Policies · Data Deletion
Account Data Deletion
Effective May 16, 2026 · Per Facebook + Google OAuth requirements and Vietnam Personal Data Protection law
1. How to request deletion
Three ways — pick whichever works for you:
Option A · Email (fastest)
Send an email to [email protected] with subject: “Account Data Deletion Request”
Include:
- Email registered with your By Quinny account
- How you signed up (Google / Facebook / Zalo / Magic link)
- Reason (optional, helps us improve)
We acknowledge within 48 hours and complete within 30 days.
Option B · Zalo OA
Message the Zalo OA By Quinny or hotline +84 86 201 7193 with: “I want to delete my account data”.
We will ask 1–2 verification questions and send an email confirmation before deleting.
Option C · Self-service (coming soon)
Phase 9.8 — a self-service “Delete account” button at /account/profile. In development.
2. Process + timeline
- Day 0 — request received: we send an email acknowledgement within 48 hours, with a summary of data to be deleted.
- Days 1–7 — cancellation window: gives you time to change your mind. Replying “Cancel request” stops the process.
- Days 8–14 — soft delete: profile is disabled, sign-in blocked, no marketing emails. Data still exists in the DB but hidden.
- Days 15–30 — hard delete: full removal from Supabase (profile + style profile + wishlist + vouchers). We send a final confirmation email.
3. Data fully deleted
- Profile: name, email, phone, avatar
- OAuth IDs: Google sub / Facebook id / Zalo id linked to your account
- Style profile + quiz results
- Wishlist + recently viewed products
- Vouchers + accumulated Hội Chị Đẹp loyalty tier
- Sign-in history + device records
- Product reviews you posted (or anonymized if you want to keep the review available to other shoppers)
4. Data we must retain (legal requirement)
Some data we cannot delete by law:
- Invoices + orders: 10 years per Vietnam Accounting Law (Article 41, Law No. 88/2015/QH13). We retain order data in anonymized form — only order ID, amount, and date, with no link to your identity.
- Bank transaction logs: held by SePay under their own retention policy (typically 5 years) — outside our control.
- System backups: Supabase backups may contain snapshots for up to 30 days. After that, backups are overwritten and your data is permanently gone.
5. When you revoke external OAuth (Google / Facebook / Zalo)
If you revoke By Quinny's access from Google / Facebook / Zalo settings:
- You can no longer sign in via that provider
- Your By Quinny account still exists — you can sign in via another provider or Email magic link with the same email
- To fully delete your By Quinny account, still submit a request per Section 1
Facebook users — how to revoke directly:
- Facebook Settings → Apps and Websites
- Find “By Quinny Website” → Remove
- Tick “Delete all posts/photos and activity” → Confirm
Facebook will send us a callback to remove the link — we will automatically remove facebook_id from your profile within 7 days.
6. Special cases
- Orders in transit: we cannot remove delivery information until the order is successfully received or canceled
- Pending disputes: if you have an active complaint or dispute, related data is retained until resolution
- Valid vouchers: we will inform you in advance — you choose to use them or proceed with deletion
7. Contact + complaints
If you have not received completion confirmation after 30 days, or wish to file a complaint about the process:
- Complaint email: [email protected]
- Competent authority: Authority of Information Security — Ministry of Information and Communications (Vietnam)
A note from Quinny
You may leave, but our wishes for you remain.
Whenever you wish to return — sign up again with the same email, and we are here.