Draft — requires legal review before launch
Privacy policy
This policy explains in plain language how we handle your data.
1. Data controller
Your personal data is controlled and processed by Lavender Coffee (157 Phung Chi Kien, Vinh City, Nghe An), the operator of XoiVinh.com. Contact: [email liên hệ] or hotline 094 832 35 97.
2. Data we collect
Depending on how you use the service, we may collect:
- When you log in with Google: your email, display name and avatar.
- When you order real drinks: your name, phone number, delivery address and its coordinates, and order notes.
- When you play the game: anonymous game progress (not linked to your identity unless you log in).
- Usage analytics events (for example page views or a finished shift) that contain no personal data.
3. Purposes
We use data to:
- Receive, prepare and deliver orders and contact you about them.
- Manage Lavender Points, vouchers and leaderboards tied to your account.
- Protect the service from fraud and abuse.
- Improve the game and service using non-identifying statistics.
4. Legal basis and consent
We process personal data in line with Decree 13/2023/ND-CP on personal data protection. Processing relies on your consent (when you log in or place an order) and on what is needed to fulfil the order you request. You may withdraw consent at any time; withdrawal does not affect processing done before.
5. Retention
Order data (name, phone, address) is kept for at most 12 months from the order date, then deleted or anonymised unless the law requires longer. Account data is kept until you ask us to delete it. Anonymous game progress is kept for a reasonable period and may be cleaned up periodically.
6. Sharing
We do not sell personal data. Data is shared only with the service providers needed to run the service:
- Supabase and Vercel: hosting and operation, with servers in Singapore.
- Google: login service.
- Goong: maps and delivery address lookup.
- Telegram: notifying the shop of new orders (including the order details needed to prepare and deliver it).
7. Your rights
You have the right to know, access, correct and delete your data, to restrict or object to processing, and to withdraw consent. You can ask us to delete your account and related data by contacting [email liên hệ] or the hotline; we will handle it within a reasonable time as required by law. Some order records may be kept where the law requires.
8. Cookies and local storage
We use cookies and localStorage that are necessary to keep your login session, save game progress, remember your language and protect against abuse. You can clear them in your browser settings, but anonymous game progress may be lost.
9. Children
The service is not aimed at children under 16. Children need the consent of a parent or guardian before providing personal data or placing orders. If we find we collected a child’s data without proper consent, we will delete it.
10. Contact
For any question or request about personal data, contact Lavender Coffee, 157 Phung Chi Kien, Vinh City, Nghe An, email [email liên hệ], hotline 094 832 35 97.