• Home/
  • INFORMATION SECURITY POLICY

INFORMATION SECURITY POLICY

Privacy Policy

1. Introduction

C&M Factory respects privacy and is committed to protecting the personal data of customers, partners, suppliers, employees, and candidates. This policy describes how we collect, use, store, secure, and share information based on the principles of lawfulness – transparency – data minimization.

2. Scope of Application

Applies to online and offline activities of HUNG PHUOC LOI COMPANY LIMITED (C&M) and C&M RUBBER & PLASTIC COMPANY LIMITED, including websites, customer care systems, commercial transactions, recruitment, and partnerships.

3. Purposes & Scope of Collection

Purposes

  • Provide, operate, maintain, and improve products/services.
  • Technical support, customer service, handling complaints, and responding to requests.
  • Analyze experiences, measure effectiveness, and prevent fraud.
  • Conduct marketing/promotions when permitted or with explicit consent.
  • Comply with legal requirements and reporting obligations.

Data Scope

  • Identifiers: full name, email, phone number, address.
  • Transaction & usage data: purchase history, interaction logs.
  • Technical data: IP address, device type, browser, cookies.
  • Recruitment: resume, experience, qualifications (if any).
  • Sensitive data (if any): collected only when permitted by law and/or with explicit consent.

4. Collecting & Managing Entities

HUNG PHUOC LOI COMPANY LIMITED (C&M)
Abbreviation: C&M
Tax Code: 0312684027
Address: 15/16 Ngo Quyen, Cho Lon Ward, Ho Chi Minh City, Vietnam
Postal Code: 749.471

C&M RUBBER & PLASTIC COMPANY LIMITED
Abbreviation: C&M
Tax Code: 0318920217
Address: 15/16 Ngo Quyen, Cho Lon Ward, Ho Chi Minh City, Vietnam
Postal Code: 749.471

5. Retention Period

Data is retained until the processing purposes are fulfilled or as required by law; thereafter it will be deleted, anonymized, or archived as legally required.

6. Security Commitments

  • Apply technical & organizational measures: transport encryption, access control, backups, role-based authorization, and security monitoring.
  • Train personnel, sign confidentiality undertakings, and follow incident response procedures (detect – isolate – remediate – notify).
  • Do not sell personal data; use only for proper purposes and within the minimum necessary scope.

7. Third-Party Sharing

Any sharing (if any) follows the principle of data minimization and strict controls with processors acting on our behalf (infrastructure, payments, email, logistics, etc.) under confidentiality agreements; or as legally required by authorities; or in mergers/acquisitions as prescribed by law.

8. Rights & How to Request Processing

  • Access, rectification, erasure, restriction of processing, or objection to processing.
  • Withdraw consent (without affecting the lawfulness of prior processing).
  • Request data portability (when technically feasible).
  • Lodge complaints with competent supervisory authorities.

To exercise your rights, please submit a request at Contact. We may need to verify your identity before processing.

9. Legal Terms & Responsibility

Customers are responsible for the accuracy of information provided. Using the website means you accept this policy and any other applicable terms of use (if any). In case of discrepancies between the English translation and the Vietnamese version, the Vietnamese version shall prevail.

10. Policy Changes

This policy may be updated when there are changes in laws or processing activities. The latest version will be published on this page with its effective date; for material changes, we may provide additional notices.