Privacy Policy – THAO NGUYEN LLC

Our Pledge to Safeguard Your Personal Information

At THAO NGUYEN LLC, your privacy is not a compliance checkbox, a legal afterthought, or a vague promise buried in fine print. It is a foundational principle that shapes how we build our systems, train our team, and conduct our business every single day. We understand that when you share your personal information with us, you are extending a profound trust that we will protect it, use it only as you would reasonably expect, and never abuse the access you have granted us. This Privacy Policy is our comprehensive statement to you about what information we collect, why we collect it, how we use it, with whom we share it, and the rights you have to control it. We have written this policy in plain, accessible language because we believe that transparency is meaningless if it is buried in legalese that no one reads or understands. We invite you to read this document thoroughly, knowing that the time you invest will give you a clear picture of exactly how your data is handled and why you can feel confident entrusting it to us.

The digital age has brought extraordinary convenience and connection, but it has also brought well-founded concerns about surveillance, data exploitation, and identity theft. At THAO NGUYEN LLC, we are customers ourselves, and we share those concerns. We have built our data practices to reflect the standard we would want for our own personal information. We collect only what is necessary. We protect it with industry-leading security measures. We do not sell it. We do not traffic in it. We treat it as a sacred responsibility. This policy details those commitments and explains the mechanics of how we fulfill them.

Scope and Consent

This Privacy Policy applies to all information collected by THAO NGUYEN LLC when you interact with us through our website, thaonguyen.online, when you place an order, when you create an account, when you subscribe to our communications, when you contact our customer service team, or when you otherwise engage with our brand and services. It covers information collected directly from you, information collected automatically through your use of our website, and information we may receive from third parties such as payment processors and shipping partners.

By accessing or using our website, by creating an account, by placing an order, or by otherwise providing us with your personal information, you consent to the collection, use, disclosure, and retention of your information as described in this Privacy Policy. If you do not agree with any part of this policy, you should discontinue use of our website and services and refrain from providing us with your personal information.

We may update this Privacy Policy from time to time to reflect changes in our practices, in technology, in law, or in our business operations. When we make material changes, we will notify you by posting a prominent notice on our website, by sending an email to the address associated with your account, or by other means appropriate to the significance of the change. Your continued use of our services after such notice constitutes your acceptance of the updated policy. We encourage you to review this page periodically for the latest information on our privacy practices.

Information We Collect

Understanding what data we collect is the first step to understanding how your privacy is protected. We collect information in three primary ways: information you provide to us directly, information collected automatically when you use our website, and information we receive from third parties in connection with your transactions.

Information You Provide Directly

When you interact with THAO NGUYEN LLC, you may voluntarily provide us with various types of personal information necessary to fulfill your requests, process your orders, and communicate with you. This information includes:

Identity and Contact Information: Your full name, email address, telephone number, and shipping and billing addresses. This information is essential for processing orders, delivering products, sending order confirmations and tracking updates, and responding to customer service inquiries.
Account Credentials: If you create an account on our website, you provide a password. We store this password in a hashed and salted format that cannot be reversed into the original text, meaning even our own personnel cannot view your password.
Payment Information: When you make a purchase, you provide credit or debit card details, including the card number, expiration date, security code, and billing address. However, as detailed later in this policy, this sensitive payment data is tokenized and processed directly by Stripe, our PCI DSS Level 1 certified payment processor. Our servers never receive, store, or have access to your complete card number.
Order and Preference Information: The products you select, sizes, colors, designs, quantities, and any customization instructions you provide. This information is essential for fulfilling your orders accurately.
Communications and Correspondence: Any information you provide when you contact our customer service team via email, phone, or contact form, including the content of your messages, photographs you attach, and any other details you share in the course of your inquiry.
User-Generated Content: Product reviews, ratings, photographs of your purchases, social media posts directed to us, survey responses, and any other content you voluntarily submit or post.
Marketing Preferences: Your choices regarding the types of marketing communications you wish to receive, if any, and the contact channels through which you prefer to receive them.

Providing any of this information is voluntary, though certain information is necessary to complete a purchase or to access specific features of our website. We will make clear when information is required for a particular purpose.

