1. Definitions
| Term | Meaning |
|---|---|
| Personal Data | Information that can identify you directly or indirectly |
| Processing | Any operation performed on Personal Data (collection, storage, use, deletion, etc.) |
| Customer | Anyone who browses or purchases from the Site |
2. Scope
This Privacy Policy explains how VisothKH collects, uses, stores, and discloses your Personal Data when you visit or shop at https://www.visothkh.com/ (the “Site”).
3. Data We Collect
| Category | Specific items | Source |
|---|---|---|
| Identification & Contact | Full name, mobile number, shipping address, (optional) e-mail | Provided by you at checkout |
| Order Details | Items purchased, order value, payment reference, delivery status | Generated during transaction |
| Technical Data | Browser type, device type, pages visited, anonymised IP truncation | Vercel Analytics |
| Cookies | Essential session/cart tokens, OTP-lookup token | Placed automatically |
No credit-card details are collected by VisothKH; payment data are handled by ABA PayWay.
4. Legal Bases & Purposes of Processing
| Purpose | Legal basis |
|---|---|
| Fulfil and deliver your order | Contract performance |
| Communicate order confirmations and delivery updates | Contract performance |
| Provide customer support & handle returns | Legitimate interest |
| Prevent fraud & ensure Site security | Legitimate interest |
| Maintain business records / comply with tax & consumer laws | Legal obligation |
5. Cookies & Analytics
- Essential cookies keep your cart intact and allow OTP order look-up.
- Analytics: Vercel Analytics gathers aggregate, de-identified traffic metrics; no marketing or re-targeting cookies are installed.
- You can block cookies in your browser, but some Site functions (checkout, order tracking) may fail.
6. Disclosure of Personal Data
We disclose Personal Data only to:
- ABA PayWay – for secure payment processing.
- Couriers (Vireak Buntham Express, J&T Express) – to fulfil delivery (name, phone, address, order reference).
- Regulators or law enforcement – when we are legally required to do so.
No third-party sellers or advertisers receive your data.
7. Data Retention
We retain order-related Personal Data for 15 days after the order is marked Completed/Delivered, then delete or irreversibly anonymise it, unless a longer period is required to resolve disputes or comply with legal obligations.
8. Data Security
- SSL/TLS encryption protects all data in transit.
- Access to the order-management portal is limited to one authorised individual.
- We employ firewalls, strong authentication, and least-privilege controls to mitigate unauthorised access, alteration, or loss.
9. Your Rights
Subject to Cambodian law, you may:
- Request access to your Personal Data.
- Request correction of inaccurate/incomplete data.
- Request deletion once data are no longer needed.
- Object to or restrict certain processing activities.
- Withdraw consent where processing is based on consent (e.g., cookies).
Please e-mail vitalsowath@gmail.com to exercise any right. We may request proof of identity.
10. Children
We do not knowingly collect data from individuals under 18. If you believe a child has provided Personal Data, contact us and we will delete it promptly.
11. International Transfers
Our hosting provider may store data on servers outside Cambodia. We require that any such provider implements safeguards ensuring an adequate level of protection consistent with this Privacy Policy.
12. Changes to This Policy
We may amend this Privacy Policy at any time. The latest revision date is posted at the top. Continued use of the Site after changes constitutes acceptance of the updated Policy.
13. Contact
For privacy questions or requests: vitalsowath@gmail.com | +855 12 346 729