Privacy Policy

1. Definitions

Term	Meaning
Personal Data	Information that can identify you directly or indirectly
Processing	Any operation performed on Personal Data (collection, storage, use, deletion, etc.)
Customer	Anyone who browses or purchases from the Site

2. Scope

This Privacy Policy explains how VisothKH collects, uses, stores, and discloses your Personal Data when you visit or shop at https://www.visothkh.com/ (the “Site”).

3. Data We Collect

Category	Specific items	Source
Identification & Contact	Full name, mobile number, shipping address, (optional) e-mail	Provided by you at checkout
Order Details	Items purchased, order value, payment reference, delivery status	Generated during transaction
Technical Data	Browser type, device type, pages visited, anonymised IP truncation	Vercel Analytics
Cookies	Essential session/cart tokens, OTP-lookup token	Placed automatically

No credit-card details are collected by VisothKH; payment data are handled by ABA PayWay.

4. Legal Bases & Purposes of Processing

Purpose	Legal basis
Fulfil and deliver your order	Contract performance
Communicate order confirmations and delivery updates	Contract performance
Provide customer support & handle returns	Legitimate interest
Prevent fraud & ensure Site security	Legitimate interest
Maintain business records / comply with tax & consumer laws	Legal obligation

5. Cookies & Analytics

Essential cookies keep your cart intact and allow OTP order look-up.
Analytics: Vercel Analytics gathers aggregate, de-identified traffic metrics; no marketing or re-targeting cookies are installed.
You can block cookies in your browser, but some Site functions (checkout, order tracking) may fail.

6. Disclosure of Personal Data

We disclose Personal Data only to:

ABA PayWay – for secure payment processing.
Couriers (Vireak Buntham Express, J&T Express) – to fulfil delivery (name, phone, address, order reference).
Regulators or law enforcement – when we are legally required to do so.

No third-party sellers or advertisers receive your data.

7. Data Retention

We retain order-related Personal Data for 15 days after the order is marked Completed/Delivered, then delete or irreversibly anonymise it, unless a longer period is required to resolve disputes or comply with legal obligations.

8. Data Security

SSL/TLS encryption protects all data in transit.
Access to the order-management portal is limited to one authorised individual.
We employ firewalls, strong authentication, and least-privilege controls to mitigate unauthorised access, alteration, or loss.

9. Your Rights

Subject to Cambodian law, you may:

Request access to your Personal Data.
Request correction of inaccurate/incomplete data.
Request deletion once data are no longer needed.
Object to or restrict certain processing activities.
Withdraw consent where processing is based on consent (e.g., cookies).

Please e-mail vitalsowath@gmail.com to exercise any right. We may request proof of identity.

10. Children

We do not knowingly collect data from individuals under 18. If you believe a child has provided Personal Data, contact us and we will delete it promptly.

11. International Transfers

Our hosting provider may store data on servers outside Cambodia. We require that any such provider implements safeguards ensuring an adequate level of protection consistent with this Privacy Policy.

12. Changes to This Policy

We may amend this Privacy Policy at any time. The latest revision date is posted at the top. Continued use of the Site after changes constitutes acceptance of the updated Policy.

13. Contact

For privacy questions or requests: vitalsowath@gmail.com | +855 12 346 729