Information Collected Automatically

When you visit our website, certain information is collected automatically through standard internet technologies. This information helps us understand how our website is used, diagnose technical issues, prevent fraud, and improve the user experience. It includes:

Device and Browser Information: The type of device you are using, the operating system, the browser type and version, and your device’s unique identifiers, such as IP address and device fingerprint data.
Usage and Log Data: The pages you visit, the products you view, the links you click, the time and duration of your visits, the referring website or source that brought you to us, search queries that led you to our site, and your navigation patterns through our website.
Transaction Data: Details of purchases you make, including products, prices, dates, and payment methods used, but excluding complete payment credentials.
Cart and Session Data: Items you add to your shopping cart, whether or not you complete the purchase, and session identifiers that maintain your browsing continuity.
Location Data: Approximate geographic location derived from your IP address, which provides information at the city or regional level. We do not collect precise geolocation data from your mobile device unless you explicitly grant permission.

This automatically collected information is generally non-identifying in isolation, but it can become associated with you when combined with other data we hold, particularly if you have an account or have placed an order. When such association occurs, we treat the combined data as personal information protected by this policy.

Information from Third Parties

We may receive information about you from trusted third parties who assist us in operating our business:

Payment Processors: Stripe provides us with transaction tokens, payment confirmation, and the last four digits of your payment card for reference and customer service purposes. We do not receive your full card number from Stripe.
Shipping Carriers: Our shipping partners provide delivery confirmation, tracking updates, and occasionally information about delivery exceptions or address corrections.
Analytics and Marketing Partners: Third-party analytics services such as Google Analytics may provide aggregated, anonymized data about website traffic and user behavior. Some marketing platforms may provide information about the effectiveness of our advertising campaigns and audience engagement.

We require all third parties from whom we receive personal information to confirm that they have obtained that information lawfully and that they have the right to share it with us for the purposes for which we use it.

How We Use Your Information

THAO NGUYEN LLC uses the information we collect for specific, legitimate business purposes that are necessary to provide our products and services, to communicate with you, to improve our offerings, and to comply with legal obligations. We do not use your personal information for purposes that are incompatible with those disclosed in this policy without seeking your consent.

Order Fulfillment and Service Delivery

The primary and most essential use of your personal information is to fulfill the orders you place and deliver the products and services you request. This includes:

Processing your payment through our secure payment processor.
Communicating the design specifications, sizes, colors, and customization details to our production team so that your items are manufactured correctly.
Generating shipping labels with your name and address and transmitting shipping information to our carrier partners so that your package reaches you.
Sending you order confirmation, production status, and shipping confirmation emails with tracking information.
Maintaining accurate records of your transactions for customer service, returns, and accounting purposes.

Customer Service and Support

When you reach out to us with a question, a concern, or a request for assistance, we use your information to:

Locate your order and transaction history to provide context for your inquiry.
Respond to your questions and resolve your issues efficiently and personally.
Process returns, issue refunds, and arrange replacements in accordance with our Refund and Return Policy.
Communicate with you about the status of your inquiry and confirm resolution.
Improve our customer service by analyzing inquiry patterns and identifying systemic issues that need addressing.

Website Improvement and Personalization

We use automatically collected data and transaction history to understand how our customers interact with our website and to enhance that experience. This includes:

Analyzing which products and designs are most popular, which pages receive the most traffic, and how users navigate through our site, to inform design and layout improvements.
Identifying and fixing technical issues, broken links, formatting problems, and other errors that degrade the user experience.
Optimizing the website for different devices, browsers, and connection speeds based on actual usage data.
Personalizing your browsing experience by showing you products, designs, and content that are relevant to your interests, based on your browsing and purchase history on our site.
Testing new features, layouts, and functionalities to measure their impact on user experience and conversion.

Marketing and Promotional Communications

With your consent where required by law, we may use your contact information to send you marketing communications about our products, services, promotions, and brand. This includes:

Sending our email newsletter with new product announcements, design inspiration, and exclusive offers, to subscribers who have opted in.
Informing you about special promotions, sales events, and limited-time offers.
Sharing content that we believe will be relevant and valuable to you based on your purchase history and expressed interests.

You have complete control over marketing communications. Every marketing email we send includes a clear, one-click unsubscribe link at the bottom. You can also manage your communication preferences through your account settings or by contacting our customer service team. Unsubscribing from marketing communications does not affect transactional emails related to your orders, such as order confirmations and shipping notifications, which are necessary to fulfill our contractual obligations to you.

We do not engage in unsolicited telemarketing calls or SMS spam. Any promotional communications we send are based on your expressed preferences and can be stopped at any time.

Fraud Prevention and Security

Protecting our customers and our business from fraudulent activity requires the use of personal and transactional data. We use your information to:

Verify the authenticity of transactions and detect patterns indicative of fraudulent purchasing activity.
Authenticate your identity when you contact us to make changes to your account or orders.
Monitor our systems for unauthorized access attempts, data breaches, and other security threats.
Investigate and respond to potential violations of our Terms and Conditions or other policies.

