Personal Data Protection Policy (Compliant with Decree 13/2023/ND-CP)
1. Purpose and Scope of Data Collection
Lym collects basic personal data (Full Name, Phone Number, Email, Shipping Address, Order History) solely to fulfill purchase contracts, deliver orders, issue invoices, process returns/warranties, and reconcile Affiliate Partner commissions.
2. Explicit Opt-in Consent Mechanism
All checkout and registration forms require active opt-in consent from the Data Subject (consent checkboxes are never pre-ticked) and record a timestamped Consent Audit Log in accordance with Article 11 of Decree 13/2023/ND-CP and Law 91/2025/QH15.
3. Rights of the Data Subject
You have the right to access, rectify, withdraw consent, export, or request deletion of your personal data at any time via email at [email protected]. Lym processes all requests within 72 hours as required by law.