Privacy notice

Fivehy Ltd (trading as Vialdee), a company registered in England and Wales under number 17216524, with its registered office at Office 4689 A L, 182-184 High Street North, Area 1/1, East Ham, London, E6 2JA, United Kingdom, is the data controller for the information described here. Contact us at vialdee@fivehy.com or Zalo @vialdee.

We have not appointed a Data Protection Officer. Our core activity is retail sale, not large-scale monitoring of individuals or the processing of sensitive personal data. Whether an appointment is required here is being confirmed, and if that changes this notice will say so and name them.

To fulfil an order: your name, email address, Vietnamese mobile number and delivery address. The purpose is performing the sale and getting the parcel to you.

If you create an account: the same contact details, plus any addresses you save to your address book, so you do not retype a full Vietnamese address on every order.

If you ask us for an invoice: the billing details we need to issue it. What those are is being confirmed and this notice will list them before any are collected.

If you ask to be told when a sold-out decant returns: your email address and which language to write in, kept until we have sent that one message or you ask us to stop. It is used for nothing else.

We do not collect or store card numbers. VietQR transfers happen inside your own banking or e-wallet app — your bank's app, MoMo, ZaloPay or ViettelMoney — and we never see your account details. We do not collect sensitive personal data: no health, religious, biometric or similar information.

Name, phone number and delivery address are necessary to perform the contract — a courier cannot deliver without them. Without these we cannot accept your order.

Your email is necessary because it is how we send your order confirmation and how you retrieve a guest order afterwards.

Everything else is optional. An account, a saved address, an invoice and marketing email are each voluntary, and declining any of them does not affect your ability to buy.

Contact and delivery data: necessary for performance of the contract of sale, and separately consented to at checkout.

Order and tax records: a legal obligation — we are required to keep them.

Marketing email: consent only. It is never required to place an order, and withdrawing it does not affect your purchase or anything else about your account.

Order records, including the address they were shipped to: for the period accounting and tax law requires. That period is being confirmed and will be stated here.

Account and address book: for as long as your account is open. Delete your account and they go with it, except for the order records above.

Marketing consent: until you withdraw it.

Cart data: 30 days from last activity, then deleted automatically.

Our delivery carrier receives your name, phone number and address, solely to deliver your parcel. The carrier will be named here once one is contracted.

Supabase hosts our database on servers in ap-south-1 (Mumbai, India), and Vercel hosts the website. Both act as data processors under our instructions.

Storing data in India is a cross-border transfer. It is carried out on the basis of your consent and because it is necessary to perform the contract with you, and the processor is bound by contractual data protection terms. The formalities a transfer out of Vietnam requires are being confirmed and will be described here.

We do not sell your data and we do not share it with advertisers.

On request we will: stop processing on consent you withdraw; give you a copy of the data we hold about you, in a machine-readable form if you want one; stop a particular use you object to; delete your data; pause processing while a dispute is resolved; and correct anything inaccurate.

Email vialdee@fivehy.com and we will respond within 30 days. Erasure is honoured by destroying your name, address and contact details while retaining the financial record of the order, which accounting and tax law obliges us to keep.

If you believe we have handled your data unlawfully you may complain to the supervisory authority, which will be named here once confirmed.

We keep an anonymous cart token and your language preference in your browser's local storage. Neither identifies you, and neither is sent to a third party.

If you sign in, your session token is stored the same way so you stay signed in between visits. Signing out removes it.

We run no advertising or analytics trackers, so there is no consent banner to dismiss.