GDPR Policy

Welcome to This GDPR Policy outlines how we collect, use, process, and protect personal data in compliance with the General Data Protection Regulation (GDPR) for users located within the European Union (EU) and the European Economic Area (EEA). We are committed to safeguarding the privacy and data protection rights of our users.

Data Controller

The data controller for is Ivirgo Hair, registered in Vietnam, and can be contacted at We are responsible for determining the purposes and means of processing personal data on this Website.

What Information Do We Collect?

We may collect the following types of personal data from you:

a. Contact Information: Name, email address, phone number, and mailing address.

b. Account Information: Username, password, and account preferences.

c. Transaction Information: Details of purchases and orders made through the Website.

d. Communication Information: Records of any communication between you and the Website.

e. Technical Information: IP address, browser type, device information, and usage data collected through cookies and similar technologies.

How Do We Use Your Personal Data?

We will only use your personal data for the following purposes:

a. To process and fulfill your orders, inquiries, and requests made through the Website.

b. To provide you with information, products, or services you have requested.

c. To communicate with you regarding updates, changes, or improvements to our products and services.

d. To personalize your experience on our Website and improve our services.

e. To analyze and improve the performance of our Website, products, and marketing efforts. f. To comply with legal and regulatory requirements.

Legal Basis for Data Processing

We will process your personal data on the following legal bases:

a. Performance of a Contract: To fulfill our obligations under any contract with you.

b. Legitimate Interests: To pursue our legitimate interests as long as they do not outweigh your fundamental rights and freedoms.

c. Consent: Where you have provided your explicit consent for specific processing activities, such as receiving marketing communications.

Data Retention

We will retain your personal data for as long as necessary to fulfill the purposes outlined in this GDPR Policy unless a longer retention period is required or permitted by law. After this period, your data will be securely deleted or anonymized.

Sharing Personal Data

We may share your personal data with third parties under the following circumstances:

a. Service Providers: We may engage trusted third-party service providers who assist us in operating the Website and providing services to you. These service providers are contractually bound to handle your data securely and confidentially.

b. Legal Requirements: We may share your data to comply with legal obligations, enforce our Terms of Service, or protect the rights, property, or safety of our users, employees, or others.

Your Rights

Under the GDPR, you have the following rights regarding your personal data:

a. Right to Access: You can request access to the personal data we hold about you.

b. Right to Rectification: You can request corrections to inaccurate or incomplete data.

c. Right to Erasure: You can request the deletion of your personal data.

d. Right to Restriction: You can request the restriction of certain processing activities.

e. Right to Data Portability: You can request a copy of your data in a machine-readable format.

f. Right to Object: You can object to certain processing activities based on legitimate interests.

g. Right to Withdraw Consent: You can withdraw your consent for processing where applicable.

Security Measures

We take appropriate technical and organizational measures to protect your personal data from unauthorized access, disclosure, alteration, or destruction. However, no data transmission over the internet can be guaranteed as 100% secure.

Changes to this Policy

We may update this GDPR Policy periodically to reflect changes in legal requirements or our data processing practices. We encourage you to review this Policy regularly for any updates.

Contact Information

If you have any questions, concerns, or requests regarding this GDPR Policy or your personal data, please contact us at