This is a translation provided for your convenience. The Vietnamese version at ikihealing.com/chinh-sach-bao-mat.html is the original and is the version that applies; if the two differ, the Vietnamese version prevails.
This document is written for the ordinary reader: it states clearly what IKI collects, what it is used for, who it is sent to, how long it is kept, and what you can do if you want to view, correct, delete or stop receiving messages. If you have any questions, write to contact@ikihealing.com or submit a request on the data rights page — IKI responds within 2 working days.
See the brand ownership statement and the operator of IKI.
1. Who is responsible
Công ty Cổ phần TMDV HOPE, tax code 0801404967, address Số 40A Quang Trung, P. Hải Dương, TP Hải Phòng — is the Controller and Processor of personal data for the website ikihealing.com, IKI's sales pages (trueveganprotein.com, tra.ikihealing.com, thanhhuongtra.ikihealing.com), the IKI application, Facebook fanpage, Zalo account and IKI's customer care channels.
Personal data protection department: email contact@ikihealing.com, phone 0987.931.551 (8am–5pm, Monday to Saturday).
1.1. Brand ownership statement and content responsibility
CÔNG TY CỔ PHẦN TMDV HOPE (HOPE CORP) is the owner of the IKI brand.
The website ikihealing.com and the IKI Beauty & Wellness fanpage are operated by the IKI team under HOPE CORP, with the aim of sharing knowledge on beauty care and proactive health for individuals and families. IKI Beauty & Wellness is an identity name within the IKI by HOPE CORP ecosystem.
The IKI team directly compiles and manages the content it produces. These articles are published under the IKI byline. Quoted materials and content are credited to their source, respecting the rights of the relevant authors and owners.
Contact information regarding the brand and content:
CÔNG TY CỔ PHẦN TMDV HOPE
Tax code: 0801404967
Address: Số 40A Quang Trung, P. Hải Dương, TP Hải Phòng, Việt Nam
Email: contact@ikihealing.com
Hotline: 0987931551 · 0398767885 · 0396748848
Brand information updated on 14/09/2026.
2. What data IKI collects, and where
- Body-constitution quiz: full name, email, Zalo number (optional) and your self-reported answers about eating, sleeping, exercise habits and how you feel physically. These answers are sensitive personal data (health-related); IKI processes them only after you tick a separate consent box for this purpose, and uses them only to calculate 6 lifestyle indicators, unlock your result, and send a menu suited to your constitution. This is not a medical diagnosis.
- Documents, ebooks, newsletters: email, name, phone number (optional).
- Orders (shop, sales pages): full name, phone number, delivery address, email, products and order value; amount and transaction code when paying via PayOS. IKI does not store bank card numbers.
- Zalo chat, Facebook Messenger, fanpage comments: message content, display name, phone number if you provide it.
- IKI application: as notified within the application when you register.
- Cookies and tracking codes: Google Analytics, Google Ads, Google Tag Manager, Meta Pixel (on some sales pages). Advertising tracking codes run only after you click "Accept" on the cookie bar; choosing "Essential cookies only" still allows the website to be used normally.
3. What the data is used for, and on what basis
- Delivering exactly what you requested (quiz result, ebook, documents, order, menu, answering questions): based on your request when you click submit or place an order.
- Sending further articles, menus, offers by email/Zalo, or calling to introduce products: only if you tick the "I want to receive more..." box (this box is not pre-ticked) or state so clearly in conversation. You may stop at any time (section 7).
- After-sales care: IKI staff may call or message to confirm your order, or check in on your use of the product you purchased.
- Measuring and improving the website: aggregated data, not identifying individuals, if you do not consent to cookies.
- Legal obligations: invoices, accounting records, responding to state authorities upon written request.
IKI does not sell or rent personal data, does not use self-reported health information to target advertising, and does not target people under 16.
4. What machines and AI process
Some steps are carried out by machines: reading messages in the order-management group to create orders, drafting suggested replies for staff, automatically answering some frequently asked questions on Facebook/Zalo, and prioritising customer care. All decisions on orders, product advice and pricing are made by a person. You have the right to request a human reply at any time by messaging "gặp nhân viên" (meaning "speak to staff"), and the right to request a review of any automated outcome relating to you.
5. Who the data is sent to (processors), and whether it goes abroad
IKI uses the services of the following providers to operate; each provider receives only the data it needs for its task and is bound by confidentiality under the service agreement:
- Supabase (database) and Vercel (web hosting) — servers located outside Vietnam.
