Privacy Policy

1. Introduction

This Privacy Policy (the "Policy") describes how Tendpaw ("we", "us") collects, uses, and protects your information when you visit tendpaw.vn (the "Website").

We comply with Vietnam's Decree 13/2023/NĐ-CP on personal data protection ("PDPD") and other applicable Vietnamese laws.

By continuing to use the Website, you acknowledge that you have read and accept this Policy.

2. Scope

This Policy applies to data processing carried out through the Website only.

The Tendpaw mobile app has a separate privacy policy covering pet records, health data, location data, and inputs to the AI risk-screening feature. A link to the app's privacy policy will be added here once the app is live on the App Store and Google Play.

3. Data we collect on the Website

The Website does not offer account registration, email inputs, phone-number inputs, or any other personal-information fields. Accordingly, we do not directly collect your name, email address, phone number, or postal address through the Website.

We use Cloudflare Web Analytics to measure traffic. The service collects technical information in aggregated, anonymous form: pages viewed, country code, device type, browser, and referrer. Cloudflare Web Analytics does not use cookies, does not store full IP addresses, and does not identify individual visitors.

4. Purposes of processing

The anonymous technical data described in Section 3 is processed for the following purposes: (i) evaluating the effectiveness of Website content and improving user experience; (ii) detecting and responding to technical issues and protecting the Website against unauthorized access; (iii) producing internal reports on traffic trends.

We do not use this data for targeted advertising, do not build personal profiles, and do not sell data to third parties.

5. Legal basis for processing

Processing of anonymous technical data for Website operation is based on the legitimate interests of the data controller — specifically operating, protecting, and improving the Website.

Because the Website does not collect personal data within the meaning of Article 2 of the PDPD, the data-subject consent obligations under Article 11 of the PDPD do not arise for Website activity.

6. Cookies and similar technologies

The Website does not use tracking cookies, does not run advertising pixels, and is not integrated with third-party analytics tools such as Google Analytics or Facebook Pixel.

Cloudflare may set certain strictly necessary technical cookies to protect the Website from attacks and to maintain stable operation. These cookies are not used for individual tracking.

7. Data retention

Anonymous technical data collected through Cloudflare Web Analytics is retained for up to six (6) months, after which it is aggregated or deleted in accordance with Cloudflare's policies.

Because the Website does not collect identifying personal data, no individualized retention applies.

8. Data security

We apply reasonable technical and organizational measures to protect the Website, including: TLS encryption for all connections; hosting on the Cloudflare network with DDoS and unauthorized-access protections; and access controls over administrative tools.

No system is absolutely secure. We make reasonable efforts to protect information but cannot guarantee protection against every possible risk.

9. Cross-border data transfers

Cloudflare operates a global network of servers. The anonymous data described in this Policy may be processed at Cloudflare data centers outside the territory of Vietnam.

Because the data is processed in anonymous form and does not constitute personal data within the meaning of the PDPD, this activity does not fall within the scope of the cross-border transfer impact assessment under Article 25 of the PDPD. We nevertheless maintain protections consistent with industry practice.

10. Your rights as a data subject under PDPD

Under Decree 13/2023/NĐ-CP, you have the following rights as a data subject: (a) to be informed about data processing; (b) to give and withdraw consent; (c) to access your data; (d) to correct inaccurate data; (e) to delete personal data; (f) to restrict or object to processing; (g) to data portability; (h) to complain, denounce, or sue in accordance with the law; (i) to claim damages in accordance with the law.

Because the Website does not collect personal data, these rights primarily arise in connection with the Tendpaw mobile app. You may contact us at any time to exercise the rights above.

11. Children

Tendpaw is designed for users aged sixteen (16) and over. We do not knowingly collect personal data of children under sixteen (16) through the Website.

If you are a parent or guardian and believe that your child has provided personal data to us through the mobile app, please contact us so that we can handle the request in accordance with Article 20 of the PDPD.

12. Third-party links and the Tendpaw app

The Website may contain links to the App Store, Google Play, and Tendpaw's social media channels. When you follow these links, the privacy policies and terms of those third parties will apply. We do not control and are not responsible for the data practices of third parties.

The Tendpaw mobile app has its own privacy policy. A link to that policy will be added on this page once the app launches.

13. Changes to this Policy

We may update this Policy from time to time to reflect changes in law, technology, or data-processing practices. The latest version is always published at tendpaw.vn/en/privacy, with the update date shown at the top of the page.

For material changes, we will publish a prominent notice on the Website before the changes take effect.