This Policy covers personal data we collect through the Website and through any other channels: email, phone, or paper Purchase Orders, social media networks, in connection with providing the Managed Sourcing or Introduction Service. Personal data is all data that can be related to you personally, e.g. name, company, e-mail addresses, user behavior. Our services and website are not directed at children under the age of 16. We do not knowingly collect data from children.

1. General Introduction

www.eprintpack.vn (“Our Website”) is operated by EPRINTPACK COMPANY LIMITED, enterprise registration No. 0317165667, head office at 4th Floor, 34 Nguyen Binh Khiem, Tan Dinh Ward, Ho Chi Minh City, Vietnam (“We,” “us,” “ePrintPack”).

This Policy is governed primarily by Vietnamese law, reflecting ePrintPack's Vietnam base. It explains what personal data we collect, why, how we protect it, and what rights you have. It applies to all methods of accessing Our Website and to business contacts of our customers, prospective customers, and website visitors.

This Policy is the privacy counterpart referenced in Section 15 of ePrintPack's Terms of Service (ToS) (“personal data collected through the Website or in connection with the Services is handled in accordance with ePrintPack's Privacy Policy”). Terms defined in ePrintPack’s ToS (“Customer,” “Purchase Order,” “Managed Sourcing Model,” “Introduction (Brokerage) Model”) carry the same meaning here.

This Policy reflects Law No. 91/2025/QH15 (PDPL) and Decree No. 356/2025/ND-CP, effective January 1, 2026, which replaced the repealed Decree No. 13/2023/ND-CP, as the primary regime, with Section 8's acknowledgment that other countries' data protection laws may apply on top of Vietnamese law depending on where a given visitor or Customer contact is located, not as competing, equally-weighted regimes.

We only require your consent for processing when you have given a clear, affirmative, and verifiable opt-in; never through a pre-ticked box, bundled account-creation consent, or other default/implied mechanism. Simply visiting or browsing Our Website is not, by itself, treated as consent to anything beyond what is necessary to display the Website to you.

2. What We Collect

• Account and contact data: email address, phone number, company name.
• Usage data: pages viewed, links clicked, and other data about how you interact with Our Website.
• Technical data: IP address, browser type, language settings, access times, and referring/exit pages.
• RFP data: specifications and business details needed to process a sourcing request under a Purchase Order, whether under the Managed Sourcing Model or the Introduction (Brokerage) Model (see ToS §2).
• Analytics and site-interaction data: where analytics tools are enabled (see §9), device/browser identifiers, approximate location derived from IP, and click, scroll, and session-replay data captured through those tools.

You are responsible for safeguarding your own login credentials and must notify us promptly of any suspected unauthorised use of your account.

3. How We Use Your Information and Your Consent Choices

We use your information to provide and administer the Service, respond to your requests, manage account security, comply with legal requirements, and improve our offering using aggregated or de-identified data where feasible.

The following uses require your separate, affirmative consent:

• sending marketing or promotional communications ("Communication Materials");
• using your data for advertising, sponsored content, or targeted-promotion purposes; and
• using your data for market/customer analysis beyond what is needed to deliver the Service you requested.
• using non-essential analytics cookies or similar technologies to analyze how you use the Website (see §9).

Marketing communications are sent only to a contact who has given a clear, affirmative, and verifiable opt-in, never through a pre-ticked box, bundled account-creation consent, or other default/implied mechanism (see ToS §3)

You may withdraw consent to any of the above at any time via the unsubscribe link in any communication, via the cookie-preference control described in §9, or by emailing admin@eprintpack.vn, without affecting your ability to use the core Service.

4. Who We Share Your Information With

4.1 Managed Sourcing Model

We share personal data with competent government authorities where required by Vietnamese law. Each is bound by a written confidentiality or data-processing agreement limiting use to the stated purpose.

4.2 Introduction (Brokerage) Model

When you engage our Introduction service, we share your contact and specification data with the manufacturer(s) we introduce you to, so that you and the manufacturer can begin direct dealings. Once introduced, that manufacturer processes your data independently, as its own controller; ePrintPack does not control, and is not responsible for, the manufacturer's handling of your data from that point forward. We will inform you, at the time of introduction, which manufacturer(s) are receiving your data.

Once direct dealings begin, ePrintPack is not a party to that relationship, and this Policy does not extend ePrintPack's data responsibility any further than the ToS extends its production or performance liability (see ToS §7).

4.3 Website Analytics & Technical Service Providers

Where enabled, we use third-party analytics and site-measurement tools, for example Google Analytics, Google Search Console, and Microsoft Clarity, to understand how visitors use Our Website. These providers act as independent processors (Google, Microsoft) of technical and usage data described in §2 and §9. We do not sell this data, and we do not permit these providers to use it for their own advertising purposes beyond what their standard product terms already allow (which you can review at their respective privacy policies).

We do not sell your personal data in either model.

