CHÍNH SÁCH BẢO MẬT

INTRODUCTION

Welcome to the MEDPRO software - Appointment Booking (referred to as "Software"), operated by PKH Application Joint Stock Company (referred to as "we" or "our"). We take our responsibility seriously regarding information security in accordance with the regulations on the protection of personal information in Vietnamese law. We are committed to respecting the privacy and concerns of all users for the Software (referred to as "Services" we provide on the Software). We recognize the importance of the personal data you trust us with and believe that we have a responsibility to manage, protect, and process your personal data appropriately. This Privacy Policy ("Privacy Policy" or "Policy") is designed to help you understand how we collect, use, disclose, and/or process the personal data you provide to us and/or that we collect about you, whether now or in the future, as well as to help you make informed decisions before providing any of your personal data to us. Please read this Privacy Policy carefully. If you have any questions about this information or our information security practices, please contact us at the hotline 19002115 or email us at info@medpro.vn.

"Personal data" means data, whether true or not, about an individual from which the individual can be identified, or from data and other information that an organization has or is likely to have access to. Common examples of personal data may include names, ID numbers, and contact information.

By using the Services, registering an account with us, accessing our Software, or interacting with the Services, you acknowledge and agree that you accept the methods, requirements, and/or policies described in this Privacy Policy, and hereby consent to allow us to collect, use, disclose, and/or process your personal data as described herein. IF YOU DO NOT CONSENT TO THE PROCESSING OF YOUR PERSONAL DATA AS DESCRIBED IN THIS POLICY, PLEASE DO NOT USE OUR SERVICES OR ACCESS OUR SOFTWARE. If we change our Privacy Policy, we will post those changes or the amended Privacy Policy on the Software. We reserve the right to supplement this Privacy Policy at any time.

WHEN WILL WE COLLECT PERSONAL DATA?

We will/may collect personal data about you when:

• You register and/or use the Services or access our Software, or create an account with us;
• You submit any forms, including but not limited to registration forms or other forms related to any of our utilities and services, either online through the Software or in other forms;
• You enter into any agreements or provide materials or information related to interactions between you and us, or when you use our utilities and services;
• You interact with us, such as through phone calls (which may be recorded), letters, faxes, face-to-face meetings, social media communication platforms, and email;
• You use our electronic services, or interact with us through our Software or use services on our Software. This includes, but is not limited to, through cookie files that we may deploy when you interact with our applications or Software;
• You perform transactions through the Software or use our Services;
• You provide feedback or submit complaints to us;
• You submit your personal data to us for any reason.

The above are just some common cases in which we collect your personal data, and do not reflect all the cases in which we will collect your personal data.

When you access, use, or interact with our Software or mobile applications, we may collect certain information through various automatic or passive means using different technologies, which may be downloaded to your device and may set or modify settings on your device. The information we collect may include, but is not limited to, Internet Protocol (IP) address, computer/mobile device operating system and browser type, your mobile device's type, characteristics of your mobile device, unique device identifier (UDID) or mobile equipment identifier (MEID) of your mobile device, a referring website address (if any), and the pages you visited on our Software and mobile applications and the number of times you accessed them. We can only collect, use, disclose, and/or process this information for the Purposes (defined below).

Our mobile applications may collect precise information about the location of your mobile device using technologies such as GPS, Wi-Fi, etc. We collect, use, disclose, and/or process this information for one or more Purposes, including but not limited to location-based services you request or to provide you with information relevant to that location or to allow you to share your location with our other partners as part of our Services. For most mobile devices, you can turn off the ability for us to collect information about your location by modifying the phone's settings. If you have questions about how to disable your mobile device's location-based services, please contact your mobile device service provider or device manufacturer.

WHAT DATA WILL WE COLLECT?

Personal data that we may collect includes, but is not limited to:

• Full name;
• Gender;
• Date of birth;
• Your address;
• Your payment method;
• Phone number;
• Email address;
• Any other information about you when you log in and use the Services or our Software, and when you use the Services or our Software, as well as information about how you use the Services or our Software; and
• Aggregated data about the content you use.

