PERSONAL DATA PROCESSING POLICY

Last Updated: 10/11/2026

1. Information About the Data Controller

VISTAR HEALTHCARE COMPANY LIMITED (hereinafter referred to as “VISTAR HEALTHCARE” or “we”) determines the purposes and means of processing personal data collected through https://vistarhealthcare.vn, within the scope of activities managed by the company.

Contact information:

• Company Name: VISTAR HEALTHCARE COMPANY LIMITED
• Email: info@vistarhealthcare.vn
• Hotline: 0852 298 826
• Website: https://vistarhealthcare.vn

2. Categories of Personal Data Processed

When users access and interact with our website, VISTAR HEALTHCARE may process the following categories of personal data:

2.1. Information Provided by Users

Through the contact form, users may provide:

• Full name.
• Email address.
• Phone number.
• Message or contact inquiry.

2.2. Information Collected Through Technology

Through Google Analytics and website operation technologies, certain technical information may be collected, including:

• IP address and approximate geographical location.
• Device type, browser and operating system.
• Website pages visited, browsing duration and interaction activities.
• Website traffic and session statistics.

The actual scope of data collected depends on the website configuration and the tools implemented.

3. Purposes of Personal Data Processing

Personal data is processed for the following purposes:

• To receive, verify and respond to user inquiries.
• To communicate regarding business partnerships, distribution, brand development and other cooperation opportunities.
• To provide information about VISTAR HEALTHCARE’s products, services and activities upon request.
• To analyze and evaluate website performance.
• To improve website content, functionality and user experience.
• To maintain website security and detect unusual activities.
• To fulfill applicable legal obligations.

Personal data will not be used for purposes incompatible with those disclosed, unless there is a lawful basis for such processing.

4. Methods and Scope of Data Processing

Personal data may be processed through the following activities:

• Collecting information through the contact form.
• Receiving, storing and managing contact information.
• Reviewing, categorizing and responding to inquiries.
• Analyzing website traffic through Google Analytics.
• Updating, correcting, deleting or destroying data in response to valid requests or as required by law.

Data processing is limited to what is necessary to fulfill the purposes outlined in this Policy.

5. Data Retention Period

Personal data is retained for as long as necessary to fulfill the purposes of processing, respond to inquiries, maintain website operations or comply with legal obligations.

When the purposes of processing have been fulfilled and there is no lawful basis for continued retention, personal data will be deleted, destroyed or otherwise processed in accordance with applicable laws.

6. Parties Involved in Data Processing and Data Sharing

Where necessary, personal data may be accessed or processed by:

• VISTAR HEALTHCARE employees and relevant departments.
• Website hosting, operation and maintenance service providers.
• Website analytics service providers, including Google Analytics.
• Competent government authorities where required by law.

Relevant parties may only access personal data to the extent necessary and must comply with applicable personal data protection obligations.

7. Overseas Processing and Cross-Border Transfer of Personal Data

Certain technology services used on our website, including analytics tools and hosting infrastructure, may be operated by overseas service providers.

Where personal data is transferred to or processed outside Vietnam, VISTAR HEALTHCARE will identify the relevant scope, purposes and parties involved, and fulfill applicable legal obligations concerning personal data protection and cross-border data transfers where required.

8. Rights and Obligations of Data Subjects

Users are entitled to exercise their rights under applicable personal data protection laws, including:

• The right to be informed about personal data processing activities.
• The right to consent to or refuse processing where consent is required by law.
• The right to withdraw consent in accordance with applicable regulations.
• The right to access, review, correct or request updates to personal data.
• The right to request the provision, deletion or restriction of personal data processing as permitted by law.
• The right to object to personal data processing in accordance with applicable regulations.
• The right to lodge complaints, report violations, initiate legal proceedings or seek compensation where their lawful rights and interests have been infringed.

Users are responsible for providing accurate and lawful information and respecting the personal data protection rights of others.

9. Consent and Withdrawal of Consent

Where consent is required by law, VISTAR HEALTHCARE will provide the necessary information before processing personal data.

Consent must be freely given, clearly expressed and specific to each relevant processing purpose. Silence or failure to respond does not constitute consent.

Users may withdraw their consent using the contact information provided in Section 11. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal and does not exclude processing activities that are legally permitted without consent.

10. Personal Data Protection Measures

VISTAR HEALTHCARE implements appropriate technical and organizational measures to protect personal data, including:

• Controlling access to personal data.
• Restricting unnecessary access to information.
• Applying appropriate security measures to website systems.
• Coordinating with service providers to maintain data security.
• Handling personal data incidents in accordance with applicable laws.

11. Requests and Contact Information

Users may submit requests concerning their personal data, including requests to access, correct, delete, restrict processing, object to processing or withdraw consent, through:

VISTAR HEALTHCARE COMPANY LIMITED

• Email: info@vistarhealthcare.vn
• Hotline: 0852 298 826
• Website: https://vistarhealthcare.vn

Upon receiving a request, VISTAR HEALTHCARE may ask the requester to provide necessary information to verify their identity and the scope of the request. Requests will be reviewed and handled in accordance with applicable procedures, timelines and laws.

12. Implementation and Updates

This Policy may be updated to reflect VISTAR HEALTHCARE’s actual business operations and applicable legal requirements.

Any updates will be published on our website together with the latest revision date.

This Policy applies together with the Privacy Policy and other personal data protection notices published on our website.