Privacy Policy
Version 2026-07-16 · Compliant with Personal Data Protection Law No. 91/2025/QH15 (Vietnam)
This policy explains how we collect, use and protect your personal data when you use the iBiz247 digital business-card platform (iCard / iCom).
1. Data controller
Thuy San 247 Media Co., Ltd.
56/5 Tran Hung Dao St., Tan Son Nhi Ward, Ho Chi Minh City
Data contact email: [email protected]
2. Data we collect
- Card information you enter: full name, job title, company, phone, email, address, social links, avatar, bio.
- Account information: login email and password (stored one-way hashed).
- Usage data: page views, button taps, timestamps, IP address, device/browser type.
- For business accounts (iCom): mini-site content, products, and employee cards created by the business.
3. How we use it
- Create and publicly display the card/mini-site as you request (when you press Publish).
- Operate your account, sign-in, password recovery, support.
- Aggregate view/tap statistics so you can track performance.
- Send notifications & emails about features and offers — ONLY with your separate consent, and you can turn it off anytime.
4. Legal basis
We process data based on your consent given at sign-up and when you choose to publish your card. You may withdraw consent at any time.
5. Data sharing
- Information you publish on your card is visible to anyone with the link/QR code — that is the purpose of the product.
- We do NOT sell your personal data to third parties.
- We use infrastructure providers to operate: Cloudflare (CDN/network) and transactional email services. They process data only under our instructions.
6. Storage & security
Data is stored on servers we manage. Passwords are one-way hashed; connections use HTTPS; access is restricted.
7. Your rights
- View and edit your data anytime in the card management page.
- Withdraw consent for marketing notifications/emails (toggle in the management page).
- Request deletion of your account and all personal data — email [email protected].
- Lodge a complaint about data processing with the competent authority under the law.
8. Retention
We keep data until you delete your account or request deletion. Consent logs are retained as compliance evidence as required by law.
9. Policy updates
For material changes we will update the version and notify you. Continued use means acceptance of the updated policy.