If you do not want us to collect the above-mentioned information/personal data, you may choose not to participate at any time by notifying our Data Protection Officer via email at info@medpro.vn. You can find more information about this in the section "How can you withdraw consent, remove, access, or adjust the information you have provided to us?" below. However, note that withdrawing your name from our personal data collection process or revoking our permission to collect, use, or process your personal data may affect your use of the Services on our Software.

ACCOUNT SETUP

To use certain functions of the Services, you will need to log in and create a user account, which requires you to submit certain personal data. When you register and create an account, we ask you to provide us with information including but not limited to your name, first and last name, age, date of birth, gender, address, phone number, email address, your ID documents, your personal profile number created and/or managed by our partners, and other necessary information.

ACCESSING THE SOFTWARE

Similar to most other websites or applications, your device sends information, which may include personal data about you, recorded by a web server when you access our Software. This information typically includes but is not limited to IP address, operating system, name/version of your computer's browser, date and time of access, and sometimes a "cookie" to help our Software remember your last visit. If you log in, this information is linked to your personal account. This information is also included in anonymous statistical data to help us understand how visitors use our website.

COOKIES

Sometimes we may use "cookies" or other features to allow us or third parties to collect or share information that will help us improve our Software and the Services we provide, or to help us introduce new services and features. "Cookies" are unique identifiers we send to your computer or mobile device, allowing us to identify your computer or device and let us know when the Services or Software are used or accessed, by how many people, and to track movements within our Software. We may link cookie information to personal data. Cookies are also used to provide content based on your interests and to track your usage of our Software.

You can refuse to use cookies by selecting appropriate settings on your device. However, please note that if you do this, you may not be able to use the full functionality of our Software or the Services on our Software.

COMMUNITY & SUPPORT

We provide customer support services through email, telephone hotline, and through feedback forms. To provide customer support services, we will request your email address. Apart from this information, we do not require any personal data to provide customer support services. We only use the information received from customer support requests, including but not limited to email addresses, for customer support services, and we do not transfer or share this information with any third party.

You can also post inquiries within our Software. We will respond to your inquiries as soon as possible, and we have the full right to use the issues you have submitted to us to improve our content and services, and/or update the content of the inquiries without any notice or permission in any form to you.

SURVEYS

Sometimes, we may request information from users through surveys. Participation in these surveys is entirely voluntary, and therefore, you can choose whether or not to disclose your information to us. The information requested may include but is not limited to contact information (such as your email address) and demographic information (such as hobbies or age). Survey information may be used for monitoring or improving the use and satisfaction of the Services and/or may be transferred to third parties, our partners, so that we can improve, enhance the quality, content, services, and management or take other measures based on the survey.

HOW WE USE THE INFORMATION YOU PROVIDE

We may collect, use, disclose, and/or process your personal data for one or more of the following purposes:

1. Reviewing and/or processing your registration or transactions with us or transactions or correspondence with third parties through the Services.
2. Managing, operating, providing, and administering your use of the Services and/or access to our Software, as well as your user account relationship with us.
3. Managing, operating, administering, and providing for you, as well as creating conditions for the provision of our Services, including remembering your preferences.
4. Customizing your experience through the Services by displaying content based on your interests and preferences, providing a faster way for you to access your account information, and allowing us to contact you if necessary.
5. Responding, processing, resolving, or completing a transaction, and/or addressing your requests for certain benefits and services, and notifying you of service issues and abnormal account activities.
6. Enforcing our Terms of Service and our Usage Rules or any applicable end-user license agreement.
7. Protecting the personal safety and rights, property, or safety of others.
8. Identifying and/or verifying your identity.
9. Maintaining and managing any software updates and/or other updates and support that may be required from time to time to ensure the smooth operation of our Services.
10. Conducting research, analysis, and development (including but not limited to data analysis, surveys, development and/or creation of utility features and services) to analyze how you use our Services, improve our Services or utilities, and/or enhance your customer experience.
11. Facilitating advertising and other tests and surveys, among other activities, verifying the scale and composition of user objects, and understanding their experience with the Software.
12. When permitted by you in advance, for marketing purposes, sending you information and materials through various communication methods such as postal mail, email, location-based services, or other methods, related to utilities and/or services (including, but not limited to, utilities and/or services of third parties that we may collaborate with or partner with), whether those utilities or services currently exist or are created in the future.
13. Complying with legal procedures or to comply with or under the regulations of any applicable law, requests from the government or competent authority of any jurisdiction.
14. For statistical purposes and research to meet reporting requirements and/or maintain internal records or regulatory requirements.
15. Conducting investigative and verification processes, or other screening activities (including, but not limited to, background checks) to comply with legal or regulatory obligations or our risk management procedures, which may be required by law or may have been applied by us.
16. Checking our Services or Software activities.
17. Preventing or investigating any fraudulent, unlawful, negligent, or wrongful activities, whether related to your use of our Services or any issues arising from your relationship with us, whether or not there are suspicions of the above activities.
18. Storing, establishing servers, backing up (whether for disaster recovery purposes or other purposes) your personal data, whether within or outside your jurisdiction.
19. Processing and/or facilitating a business asset transaction or a potential business asset transaction involving us as a participating party and/or involving our partner or affiliate companies as participating parties. ("Business asset transaction" is any transaction to buy, sell, lease, merge, consolidate, or any other reorganization, liquidation, or financing of an organization or a part of an organization or of any business or assets of an organization).
20. Any purpose that we inform you of at the time of obtaining your consent, unless the processing of data without your consent is permitted by the provisions of the law on the protection of personal information.

