PRIVACY POLICY OF DR. EYE AESTHETIC CLINIC

The privacy policy of Dr. Eye Aesthetic Clinic informs users how we use the personal information collected on this website. Please read the Privacy Policy carefully before using the website or submitting any personal information.

1. INTRODUCTION

Welcome to the platform dreye.vn operated by the Anti-Aging Joint Stock Company Dr. Eye.
Dr. Eye is committed to fulfilling its responsibilities regarding information privacy in accordance with the regulations on personal information protection under Vietnamese law (Privacy in current legal documents and Decree 13/2024/ND-CP on personal data protection).
Dr. Eye is dedicated to respecting the privacy and concerns of all users regarding our website.

2. TERMINOLOGY EXPLANATION

“Dr. Eye” or “Clinic” or “We”: Refers to the Anti-Aging Joint Stock Company Dr. Eye.
“Policy”: Refers to the personal data protection policy at the Anti-Aging Joint Stock Company Dr. Eye.
“Legal Regulations”: Refers to all legal normative documents of the Socialist Republic of Vietnam, including circulars, directives, decisions, and guidelines from competent state agencies regulating the activities of Dr. Eye and its relationship with Data Subjects.
“Personal Data” means data about an individual through which their identity can be determined. Common examples of personal data may include name, ID number, and contact information.
“Data Subject”: Includes all clients using the products/services provided by Dr. Eye, clients who register for an account or schedule an appointment, employees of Dr. Eye, shareholders, and/or other individuals related to or arising from the provision of products, services, or other legal relationships with Dr. Eye.
“Third Party”: Refers to individuals or organizations not belonging to Dr. Eye and legally bound to Dr. Eye through contracts, agreements, or other commitments.
“Consent”: Refers to the confirmation and agreement that you accept the methods, requirements, and policies described in this Privacy Policy, and thereby you confirm that you are aware of and agree to allow us to collect, process, and store your personal data through your use of our appointment scheduling services, product purchases, or account registration with us.

3. PURPOSE AND SCOPE OF APPLICATION

a. This personal data protection policy aims to transparently inform Data Subjects about all information related to the processing of personal data at Dr. Eye;

b. This personal data protection policy will address:

(i) Detailed information about the types of personal data of Data Subjects that We collect;

(ii) How We process the personal data of Data Subjects;

(iii) The purposes for which We process the personal data of Data Subjects;

(iv) Information about other organizations and individuals involved in the processing of personal data;

(v) The duration for which We store the personal data of Data Subjects;

(vi) The rights and obligations of Data Subjects;

(vii) Potential adverse events that may occur during the processing of personal data;

(viii) How Data Subjects can contact Us.

4. OUR STATEMENT AND ASSURANCES

a. Protecting the personal data of Data Subjects is a top priority for Us. Therefore, We always apply personal data protection measures with the utmost effort and responsibility, regularly reviewing and updating to ensure that the rights of Data Subjects are not affected.

b. Dr. Eye is committed to processing personal data safely, fully complying with Legal Regulations in protecting the personal data of Data Subjects. Dr. Eye only processes the personal data of Data Subjects in accordance with Legal Regulations, this Policy, and any contracts/agreements made with Data Subjects.

c. Dr. Eye continuously enhances technical security measures to prevent unauthorized access, reading, use, alteration, provision, destruction, or other processing of personal data. We also regularly review and update management and technical security measures when processing the personal data of Data Subjects.

d. Dr. Eye disseminates the Policy and regulations on personal data protection to all employees. In the event of employee violations of the personal data protection regulations, Dr. Eye will take disciplinary action in accordance with regulations.

5. METHODS OF COLLECTING PERSONAL DATA BY DR. EYE

We will collect personal data about you:

When you register for an account or schedule an appointment to use our services.
When you submit any forms, including applications or other forms related to any of our products and services, either online or otherwise.
When you interact with us, such as through phone calls (which may be recorded), correspondence, in-person meetings, or social media applications.
When you conduct transactions through our App or Website.
When you provide feedback or submit complaints to us.

6. TYPES OF PERSONAL DATA COLLECTED AND PROCESSED BY DR. EYE:

6.1. The personal data that Dr. Eye may collect includes basic personal data and sensitive personal data (according to privacy regulations and Decree 13/2024/ND-CP) as listed below:

Full name;
Date of Birth;
Gender;
Occupation;
Phone Number;
Address;
Email Address;
Signature, handwriting;
Medical history, examination records;
Reason for consultation;
Before and after treatment images;
Information about the diagnosis and methods for eye-area rejuvenation treatment;
Information about medical history related to eye-area rejuvenation treatment;
Information about other necessary tests and examinations for treatment;

6.2. You agree not to provide us with any inaccurate or misleading information. Additionally, you will notify us of any inaccuracies or changes to your personal data.

6.3. If you do not wish for us to collect the aforementioned personal information/data, you may choose to opt-out at any time by notifying us in writing at the Gmail address: cskh@dreye.vn or by directly requesting via hotline 0899099799.

