Food supplement. Not a medicine. Sold by KIM THOA NGUYEN, Sydney NSW, Australia.

Privacy Policy

Last updated:

KIM THOA NGUYEN ("we", "us", "our"), Natural person (self-employed) (Legal form: Natural person (self-employed)), operating kimthoanguyen.com.au, is committed to protecting your personal data. This policy explains what data we collect, how we use it, and your rights under UK GDPR and the Data Protection Act 2018.

1. Information We Collect

We may collect the following categories of personal data:

  • Order data: name and phone number submitted via the order form.
  • Contact data: name, email address and message submitted via the contact form.
  • Technical data: IP address, browser type, device, pages visited, collected automatically via cookies (subject to your consent).
  • Marketing data: preferences and consent records.

2. How We Use Your Information

  • To process and fulfil your order (phone confirmation and delivery).
  • To respond to enquiries submitted via the contact form.
  • To improve our website and user experience (analytics, with consent).
  • To show relevant advertising (marketing cookies, with consent).
  • To comply with legal obligations.

3. Legal Basis for Processing (UK GDPR Art. 6)

  • Contractual necessity (Art. 6(1)(b)): processing your order details.
  • Legitimate interests (Art. 6(1)(f)): improving site performance, fraud prevention.
  • Consent (Art. 6(1)(a)): analytics and marketing cookies, where you have agreed via the cookie banner.
  • Legal obligation (Art. 6(1)(c)): record-keeping and compliance.

4. Sharing and Disclosure

We do not sell your personal data. We may share it with:

  • Courier and logistics partners (for delivery fulfilment).
  • Google LLC (analytics and advertising services - see section 10).
  • Our hosting and IT service providers, who process data on our behalf under data processing agreements.
  • Law enforcement or regulatory authorities where required by law.

5. Data Security

We take appropriate technical and organisational measures to protect your data against unauthorised access, alteration, disclosure or destruction. Our website is served over HTTPS. Access to personal data is restricted to authorised personnel only.

6. Your Rights

Under UK GDPR, you have the right to:

  • Access your personal data (Subject Access Request).
  • Correct inaccurate data.
  • Request deletion of your data ("right to be forgotten").
  • Object to or restrict processing.
  • Data portability.
  • Withdraw consent at any time (where processing is consent-based).
  • Lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk or by post at Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF.

To exercise any right, contact us at [email protected].

7. International Data Transfers

Some of our service providers (including Google) are based outside the UK. Where personal data is transferred internationally, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the ICO, or adequacy decisions.

8. Retention Periods

We retain order and contact data for up to 3 years from the date of last contact, or as required by applicable law. Analytics data is retained in accordance with Google's data retention settings (typically 14 months). You may request deletion at any time.

9. Children's Privacy

Our website and products are intended for adults aged 18 and over. We do not knowingly collect personal data from persons under 18. If you believe a minor has submitted data to us, please contact us so we can delete it promptly.

10. Third-Party Services

We use the following third-party services which may process your data:

  • Google Analytics: website traffic analysis. Uses cookies _ga, _gid, _gat. Data is anonymised where consent is not granted via Consent Mode v2.
  • Google Ads Conversion Tracking: tracks advertising conversions. Uses cookies _gcl_au, _gcl_aw. Only active if you consent to marketing cookies.
  • Google Ads Remarketing: shows ads to previous visitors. Subject to marketing cookie consent.
  • Google Maps API: embedded map on the contact page. Google may collect your IP address. See Google's Privacy Policy at policies.google.com.

All third-party services are subject to Consent Mode v2: by default, ad storage and analytics are denied until you accept via the cookie banner.

11. Cookies

We use cookies for essential site functionality and, with your consent, for analytics and marketing. See our Cookie Policy for full details and how to manage your preferences.

12. Changes to This Policy

We may update this policy from time to time. The date at the top of this page reflects the most recent revision. Continued use of the site after any update constitutes acceptance of the revised policy.

13. Contact

KIM THOA NGUYEN
100 George St, Sydney NSW, 2000, Australia
Email: [email protected]
Phone: +44 20 7946 0312