Privacy Policy

Effective Date: February 7, 2026

This Privacy Policy describes how Giao Gas (“Company”, “we”, “us”, or “our”) collects, uses, stores, and protects your personal information when you use the Giao Gas delivery logistics platform (“Platform”). This policy applies to all users, including Business Users and End Customers.

We are committed to protecting your privacy in accordance with Vietnamese law, including the Law on Cybersecurity (2018), the Law on Protection of Consumer Rights, and Decree 13/2023/ND-CP on Personal Data Protection.

1. Information We Collect

1.1. Information You Provide

Account Information: Name, email address, phone number, business name, business registration number, and business address when you register for an account.
Customer Records: Names, addresses, phone numbers, and delivery preferences of End Customers that Business Users input into the Platform.
Financial Information: Invoice details, payment records, pricing data, and accounting information entered through the Platform’s accounting features.
Delivery Information: Delivery addresses, delivery schedules, tank specifications, propane quantities, and delivery notes.
Communications: Messages, support requests, and feedback you send to us.

1.2. Information Collected Automatically

Usage Data: Pages visited, features used, time spent on the Platform, and interaction patterns.
Device Information: Device type, operating system, browser type, and screen resolution.
Location Data: GPS location of delivery drivers during active deliveries (with consent), delivery route data, and approximate location derived from IP address.
Log Data: IP address, access times, and error logs for security and troubleshooting purposes.

1.3. Information from Third Parties

Payment Processors: Transaction confirmation and payment status from third-party payment services.
Mapping Services: Route and address data from mapping providers used for delivery optimization.

2. How We Use Your Information

We use the information we collect for the following purposes:

Provide Services: Operate the Platform, process deliveries, manage customer records, and generate invoices and reports.
Delivery Tracking: Enable real-time tracking of propane deliveries for Business Users and their End Customers.
Customer Management: Help Business Users organize and maintain their customer databases and delivery histories.
Accounting: Generate financial reports, invoices, and track payments and expenses.
Communication: Send service notifications, delivery updates, account alerts, and respond to support requests.
Improvement: Analyze usage patterns to improve the Platform’s features, performance, and user experience.
Security: Detect and prevent fraud, unauthorized access, and other security threats.
Legal Compliance: Comply with applicable Vietnamese laws and regulations, including tax and business reporting requirements.

3. Legal Basis for Processing

We process your personal data based on the following legal grounds under Vietnamese law:

Contract Performance: Processing necessary to provide the Services you have requested.
Legitimate Interest: Processing necessary for the operation and improvement of our Platform.
Consent: Processing based on your explicit consent, which you may withdraw at any time.
Legal Obligation: Processing necessary to comply with Vietnamese law.

Consent is obtained through clear, affirmative actions within the Platform, including account registration, feature activation (such as location tracking), and configurable privacy settings. Records of consent are maintained in accordance with legal requirements.

We do not sell your personal information. We may share your information in the following circumstances:

Business Users’ customer data is shared with End Customers only as necessary for delivery operations (e.g., delivery status, estimated arrival time).

4.2. Service Providers

We may share information with trusted third-party service providers who assist us in operating the Platform, including:

Cloud hosting and infrastructure providers
Payment processing services
Mapping and route optimization services
Email and notification delivery services

These providers are contractually obligated to protect your information and may only use it for the purposes we specify.

4.3. Legal Requirements

We may disclose your information if required by Vietnamese law, regulation, legal process, or government request, including requests from the Ministry of Public Security or other competent authorities.

4.4. Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred to the acquiring entity, subject to the same privacy protections described in this policy.

5. Data Storage and Security

5.1. Storage Location. Your data is stored on secure servers. We may use cloud infrastructure providers with data centers in the Asia-Pacific region.

5.2. Security Measures. We implement appropriate technical and organizational measures to protect your information, including:

Encryption of data in transit (TLS/SSL) and at rest
Access controls and authentication requirements
Regular security assessments
Employee access limited to those who need it to perform their duties

5.3. Breach Notification. In the event of a data breach that affects your personal information, we will notify you and the relevant Vietnamese authorities as required by law, within 72 hours of becoming aware of the breach.

5.4. Cross-Border Data Transfers. Where personal data is transferred outside of Vietnam, including to cloud service providers or service partners located in other jurisdictions, we ensure such transfers comply with Vietnamese data protection laws, including Decree 13/2023/ND-CP. Appropriate safeguards are implemented, including contractual protections, technical security measures, and data minimization practices.

6. Data Retention

6.1. We retain your personal information for as long as your account is active or as needed to provide Services to you.

6.2. After account termination, we retain Your Data for 30 days to allow for account recovery. After this period, your data will be deleted or anonymized.

6.3. We may retain certain information for longer periods as required by Vietnamese law, including financial and tax records (which must be retained for a minimum of 5 years under Vietnamese accounting regulations).

6.4. Aggregated, anonymized data that cannot identify you may be retained indefinitely for analytical purposes.

7. Your Rights

Under Vietnamese data protection law, you have the following rights:

Right to Access: You may request a copy of the personal information we hold about you.
Right to Correction: You may request correction of inaccurate or incomplete personal information.
Right to Deletion: You may request deletion of your personal information, subject to our legal retention obligations.
Right to Restrict Processing: You may request that we limit how we use your personal information.
Right to Data Portability: You may request an export of your data in a standard, machine-readable format.
Right to Withdraw Consent: Where processing is based on consent, you may withdraw your consent at any time.
Right to Object: You may object to processing of your personal information for certain purposes.

To exercise any of these rights, please contact us using the information provided in Section 12.

8. Business User Responsibilities

8.1. Business Users act as data controllers for the End Customer data they input into the Platform. Business Users are responsible for:

Obtaining appropriate consent from End Customers before entering their personal data into the Platform
Informing End Customers about how their data will be used
Responding to End Customer requests regarding their personal data
Ensuring the accuracy of End Customer data

8.2. Giao Gas acts as a data processor for End Customer data input by Business Users.

9. Location Data

9.1. The Platform collects GPS location data from delivery drivers during active deliveries to enable real-time delivery tracking.

9.2. Location tracking is active only during working hours and active delivery routes. Drivers may disable location sharing outside of delivery operations.

9.3. Location data is used solely for delivery tracking, route optimization, and delivery verification purposes.

10. Cookies and Similar Technologies

10.1. We use cookies and similar technologies to maintain your session, remember your preferences, and analyze Platform usage.

10.2. Essential Cookies: Required for the Platform to function properly. These cannot be disabled.

10.3. Analytics Cookies: Help us understand how users interact with the Platform. You may opt out of analytics cookies through your browser settings.

11. Children’s Privacy

The Platform is not intended for use by individuals under 18 years of age. We do not knowingly collect personal information from children. If we become aware that we have collected personal information from a child, we will take steps to delete it promptly.

12. Contact Us

If you have questions about this Privacy Policy or wish to exercise your data rights, please contact us at:

Giao Gas Email: privacy@giaogas.com

Giao Gas has designated a Data Protection Officer (DPO) in accordance with Vietnamese law. For data protection inquiries, you may contact our DPO at: dpo@giaogas.com

13. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes via email or through the Platform at least 15 days before they take effect. Your continued use of the Platform after the effective date constitutes acceptance of the updated policy.