- Resend (email sending) — United States.
- Google (Analytics, Ads, Tag Manager, Sheets/Drive for order records, Gemini AI model) and Meta (Facebook, Messenger, advertising) — United States.
- Anthropic (Claude AI model supporting order reading and content drafting) — United States.
- Telegram (internal notifications to sales staff about new customers) — servers outside Vietnam.
- Zalo (VNG, Vietnam), PayOS (payment, Vietnam), J&T Express (delivery, Vietnam), Shopee and TikTok Shop when you purchase on those platforms.
Therefore your data may be transferred to and stored outside Vietnam (mainly the United States and Singapore). IKI prepares and maintains a Cross-Border Personal Data Transfer Impact Assessment Dossier under Nghị định 356/2025/NĐ-CP, requiring the recipient to apply encryption and not to forward data to any other party beyond the stated purpose. You have the right to request that IKI stop transferring your data abroad (section 7); in that case IKI will discontinue services that depend on that transfer (for example email, care via Zalo) and retain only the minimum necessary for orders already placed.
Internally, only authorised staff may view customer data; self-reported health information is not shared in group chats.
6. How long data is kept
- Email, phone number and care history for sending messages and advice: 24 months from the last interaction, then deleted or de-identified.
- Body-constitution quiz answers: 24 months, unless you request earlier deletion.
- Orders, invoices, payment records: 10 years under accounting law.
- Consent logs and opt-out requests: at least 01 year after termination, to provide evidence if checked by state authorities.
7. Your rights and how to exercise them
You have the right to be informed, to view, correct, delete, withdraw consent, restrict processing, object to processing, request data portability and lodge a complaint. The fastest ways to do so:
- Stopping email: click "Click here to unsubscribe" at the bottom of any IKI email, or the "Unsubscribe" button in your mail client — takes effect immediately.
- Stopping Zalo messages: send "DỪNG" (STOP) in your conversation with IKI — the system records this and confirms immediately; staff will only reply when you ask a question.
- Stopping calls: tell staff "không gọi nữa" (do not call again) — your number is added to the do-not-call list that same day.
- Viewing, correcting, deleting data, or fully withdrawing consent: submit a request at ikihealing.com/quyen-du-lieu or email contact@ikihealing.com.
Timeframes IKI commits to: acknowledgment of receipt within 2 working days; viewing or correction completed within 10 days; withdrawal of consent or restriction of processing within 15 days (stopping promotional messages takes effect immediately); deletion within 20 days. Where data must be retained under accounting or tax law, IKI will clearly state which part cannot be deleted and why.
If you are not satisfied with how IKI has handled your matter, you have the right to lodge a complaint with Cục An ninh mạng và phòng, chống tội phạm sử dụng công nghệ cao (Bộ Công an) (the Department of Cybersecurity and Hi-tech Crime Prevention, Ministry of Public Security) — the authority responsible for personal data protection.
8. Promotional messages, emails and calls
- Sent only to people who have given consent; promotional emails and messages are labelled [QC] at the start and always include a way to opt out.
- Messages are sent only between 7am and 10pm; product introduction calls only between 8am and 5pm; no more than 3 messages or 1 call per number within 24 hours, unless you request otherwise.
- Staff making calls must state their name and organisation (IKI Healing – Công ty CP TMDV HOPE) before discussing products.
- Answering questions you have asked, confirming orders, and sending documents you have just requested are not considered advertising and are not subject to the limits above.
9. Security and incidents
- Data is encrypted in transit (TLS) and at rest on processors' systems; internal access is granted through authorised accounts and logged.
- If a personal data breach or loss is detected, IKI notifies the competent authority within 72 hours and informs affected individuals with guidance on next steps.
- IKI reviews data protection compliance annually and updates the Data Processing Impact Assessment Dossier whenever there is a change.
10. Changes to this policy
When a significant change occurs (adding a processor, changing the purpose, changing the retention period), IKI will publish a new version on this page with the update date and, for changes requiring renewed consent, will ask you again before applying it.
11. Contact regarding personal data
Công ty Cổ phần TMDV HOPE — Personal Data Protection Department
Số 40A Quang Trung, P. Hải Dương, TP Hải Phòng
Tax code: 0801404967
Email: contact@ikihealing.com
Phone: 0987.931.551
Submit a request online: ikihealing.com/quyen-du-lieu