Privacy policy

PRIVACY POLICY

Last updated: 9 August 2026

The Toong Coffee website is operated by Nguyen And Nguyen Creative design company limited (“Toong”, “we”, “us”) using the Shopify platform.

This Privacy Policy describes how Toong collects, uses, retains, shares and protects personal information and personal data when users visit the website, create an account, place an order, subscribe to communications or contact Toong.

1. Purpose and Scope of Information Collection

Depending on how a user interacts with the website, Toong may collect the following categories of information:

Name, email address and phone number;
Delivery address;
Information required to issue an invoice when requested by the customer;
Products ordered, quantities, order information, purchase history and order status;
Information necessary to confirm and reconcile bank-transfer payments, including payment amount, transaction time and payment reference;
Profile information, addresses and order history associated with a customer account, where the customer chooses to use an account;
Information submitted through email, forms or other communication channels with Toong;
IP address, device type, browser, cookies and information regarding the use of or interaction with the website processed by Shopify and any analytics or advertising tools enabled on the website.

Toong currently does not directly collect or store customers' credit-card or debit-card information. The website's current payment method is bank transfer.

2. Scope of Use of Information

Toong may use personal information to:

Receive, confirm and process orders;
Confirm and reconcile payments;
Prepare, pack and deliver orders;
Issue invoices and supporting documents and comply with accounting and tax obligations;
Communicate regarding order status or changes affecting an order;
Provide after-sales support;
Receive and resolve feedback, requests and complaints;
Create, maintain and manage customer accounts;
Protect website security and prevent or detect fraud or unauthorized access;
Analyze and improve products, services and user experience;
Send marketing emails to persons who have subscribed or consented to receive them;
Conduct communications and advertising through Facebook, Instagram, Zalo or other channels used by Toong;
Comply with legal obligations or lawful requests from competent authorities.

3. Persons and Organizations That May Access Information

To the extent necessary for the purposes described in this Policy, personal data may be accessed or processed by:

Authorized Toong personnel involved in management, sales, customer support, accounting and order processing;
Shopify and Shopify features or applications used by Toong to operate the website, customer accounts, forms, communications and order processing;
Meta/Facebook & Instagram for measurement, commerce or advertising functions enabled by Toong. The scope of data shared depends on the data-sharing configuration enabled in Shopify;
Banks and relevant service providers to the extent required to receive, confirm and reconcile payments;
Delivery providers selected by Toong for individual orders, which may include GrabExpress, Ahamove, Green SM Express, Viettel Post or another suitable provider;
Technical or support service providers where necessary to operate the website and complete transactions;
Competent authorities where disclosure is lawfully required.

For delivery purposes, Toong provides only information reasonably necessary to fulfill the order, such as the customer's name, phone number, delivery address, parcel information and necessary delivery instructions.

4. Data Retention

Retention periods depend on the type of data and the purpose for which it is processed:

Customer account data is retained while the account remains active and until an erasure request is processed, except where information must continue to be retained by law;
Marketing data is retained until the user unsubscribes or withdraws consent;
Order, payment, invoice and accounting records are retained for the period necessary to complete transactions and for any mandatory retention period under applicable tax, accounting and related laws;
Feedback, request and complaint records are retained for as long as reasonably necessary to process the matter, reconcile records, resolve disputes and protect the lawful rights and interests of the parties;
Technical data, cookies and data processed by Shopify or other service providers are retained according to the applicable service settings, mechanisms and policies.

5. Information and Data Security Measures

The Toong website is operated using Shopify infrastructure and uses HTTPS/TLS connections to protect data transmitted between users and the system.

Toong applies reasonable measures including:

Limiting access to data according to work requirements;
Managing administrative account permissions;
Using security features provided by Shopify;
Reviewing and restricting access when a risk or incident is identified;
Coordinating with Shopify and relevant service providers where necessary to address an incident.

No technical measure can guarantee absolute security. If an incident affecting personal data is identified, Toong will apply measures appropriate to the nature and severity of the incident and will make any notification required by applicable law.

6. Accessing and Correcting Personal Data

Customers with an account may view or manage certain profile information, addresses and order history through their account to the extent supported by Shopify.

For other data, or where the customer does not have an account, requests to access, correct or supplement personal data should be sent to:

Email: toong@toongcoffee.vn

Customers should provide:

Name;
Email address or phone number previously used with Toong;
Order number, where applicable;
A description of the information to be accessed or corrected.

Toong may request reasonable additional information to verify the requester before providing or changing personal data.

7. Requests to Erase, Destroy or Restrict Processing of Personal Data

Requests to erase, destroy or restrict the processing of personal data should be sent to:

Email: toong@toongcoffee.vn

The process consists of:

Receiving the request;
Verifying the requester using information associated with the transaction or account, such as email address, phone number or order number;
Processing the request through Shopify and coordinating with third parties that received the data where necessary;
Notifying the requester of the outcome.

Certain information may continue to be retained where required for tax, accounting, invoicing, fraud-prevention, dispute-resolution or other legal obligations.

Erasure of personal data does not necessarily mean deletion of all transaction information. Certain transaction records may continue to be retained where necessary or as required by applicable system processes and laws.

8. Privacy-Related Feedback, Requests and Complaints

The official channel for privacy-related feedback, requests and complaints is:

Email: toong@toongcoffee.vn

Support phone: +84 38 800 86 70

The phone number may be used for assistance or guidance. Formal requests concerning access, correction, erasure or restriction of personal data should preferably be submitted by email so that Toong can verify and maintain a record of the request.

Expected handling times are:

Acknowledgment of receipt: within 1 business day;
Routine matters: expected within 3 business days;
Matters requiring reconciliation with Shopify, a bank, a delivery provider or another third party: expected within 5 business days;
Complex matters or verified data-rights requests: expected within a maximum of 15 business days.

If additional time is required, Toong will inform the requester of the reason and provide a revised expected timeframe.

9. Cookies and Measurement Technologies

The website uses Shopify and may use cookies or similar technologies to:

Provide essential website functionality;
Maintain sessions and user preferences;
Analyze website activity and performance;
Measure advertising activities.

Toong currently has Facebook & Instagram by Meta connected to Shopify. Depending on the data-sharing configuration selected by Toong, Meta may receive information regarding users' interactions with the website and other data necessary for measurement, user matching or advertising.

Where applicable law requires consent for a particular cookie or data-processing technology, its use will be subject to the privacy controls or consent choices made available through the website.

10. Processing Through Shopify and International Service Providers

The website is operated using Shopify. In order to provide its services, Shopify and its subprocessors may transfer, store or process data in multiple countries or regions.

Toong does not identify or represent that website data is stored in one fixed data center.

Data processed through Shopify and related service providers is handled according to the applicable operating, security and data-protection mechanisms of those providers and applicable law.

11. Marketing Communications

Users may voluntarily subscribe to receive marketing communications from Toong.

Recipients of marketing emails may unsubscribe by:

Using the Unsubscribe option provided in the email; or
Sending a request to toong@toongcoffee.vn.

Opting out of marketing communications does not prevent Toong from sending communications necessary to process orders, payments, deliveries, invoices or customer support matters.

12. Children's Data

The website is not designed for the purpose of intentionally collecting children's personal data.

If Toong becomes aware that personal data relating to a child or minor has been provided in circumstances where applicable law requires parental or guardian consent or representation, Toong may request verification and process the data in accordance with applicable law.