7. PURPOSES FOR WHICH DR. EYE PROCESSES PERSONAL DATA

7.1. We may collect, process, and share the personal data of the Data Subject for business, operational, management, and operational purposes of Dr. Eye, such as:

To maintain quality, develop, and provide utilities, products, or services, and to schedule your eye-area rejuvenation consultation with us.
To manage, operate, and provide services and products with the highest quality and timeliness to you.
To verify the identity of the Data Subject, recognize/identify clients for the purpose of providing Dr. Eye’s products/services or for recruitment purposes.
To contact you via phone, text message, and email for the purpose of managing your relationship with us.
To conduct research activities, analyze treatment effectiveness, and assess the quality of products/services we have provided to you for improvement purposes.
To regularly provide you with programs and offers.
To comply with legal requirements regarding the storage of medical records and examination records as mandated by law in the healthcare sector.

7.2. The purposes for which we may collect, process, and store your personal data depend on the current circumstances, and those purposes may not be listed above. In such cases, we will inform you of the other purpose and seek your permission before proceeding.

8. DR. EYE SHARES PERSONAL DATA

8.1. To enhance the experience of the Data Subject at Dr. Eye, with the consent of the Data Subject in any manner or in compliance with Legal Regulations, Dr. Eye may share the personal data of the Data Subject with Third Parties. Specifically:

Suppliers of products and services for Dr. Eye, including but not limited to IT services, marketing services, market surveys, and training services.
Authorized government agencies.

8.2. The sharing of the Data Subject’s personal data with Third Parties must ensure that the Third Party only uses the necessary personal data for the purpose of performing the functions and tasks designated by Dr. Eye and/or in accordance with Legal Regulations.

9. MEASURES TO PROTECT AND STORE CLIENT INFORMATION AT DR. EYE

9.1. We implement various security measures and continually strive to ensure the safety of your personal data on our systems in accordance with privacy regulations and Decree 13/2024/NĐ-CP.

9.2. However, Dr. Eye does not guarantee the prevention of 100% of all unauthorized access. In the event of unauthorized access beyond our control, Dr. Eye is not responsible in any form for any claims, disputes, or damages arising from or related to such unauthorized access.

9.3. We will maintain personal data in accordance with current legal regulations on the protection of personal information confidentiality. Upon your request, we will adjust, cancel, or delete data information from our processing and storage systems.

9.4. We reserve the right to refuse to delete or destroy data if your request does not comply with current privacy regulations, or when we need to comply with legal obligations, resolve disputes, and enforce agreements.

10. COMMITMENT OF DR. EYE REGARDING THE COLLECTION, PROCESSING, AND STORAGE OF CLIENT INFORMATION

10.1. Dr. Eye respects the consent rights regarding the collection, processing, and storage of client data and will not collect, process, or store client data in cases where the client has declined through the method specified in section 6.3 of this policy.

10.2. Dr. Eye always implements strict control and security processes for client data to prevent unauthorized personal data collection from unauthorized systems and service equipment (according to the provisions of Article 22 of Decree 13/2024/NĐ-CP on personal data protection) through technical measures, while also notifying clients and authorities if incidents occur within 72 hours.

10.3. Dr. Eye does not engage in activities of collecting, transferring, buying, or selling client data to third parties without the client’s consent, in violation of legal regulations.

10.4. Dr. Eye always welcomes and processes client requests related to their own data to fully exercise the rights related to personal information confidentiality as stipulated in Articles 9, 12, 13, 14, 15, 16 of Decree 13/2024/NĐ-CP on personal data protection.

11. HOW CLIENTS CAN FULLY EXERCISE THEIR RIGHTS TO WITHDRAW CONSENT, REQUEST RESTRICTION OF PROCESSING, OBJECT TO PROCESSING, REQUEST PERSONAL DATA, ACCESS OR MODIFY THE INFORMATION YOU HAVE PROVIDED

11.1. Withdraw Consent, Request Restriction, Object to Data Processing

Clients may withdraw their consent, request restrictions, or object to the collection, processing, or use of their personal data that we hold or control by emailing cskh@dreye.vn or making a direct request via hotline 0899099799.

11.2. Request for Personal Data

You have the right to request that we provide your Personal Data to you by sending a request to cskh@dreye.vn or making a direct request via hotline 0899099799.
Your request will only be considered valid and accepted for processing when all necessary information is provided and the correct form is used in accordance with privacy regulations and Decree 13/2024/NĐ-CP.
We reserve the right to refuse to provide your personal data if such rights conflict with legal regulations regarding the protection of personal information confidentiality.

11.3. Request to Correct Personal Data

We will need sufficient information from you to verify your identity as well as the nature of your request in order to address it. Therefore, please submit your written request by emailing cskh@dreye.vn or making a direct request via hotline 0899099799.

12. ADDRESSING INQUIRIES AND COMPLAINTS RELATED TO THE COLLECTION, PROCESSING, AND STORAGE OF CLIENT DATA

If you have any inquiries, requests for protection, or complaints regarding our privacy protection methods/policies, please contact us at the following information:

DR. EYE ANTI-AGING JOINT STOCK COMPANY

Address: 7 Nguyen Co Thach Street, An Loi Dong Ward, Thu Duc City, Ho Chi Minh City.

Email: cskh@dreye.vn

Hotline 0899099799