Privacy Policy
Updated 05/10/2026
This policy explains how LA:CHANG, the household business owned by Nguyễn Thu Trang ("we") collect, use, share and protect your personal data when you use www.lachang.shop, under Vietnamese personal data protection law. We are the controller and processor of your personal data. The Vietnamese version governs.
1. Data we collect
• When you order: name, phone number, email, delivery address (province/city, ward, street address) and delivery notes;
• The order: pieces, metal, stone, size, quantity, prices, discount, delivery fee, deposit, amount due on delivery, tracking number and delivery status, and the version of the terms you agreed to;
• Your deposit transfer: the account name, amount and transfer note your bank shows us;
• Technical: IP address and browser type in server logs. Your bag is stored in your browser (localStorage) and not sent to us until you order.
We don't collect card numbers, banking passwords or sensitive personal data.
2. Why we process it
• To confirm, prepare and deliver your order and collect the rest on delivery;
• To check the first-order discount (matching your phone and email against earlier orders);
• To contact you about the order, exchanges, warranty and complaints;
• To meet accounting, tax and reporting duties under the law.
We don't sell personal data, and we don't use it for marketing without your separate consent.
3. Legal basis
The data in section 1 is processed to perform the sale contract you are party to and to meet our legal duties (accounting, tax, e-commerce), as the Personal Data Protection Law allows. Ordering does not require your consent to any other purpose.
We send marketing or promotions only if you separately consent to that, and you can withdraw that consent at any time.
4. Who we share it with
Only those needed to sell and deliver:
• Viettel Post Joint Stock Corporation (Vietnam): recipient name, phone, address, parcel description and cash-on-delivery amount, to deliver and collect payment;
• Supabase Inc. (USA): the database holding orders and product photos, on servers in Singapore;
• Vercel Inc. (USA): the servers running the site, processing orders in Singapore;
• Google: the site's fonts load from Google Fonts, so your browser sends your IP address to Google when you open the site;
• Competent authorities when the law requires.
5. Transfers abroad
The site's processing servers (Vercel) and database (Supabase) are in Singapore, outside Vietnam, so order data is stored and processed there for the purposes in section 2. We complete the formalities for transferring personal data abroad that personal data protection law requires.
6. Your rights
You have the right to be informed; to consent or withdraw consent; to access, correct and delete your data; to restrict processing; to receive a copy; to object; to complain; and to claim compensation, as the law provides.
Send requests to customers@lachang.shop or call 0945111071, with the phone number you ordered with so we can verify you. We acknowledge within 72 hours and act within the time limits set by law.
7. Retention
• Order and delivery data: at least 3 years from the transaction under e-commerce law, then deleted or anonymised unless the law requires longer;
• Accounting records (including transfer details): for the period accounting law requires;
• Server logs: per the infrastructure providers' retention, at most 30 days.
8. Security
Data is encrypted in transit (HTTPS). Orders are accessible only to our admin accounts, enforced in the database; visitors can't see other people's orders. If a data breach occurs, we notify you and the authorities as the law requires.
9. Cookies
The site uses no advertising cookies, analytics or cross-site tracking. Your browser stores only your bag and chosen language.
10. Data protection contact
Nguyễn Thu Trang (LA:CHANG). Phone: 0945111071. Email: customers@lachang.shop.