SHARING INFORMATION FROM SERVICES

To some extent, our Services allow users to view your information, and this only and not beyond the purpose of looking up, viewing, and confirming the user's profile number that already exists in our data system to complete the operations in registering and using the services on the Software. In a typical transaction, users can access the name, profile number, and email address of other users. Our Terms of Service require anyone holding personal data of another user ("Recipient Party") to:

• Ensure that it is used only to look up the profile number related to their account.
• Only use the correct profile number with personal information for themselves.
• Fully bear the loss and legal responsibility for the use of the profile number and personal information.
• Comply with all applicable laws on the protection of personal information.
• Allow the disclosing party ("Disclosing Party") to delete their name from the Recipient Party's database.
• Allow the Disclosing Party to view what information the Recipient Party has collected about them.

HOW WE USE THE INFORMATION YOU PROVIDE

We may collect, use, disclose, and/or process your personal data for one or more of the following purposes:

• To review and/or process your registration or transactions with us, or your transactions or communications with third parties through the Services.
• To manage, operate, provide, administer, manage your use of the Services and/or access to our Software, as well as your relationship and user account with us.
• To manage, operate, administer, and provide for you, as well as facilitate the provision of our Services, including, but not limited to, remembering your preferences.
• To customize your experience through the Services by displaying content based on your interests and preferences, providing a quicker method for you to access your account information, allowing you to submit information to us, and enabling us to contact you if necessary.
• To respond, process, resolve, or complete a transaction and/or respond to your requests for certain features and services and notify you of service issues and abnormal account activities.
• To enforce our Terms of Service and User Agreement or any applicable end-user license agreement.
• To protect the personal safety and rights, property, or safety of others.
• To identify and/or verify.
• To maintain and manage any software updates and/or other updates and support that may be required from time to time to ensure the smooth operation of our Services.
• To address customer service issues or respond to inquiries, perform your instructions, resolve or respond to any queries sent by (or on behalf of) you.
• To contact you via phone, text messages and/or fax, email and/or mail or other methods for the purpose of managing and/or managing your relationship with us or your use of our Services, such as providing administrative information to you regarding our Services. You acknowledge and agree that our contact may be by sending letters by mail, documents or notices to you, which may include the disclosure of certain personal data about you to provide such documents as well as on packaging/envelopes.
• To notify you when another user has used your information or account to register for and use the Services on our Software.
• To conduct research, analysis, and development activities (including but not limited to data analysis, surveys, development and/or specification of features and services) to analyze how you use our Services, improve our Services or features, and/or improve your customer experience.
• To enable advertising and other checks and surveys, among other activities, to verify the scale and composition of the user population and understand their experience with the Software's Services.
• If you allow it, for marketing purposes, to send you information and materials related to features and/or services through various communication methods such as mail, email, location-based services, or other methods, including but not limited to features and/or services of third parties that we may collaborate or affiliate with, whether such features or services exist now or are created in the future.
• To comply with legal procedures or to comply with or pursuant to the regulations of any current law, requests from the government or competent authority of any jurisdiction.
• To compile statistics and research to meet reporting requirements and/or maintain internal records or regulations.
• To conduct investigations and verifications or other screening activities (including, but not limited to, background checks) in compliance with the requirements of the law or our risk management or control procedures, which may be required by law or may have been applied by us.
• To check our Services or Software activities.
• To prevent or investigate any fraudulent, unlawful, or improper activities, whether related to your use of our Services or any issues arising from your relationship with us, and whether there are suspicions of the above activities or not.
• To store, establish servers, back up (whether for disaster recovery purposes or other purposes) for your personal data, whether inside or outside your area.
• To process and/or facilitate a business asset transaction or a potential business asset transaction, a case in which such transaction involves us as a participating party and/or involves a partner or affiliate of ours as a participating party. ("Business asset transaction" means any purchase, sale, lease, merger, consolidation, or any other reorganization or any other acquisition, liquidation, or sponsorship activity of an organization or part of an organization or any business or property of an organization).
• Any other purpose that we notify you of at the time of obtaining your consent. (collectively referred to as the "Purposes").

