Policies · Privacy
Privacy Policy
Effective May 16, 2026 · Applies to byquinny.com + Zalo Mini App
1. Data controller
By Quinny — a women's fashion brand operating in Vietnam. Contact: [email protected] · Zalo OA By Quinny · +84 86 201 7193.
2. Data we collect
2.1 When you create an account
- Email — required, used for sign-in and order notifications
- Display name — shown on your dashboard and invoices
- Phone number (optional) — used only for delivery contact
- Avatar (if you sign in via Google / Facebook / Zalo)
- OAuth provider ID (Google sub / Facebook id / Zalo id) — used for authentication, never shared externally
2.2 When you purchase
- Shipping address
- Order line items + sizes + total
- Bank transfer reference (SePay transaction code — no card number)
2.3 When you interact
- Style quiz results (vibe / budget / size / comfort)
- Wishlist + recently viewed products
- Product reviews you submit
- Pseudonymous technical data: IP, browser type, device (for analytics + security)
We do NOT collect: government ID numbers, credit card numbers (handled by SePay), health data, real-time GPS location, your contact list.
3. How we use your data
- Order fulfillment: name + address + phone passed to courier (GHN / GHTK / ViettelPost)
- Account management: sign-in, order history, Hội Chị Đẹp loyalty tier
- Personalization: based on your quiz and purchase history, we recommend outfits matching your style
- Communication: order status notifications (email + Zalo OA), promotions (only with your newsletter opt-in)
- Security: anomaly detection, fraud and spam prevention
4. Third parties we share with
We do not sell your data. We share only with partners required to deliver the service:
| Partner | Purpose | Data |
|---|---|---|
| Supabase (US/EU) | Database hosting | Full profile + orders |
| Vercel (US) | Website hosting | Technical logs + cache |
| Resend (US) | Transactional email | Email + name |
| SePay (VN) | Bank webhook | Order ID + amount |
| Abit (VN) | Warehouse + invoicing | Name + phone + delivery address + order |
| Google (US) | OAuth sign-in (if you choose) | Email + name + avatar with your consent |
| Facebook/Meta (US) | OAuth sign-in (if you choose) | Name + email + avatar with your consent |
| Zalo VNG (VN) | OAuth + OA support chat | Name + avatar with your consent |
| GHN / GHTK / ViettelPost (VN) | Order delivery | Recipient name + phone + address |
| PostHog (US) | Pseudonymous analytics | Truncated IP + device, NO email |
When required by law (court order, Vietnamese tax authority), we comply with disclosure within the scope of the request.
5. Data retention
- Active accounts: retained indefinitely until you request deletion
- Orders: 10 years per Vietnamese Accounting Law
- Technical logs: 90 days
- Inactive accounts (36 months): we email you 30 days in advance — no response triggers profile anonymization
6. Your rights
At any time, you may:
- View + edit: visit /account/profile
- Request deletion: see /policies/en/data-deletion (completed within 30 days)
- Export your data: email [email protected] — we send a JSON file within 7 business days
- Withdraw marketing consent: unsubscribe link in any email, or disable notifications in /account/profile
- File a complaint: you may complain to the relevant Vietnamese authority (Authority of Information Security, Ministry of Information and Communications)
7. Cookies + tracking
We use the minimum cookies necessary:
bq_session— sign-in (httpOnly, 30 days)bq_oauth_*— OAuth flow protection (10 minutes)- localStorage: cart + wishlist + style profile (stays on your device only, never pushed to server unless you sign in)
- PostHog analytics — truncated IP, no personal identification
We do not use cross-site advertising cookies (Facebook Pixel tracking, Google Ads remarketing).
8. Children under 16
By Quinny is intended for adult women (18+). We do not knowingly collect data from children under 16. If a parent discovers their child under 16 has created an account, please email us — we will delete it within 7 days.
9. Policy updates
For material changes (e.g., adding a data-sharing partner, expanding usage purposes), we will email you 30 days in advance and update the effective date at the top of this page.
10. Contact
- Email: [email protected]
- Zalo OA: By Quinny
- Hotline: +84 86 201 7193 (9 AM – 10 PM, daily, ICT)