Information security policy

I. COLLECTION OF PERSONAL INFORMATION

SSVNwill collect customer information including: full name, mailing address, email, phone number, user name, and password to set up personal profile. Customer information is guaranteed to be kept confidential.

This information includes the mandatory information declared by the customer when registering an account on SSVN.

When collecting customers’ personal information, SSVN aims to provide the most practical utilities to the customer, protect their rights, and ensure respect for their privacy. Within the scope of terms, SSVN commits not to sell, rent, or exchange the information collected from customers to any subjects other than those listed in the regulations.

II. USE OF PERSONAL INFORMATION

Information collected from customers is used within the scope of:

-Provide consulting services to customers according via the information provided.

-Send customers notifications about activities between SSVN and partners or customers.

– Ensure the safety of customers when there is a risk of destruction or appropriation of customer accounts, or the impersonation customers.

-Contact customers to provide goods/services upon purchase. -Confirm information when performing purchase and delivery activities.

– Carry out surveys and promotional activities. Provide updated information on operating terms that affect customers.

Customer information security is the top priority of SSVN when collecting information data. SSVN maintains the standard for protection of personal information.

SSVN requires password confirmation when logging in to prevent unauthorized access to the customer’s personal information system. In case the user does not log out on the website, the system will automatically do so after a period of time.

III. INFORMATION STORAGE PERIOD

1. SSVN will store information collected from the user from the time the user declares the information until the account is deactivated.

2. SSVN Survival Skills will retain and use customer information as necessary to comply with legal obligations, resolve disputes, and enforce the SSVN agreements.

3. In case the user requests a cancellation to the Administration Board, the user’s information will be processed and deleted from the system after three days from the time the user’s request.

IV. CHANGING OR REMOVING PROFILE INFORMATION

Customers can check, update, adjust, or cancel their personal information in the following ways:

+Customers can log in to their account, go to the personal information section, and edit their personal information.

+Customers can call the Management Board’s support phone number or email and request to edit personal information.

V. COMMITMENT TO SECURITY OF CUSTOMER INFORMATION

V.1 Policy to protect personal customer information

SSVN’s Management Board is commited to protecting customers’ personal information according to the following statements:

-Commitment to absolute confidentiality according to SSVN personal information protection policy.

-Commitment to absolute confidentiality in all online transactions including transaction history and digitized documents located in a secure central data area.

-Commitment not to use, transfer, provide, or disclose information to any other third party without the customer’s permission, except for other instances specified in the regulations. This mechanism is according to the provisions of law.

-In case of technical errors or data attacks, the Management Board is responsible for notifying the authorities and customers within three days of the incident occurring.

V.2 Payment information protection policy

SSVN is committed to ensuring the strict implementation of necessary security measures for all payment activities performed through SSVN e-commerce transactions.

*The payment transaction policy ensures compliance with international and domestic cards (internet banking) with security standards of Payment Gateway Partners (VNPAY) including:

•Customer’s financial information will be protected throughout the transaction process using SSL (Secure Sockets Layer) protocol.

•One-time password (OTP) sent via SMS to ensure authenticated account access.

•128-bit MD5 encryption standard.

•Information security principles and regulations in the banking and finance industry according to regulations of the State Bank of Vietnam.

*SSVN’s payment transaction security policy applies to all users.

•SSVN only saves the encrypted string provided by the Payment Gateway Partner to SSVN. SSVN does not directly store customer card information. Security of customer payment card information is performed by a licensed Payment Gateway Partner.

•For international cards: customer’s payment information is not saved on the SSVN system. The Payment Gateway Partner will store and secure it.

•For domestic cards (internet banking), SSVN only stores order codes, transaction codes, and bank names.

VI. DETAILS OF INFORMATION SHARING

1. 1. SSVNAdministration Board may share and disclose the user’s personal information when doing so is necessary to protect the user’s rights, ensure transaction safety for the user, and at the request of a third party that has the authority to.

2. SSVN can disclose users’ personal information at the request of lawyers as well as competent authorities.

3. If SSVN is involved in a merger or is acquired in part or in all, customers will be notified via email or through official news on the SSVN website regarding any change in ownership or use of your personal information, as well as any of your rights related to your personal information to any third party with the consent of the user.

4. SSVN and its partners use cookies to remember customer information when you visit the website. Cookies are a piece of information that a website stores in the computer browser or on the customer’s hard drive when the customer visits any website.

5. SSVN uses a third party service to monitor the website and to track the behavior of customers accessing the website. However, SSVN does not have the right to participate or modify cookies. The information we obtain through third-party tracking is completely anonymous and used to improve our services and marketing effectiveness.

7. Like most websites, we automatically compile information and store it in a history file. This information includes your internet address, browser type and language, service provider, internet service, incoming and outgoing pages, operating system, date, and click information. We use this information to learn and analyze trends, to improve the website, to research customer behavior, and collect marketing data.

VII. INFORMATION STORAGE

All user information is stored at:

SSVN SURVIVAL SKILLS CO. LTD

232/6 Vo Thi Sau, Ward 7, District 3, Ho Chi Minh City, Vietnam

Phone number: 0938393230

Email: info@survivalskills.vn

Some items in the SSVN privacy policy are subject to change. If we decide to change the way we collect, use, or share information, we will take steps to notify members by email and explain the change and the informed choice as to whether or not to allow the use of customers’ personal information through the new changes. If you have any questions or concerns about the policy system, please contact SSVN for timely support.

All right reserved Social enterprise SSVN Survival Skills Â