 5 business days depending on geographical location.
- Specialized Products/Industrial Equipment: Delivery times will be specifically negotiated based on the progress stated in the sales contract.
- Software Services: Handed over immediately after completion of payment procedures or according to the committed project timeline.
4. Shipping Fees
- Free Shipping: Applied to orders meeting the minimum value requirement as per current promotional programs (if applicable).
- Standard Shipping Rates: For regular orders, shipping fees will be clearly displayed at checkout or communicated to the customer in advance.
- Installation Fees: For equipment requiring technical support, costs will be quoted separately or included in the service package as per agreement.
5. Inspection and Receipt Process
To ensure customer rights and STAREC's reputation, the receipt process is regulated as follows:
- Co-inspection: Customers have the right and responsibility to check the external condition of the package (seals, packaging integrity) before signing for receipt.
- Content Verification: For technical equipment, customers should verify the quantity, model, and included accessories against the invoice/delivery note.
- Dispute Handling: If any damage or discrepancy is found, please refuse the delivery and contact STAREC’s Hotline immediately for timely resolution.
6. Liability for Goods
- The Company is responsible for risks (loss, damage) to the goods during the transportation process from STAREC’s warehouse to the Customer’s delivery address.
- Once the Customer has signed for the goods without any noted comments or complaints, the Company shall no longer be held liable for external damage or discrepancies (except for technical defects covered under the warranty policy).
7. Accompanying Documents
Each order from STAREC will include the following documents (depending on the transaction type):
- - Value Added Tax (VAT) Invoice – Hard copy or Electronic version.
- - Delivery Note and Handover Minutes.
- - Warranty Card or User Manual (if applicable).