Privacy policy
Regulations on personal data protection according to Decree No. 13/2023/ND-CP
Personal Data Protection
This policy is issued pursuant to Decree No. 13/2023/ND-CP dated April 17, 2023 on personal data protection. HonTruyen commits to protecting User privacy and personal data.
Article 1. Personal Data Collected
1.1. Data provided directly by Users:
- Full name, email address upon account registration;
- Payment details when registering for paid subscription services (encrypted, card numbers not saved in plain text);
- Content of works uploaded by the User;
- Contact content when Users contact support.
1.2. Automatically collected data:
- IP address, browser type, operating system;
- Access logs: pages viewed, time, reading duration;
- Cookie data to maintain login sessions and analyze user behavior.
Article 2. Purposes of Data Processing
- Provide, operate, and improve Platform services;
- Verify identity and manage User accounts;
- Process payment transactions and send electronic invoices;
- Send service notifications and policy updates (mandatory);
- Send newsletters and promotions as subscribed by the User (can unsubscribe at any time);
- Prevent fraud, Terms of Use violations, and comply with legal obligations;
- Analyze statistics to improve user experience (data is anonymized).
Article 3. Retention Period
- Account data: Throughout the account activation period and up to 02 years after account deletion.
- Transaction logs: 05 years under accounting regulations.
- System logs (access logs): 12 months.
- Violation data: 03 years from the date of the last recorded violation.
Article 5. Rights of the Data Subject
According to Article 9 of Decree 13/2023/ND-CP, Users have the following rights:
- Right to be informed: Know about the processing of their personal data;
- Right to consent or not consent: Decide to allow or not allow data processing;
- Right to access: View personal data that HonTruyen is storing;
- Right to correct: Request updates to inaccurate data;
- Right to delete: Request deletion of data as regulated in the Decree;
- Right to restrict processing: Request suspension of certain processing activities;
- Right to object: Object to data processing for direct marketing purposes.
To exercise the above rights, Users send request to: [email protected]. HonTruyen will respond within 72 hours.
Article 6. Data Security
HonTruyen applies appropriate technical and organizational measures to protect data: SSL/TLS encryption for data transmission; internal access control according to the principle of least privilege; periodic backups and disaster recovery plans.