5. Cross-Border Data Transfers

Your personal data may be transferred outside Vietnam, including to cloud hosting/infrastructure providers, to you or your organisation directly when you are an overseas customer, to logistics or payment partners located outside Vietnam, under the Introduction Model to manufacturers as described in §4.2, and to the analytics providers named in §4.3 (Google and Microsoft each process data on servers that may be located outside Vietnam). Where a transfer meets the threshold requiring a Cross-Border Transfer Impact Assessment (CTIA) or other filing under Decree 356, we will complete it before the transfer occurs.

6. Data Retention

We retain personal data for as long as needed to provide the Service and for 3 years afterwards to meet legal, accounting, or dispute-resolution needs. Analytics data collected under §9 is retained according to each provider's configured retention setting, which we set as short as the tool's reporting purpose allows.

7. Your Rights

Subject to applicable law, you have the right to access, rectify, and erase your data; object to or restrict certain processing, including marketing/profiling and analytics; withdraw consent at any time; and lodge a complaint with the Ministry of Public Security (Vietnam) or, where applicable, your local data protection authority.

Note: once your data has been disclosed to a manufacturer under the Introduction Model (§4.2), exercising rights over that manufacturer's own subsequent processing requires contacting the manufacturer directly. ePrintPack can only act on data it still controls.

8. International Visitors and Additional Notices

If the data protection or privacy laws of your home jurisdiction apply to our processing of your information, typically because you interact with our website, request quotes, or initiate service inquiries from outside Vietnam, we aim to respect the mandatory local requirements that apply to us. This global framework serves as an additional commitment and does not alter the fact that Vietnamese law remains the primary governing regime for this Policy (see §1). In alignment with our Terms of Service (ToS), mandatory rules of a visitor's home jurisdiction apply only to the extent required by that jurisdiction’s laws, without displacing Vietnamese law as the controlling framework.

9. Cookies

Our Website uses cookies and similar technologies, grouped into three categories:

• Strictly necessary cookies: required for the site to function (e.g., session security, load balancing). These do not require consent and cannot be switched off.
• Functional cookies: remember preferences (e.g., language). Used only with your consent unless strictly necessary for a feature you actively requested.
• Analytics cookies: where enabled, used to understand site usage. Used only with your consent, given through the cookie banner described below.

Where we deploy analytics tools, we currently anticipate the following (final selection to be confirmed before launch):

• Google Analytics (GA4): measures traffic, page views, and general usage patterns using cookies and similar identifiers. Requires your consent as an analytics cookie.
• Google Search Console: a tool ePrintPack uses to see how Our Website performs in Google Search (queries, impressions, click-through data). Search Console does not itself place tracking cookies in your browser; it reports aggregated search-performance data to us as the site owner, not individual visitor behavior. It is listed here for transparency about our use of Google's tools, not because it requires cookie consent in the same way as GA4 or Clarity.
• Microsoft Clarity: captures heatmaps and session replay to help us understand navigation and usability issues. Uses cookies and, unlike GA4, may capture visual session detail; Clarity applies masking so that visible or entered personal information is not captured or stored. Requires your consent as an analytics cookie.

Consent mechanism. Before any functional or analytics cookie is set, Our Website will show a cookie banner offering clear choices. We do not fire analytics scripts until you have made a choice.

Consent status will only apply going forward from when you make your choice; consult the CMP or cookie-management tool implementation notes for how consent withdrawal affects already-set cookies.

You can also manage cookie preferences through your browser at any time.

10. Security and Breach Notification

We implement technical and organisational measures to protect your personal data against unauthorised access, loss, or disclosure.

If a personal data breach occurs, we will notify the Ministry of Public Security within 72 hours of discovery. Where the breach involves biometric or location data, or otherwise creates a high risk to your rights, we will also notify affected individuals within 72 hours where feasible, or as soon as feasible thereafter.

11. Automated Decision-Making and Profiling

We do not engage in automated individual decision-making or profiling that produces legal or similarly significant effects on data subjects.

12. Third-Party Websites and Services

Our Website may link to third-party websites or services outside our control. We are not responsible for the privacy practices of those third parties. This section does not apply to manufacturers named in §4, whose data handling is governed by this Policy (Managed Sourcing) or by their own practices after introduction (Introduction Model, §4.2), nor to the analytics providers named in §4.3, whose role and data flows are described there.

13. Privacy Contact

ePrintPack Company Limited

Address: 4th Floor, 34 Nguyen Binh Khiem Street, Tan Dinh Ward, Ho Chi Minh City, Vietnam

Email: admin@eprintpack.vn

Phone: +84 (0)91 380 1390 (Mr. Kiet Toan Tran)

14. Complaints Process

• Submit your complaint to us using the contact details in Section 13.
• Our team will review and respond.
• If unresolved, you may escalate to the Ministry of Public Security (Vietnam) or, where applicable, your local data protection authority named in Section 8.

15. Changes to This Policy

We may update this Policy to reflect changes in our practices or in applicable law. Material changes will be notified to registered users at least 30 days before taking effect. The “last updated” date at the top will always reflect the current version.

16. Application Period

This Policy applies during the operating period of Our Website.

 

 

Last updated September 18, 2026