Information security policy

1. Purpose and Scope of Data Collection

The data collection on the website primarily includes: email, phone number, username, login password, and customer address. These are the pieces of information that MebukiSpa.com requires customers to provide when registering for services, and MebukiSpa.com uses them for confirmation purposes when customers schedule service appointments, ensuring customer rights.

Customers are responsible for the security and maintenance of all service usage activities under their username, password, and email account. Additionally, customers are responsible for promptly notifying mebukispa.com of any unauthorized use, abuse, security breaches, or the retention of login credentials and passwords by third parties for appropriate resolution.

2. Use of Information

The website mebukispa.com uses the information provided by customers to:

• Provide services to customers.
• Send notifications regarding information exchange activities between customers and the website mebukispa.com.
• Prevent activities that may harm customer user accounts or impersonate customers.
• Communicate and resolve issues with customers in special cases.
• Not use customer’s personal information for purposes other than confirmation and relevant communication related to transactions on mebukispa.com.
• mebukispa.com is responsible for cooperating in providing customer personal information when required by competent state authorities.

3. Data Retention Period

Customer personal data will be stored until there is a request for cancellation by the customer or until the customer logs in and initiates the cancellation. In all cases, customer personal information will be securely stored on mebukispa.com’s servers.

4. Contact Information for Data Collection, Management, and Customer Support

Hotline: 093-178 08 65 Address: 55 Ham Nghi, Nguyen Thai Binh Ward, District 1, Ho Chi Minh City Website: www.mebukispa.com – Japanese-style relaxation spa. Email: admin@mebukispa.com Business hours: Monday to Sunday: 10:00 AM – 10:00 PM

5. Means and Tools for Customers to Access and Edit Their Data

Customers have the right to review, update, and adjust their personal information by logging into their account and editing their personal information or by requesting mebukispa.com to do so.

Customers have the right to file complaints about the disclosure of their personal information to third parties with mebukispa.com’s Administration Board. Upon receiving these complaints, mebukispa.com will verify the information, provide responsible responses and guidance for customers to recover and secure their information.

6. Commitment to Customer Personal Information Security

Customer personal information on mebukispa.com is absolutely committed to privacy in accordance with mebukispa.com’s personal information protection policy. The collection and use of each customer’s information will only be carried out with their consent or agreement, except as otherwise provided by law. mebukispa.com commits to:

• Not use, transfer, provide, or disclose customer’s personal information to any third party without permission or consent from the customer, except as otherwise provided by law.
• In the event of a data breach on the server storing customer information due to hacking, resulting in the loss of customer personal data, mebukispa.com will promptly report the incident to competent authorities for investigation and notify affected customers.
• Absolute security of all online transaction information of customers, including electronic invoices and digitized accounting documents, in the secure Level 1 data center of mebukispa.com.

In case a third party uses customer information that was previously provided to mebukispa.com, mebukispa.com will work with the competent authority to determine the cause of the information leak.