The purposes for which we will or may collect, use, disclose, and/or process your personal data depend on the circumstances, and those purposes may not appear above. However, we will inform you of those other purposes at the time of obtaining your consent, unless processing is applicable without your consent as permitted by privacy laws or regulations.

SHARING INFORMATION FROM SERVICES

To some extent, our Services allow users to view information about you, and this only and does not go beyond the purpose of looking up, viewing, and confirming the user's profile number that exists on our data system, to complete operations in registering and using services on the Software, to avoid affecting, confusing, or duplicating our data. In a typical transaction, users can access the name, profile number, and email address of other users. Our Terms of Service requires any user holding the personal data of another user ("Recipient") to:

• Ensure that it is used only to look up the profile number of their account.
• Use only the correct profile number with personal information that belongs to them.
• Fully bear the damage and legal responsibility for choosing to use their profile number and personal information.
• Comply with all privacy laws applicable to the protection of personal information.
• Allow the disclosing user ("Disclosing Party") to delete their name from the Recipient's database; and
• Allow the Disclosing Party to view what information the Recipient has collected about them.

PROTECTING CUSTOMER INFORMATION

We implement various security measures to ensure the safety of your personal data on our systems. Your personal data is stored behind security networks on our systems. We commit to maintaining personal data in compliance with privacy laws and/or any other applicable laws. This means that we will delete or remove identifying information from your personal data as soon as reasonable to assume that:

• Keeping personal data no longer serves the purpose of collecting that personal data.
• Retention is no longer necessary for any legitimate or business purpose.

If you cease to use the Software or your right to use the Software and/or Services is terminated, we may continue to store, use, and/or disclose your personal data in accordance with this Privacy Policy and our obligations under privacy laws. Depending on the applicable law, we may safely destroy your personal data without prior notice to you.

DO WE DISCLOSE INFORMATION COLLECTED FROM ACCESSORS TO THIRD PARTIES OR NOT?

During the performance, we will or may need to disclose your personal data to partners and/or our affiliates, and/or other third parties, whether inside or outside of Vietnam, for one or more of the above Purposes. Third-party service providers, partners, and/or affiliates will process your personal data on our behalf for one or more of the above Purposes.

INFORMATION COLLECTED BY THIRD PARTIES

We, and third parties, may occasionally provide downloadable applications for you to use on or through the Services. These applications may access, and allow a third party to view, your identifying information, such as your name, your user ID, your computer's IP address, or other information. Additionally, these applications may require you to provide additional information directly to the third party. Utilities or services provided by these third parties through these applications are not owned or controlled by the Software. You should read the terms and policies published by these third parties on their websites or elsewhere.

DISCLAIMER OF SECURITY OBLIGATIONS AND THIRD-PARTY WEBSITES

WE DO NOT GUARANTEE THE SECURITY OF PERSONAL DATA AND/OR OTHER INFORMATION YOU PROVIDE ON THIRD-PARTY WEBSITES. We implement various security measures to maintain the security of your personal data that we store or control. Your personal data is stored behind security networks on our systems. When you register for services, make transactions, or access your personal data, we recommend using a secure server. All personal data or information you provide will be encrypted into our databases as described above.

To provide you with added value, we may choose various third-party websites to link to. We may also engage in marketing relationships and other relationships to provide additional services and features to you. These linked sites have their own privacy policies and separate security measures independently of us. Even if that third party links to us, we still do not control these linked sites, each of which has its own privacy protection and data collection methods, independent of us. Data collected by our marketing partners or third-party websites (even if provided on or through our Software) may not be received by us.

Therefore, we are not responsible or legally responsible for the content, security measures (or lack of security measures), and activities of these linked sites. These linked sites are provided for your convenience, and therefore, you are responsible for accessing them. However, we try to protect the integrity of our Software and links on each website, and therefore, we welcome feedback on these linked sites (including, but not limited to, if a specific website is not working).

WILL WE SEND YOUR INFORMATION ABROAD?

Our servers and central databases are located and operated in Vietnam. If you are not a Vietnamese resident, your personal data and/or information may be sent, stored, or processed outside your country. We do not guarantee and are not responsible for securing your personal information according to the regulations and laws of your country.

CAN YOU WITHDRAW, DELETE, REQUEST ACCESS, OR ADJUST THE INFORMATION YOU PROVIDED TO US?

Withdrawal of Consent and Consent Reversal:

To change your registered email, please inform us by sending an email to our Personal Data Protection Department at info@medpro.vn. Please note that due to email scheduling, you may still receive emails in the process of being composed.

You can withdraw your consent for the collection, use, and/or disclosure of your personal data that we are storing or controlling by emailing our Personal Data Protection Department at info@medpro.vn. Once we receive your clear request to withdraw consent and verify your identity, we will process this request and then cease to collect, use, and/or disclose your personal data as specified in your request. If we cannot clearly verify your request, legal consequences may arise.

However, withdrawing consent may lead to certain legal consequences. It may also affect your use of our Services and facilities on our Software. Depending on the nature of the request, this may mean that we cannot continue to provide Services to you. We may need to terminate your current relationship and/or transactions with us, etc., depending on the case, and we will notify you accordingly.

Access and/or Edit Personal Data Request:

If you have registered an account with us, you can access and/or edit your personal data that we are storing or controlling through the Account Information Editing page on our Software. If you have not registered an account with us, you can request access and/or edit your personal data that we are storing or controlling by sending a request via email to our Data Manager at info@medpro.vn. We will need sufficient information from you to determine your identity and the nature of your request to be able to process your request.

We will not charge you for resolving and processing requests for access to your personal data. We reserve the right to refuse to edit your personal data in accordance with the provisions of personal information protection laws, cases where those laws require and/or allow an organization to refuse to edit personal data in such cases, and/or our partners refusing to adjust your personal information.

QUESTIONS, CONCERNS, OR COMPLAINTS? CONTACT US

If you have any questions or concerns about our privacy protection methods or your transactions with the Services, please contact: info@medpro.vn.

If you have any complaints or objections regarding how we process your personal data or how we comply with privacy protection laws, please contact us via email at info@medpro.vn along with your complaint or objection.

GENERAL TERMS

This Privacy Policy is an integral part of our Terms of Service and Software Use Policy. Please read the Terms of Service and Software Use Policy for a full understanding of our rules, terms, policies, and instructions before accessing the Software and/or registering and/or using the Services on our Software.

I HAVE READ THIS POLICY AND AGREE TO ALL TERMS IN THE ABOVE CONTENT AND ANY SUBSEQUENT AMENDMENTS TO THE ABOVE CONTENT. BY CONTINUING TO ACCESS AND USE THE SOFTWARE, I UNDERSTAND THAT I AM CREATING AN ELECTRONIC SIGNATURE THAT IS VALID AND EFFECTIVE SIMILAR TO THE SIGNATURE I SIGN MANUALLY.

Last updated: November 31, 2022.