Legal Compliance and Protection of Rights

In certain circumstances, we may need to use your information to comply with legal obligations, to enforce our legal rights, or to respond to lawful requests from government authorities. This includes:

Complying with tax reporting and record-keeping requirements.
Responding to subpoenas, court orders, or other legal processes.
Enforcing our Terms and Conditions and protecting our intellectual property rights.
Defending against legal claims or asserting our rights in litigation or arbitration.
Detecting, preventing, and addressing illegal activities or violations of our policies.

We will only disclose information in response to legal demands when we have a good faith belief that the law requires it, and we will notify you of such disclosure when legally permitted to do so.

How We Share Your Information

THAO NGUYEN LLC does not sell, rent, lease, or trade your personal information to third parties for their marketing purposes. We share your information only with the service providers and partners who are essential to operating our business and delivering our products and services to you, and only to the extent necessary for them to perform their functions on our behalf.

Payment Processing with Stripe

All payments made on our website are processed by Stripe, a leading global payment processor. When you enter your payment card details, that information is transmitted directly from your browser to Stripe’s secure servers through an encrypted connection. Our systems never receive, process, or store your complete card number, expiration date, or security code. Stripe provides us with a token that represents your payment method and limited information such as the card type, the last four digits of the card number, and the expiration date, which we use to reference your payment in our customer service interactions.

Stripe is certified to PCI DSS Level 1, the highest level of security certification in the payment card industry. Stripe’s privacy practices are governed by their own privacy policy, which we encourage you to review. We have chosen Stripe as our payment partner precisely because of their industry-leading security and their commitment to data protection.

Shipping and Fulfillment Partners

To deliver physical products to your doorstep, we must share your name, shipping address, and sometimes your email address or phone number with the shipping carriers that transport your package. We share only the information necessary for the carrier to deliver your package and to provide tracking updates. Our shipping partners include the United States Postal Service, UPS, and for international orders, various destination-country postal services and courier companies. These carriers use your information solely for the purpose of delivering your shipment and are contractually obligated to handle it in accordance with applicable privacy laws.

Print Production Partners

Occasionally, we may utilize third-party print production partners to manufacture orders, particularly during peak periods or for specialized products. When this occurs, we share the design specifications, product details, and shipping information necessary to produce and ship your order. These partners are carefully vetted for their quality standards, security practices, and privacy commitments. They are contractually prohibited from using your information for any purpose other than fulfilling our orders and are required to maintain confidentiality and security standards consistent with our own.

Technology and Infrastructure Providers

Like all modern e-commerce businesses, THAO NGUYEN LLC relies on various technology services to operate our website, manage our databases, send our emails, and analyze our performance. These providers may have access to limited personal information in the course of providing their services to us. They include:

Website Hosting and Cloud Infrastructure: Our website and databases are hosted on secure servers managed by professional hosting providers. These providers have physical and logical access controls and are contractually bound to protect any data stored on their infrastructure.
Email Service Providers: We use third-party services to send transactional emails, such as order confirmations and shipping notifications, and marketing emails to subscribers. These providers receive your email address and the content of the messages we send but are prohibited from using your email address for their own purposes.
Analytics and Performance Monitoring: We use analytics services to understand how visitors use our website. These services collect anonymized data about page views, click patterns, and session durations. We configure these services to minimize the collection of personally identifiable information and to honor “Do Not Track” signals where possible.

All technology and infrastructure providers are selected with careful consideration of their privacy and security practices, and we have contractual agreements in place that require them to protect your data and use it only as directed by us.

Legal and Regulatory Disclosures

We may disclose your personal information when we have a good faith belief that such disclosure is necessary to:

Comply with a legal obligation, including a subpoena, court order, or governmental request.
Protect and defend the rights, property, or safety of THAO NGUYEN LLC, our customers, our employees, or the public.
Detect, prevent, or address fraud, security incidents, or technical issues.
Enforce our Terms and Conditions and other agreements.
Facilitate a business transaction, such as a merger, acquisition, or sale of assets, in which case the acquiring entity would be bound by obligations consistent with this Privacy Policy.

In such cases, we will disclose only the information that is reasonably necessary for the purpose, and we will notify you when legally permissible.

Business Transfers

If THAO NGUYEN LLC is involved in a merger, acquisition, reorganization, or sale of all or a portion of its assets, your personal information may be among the assets transferred. We will ensure that any acquiring entity agrees to treat your information in accordance with this Privacy Policy or provides you with notice and an opportunity to opt out before your information is used in a materially different manner.

Aggregate and De-Identified Data

We may share aggregate, anonymized, or de-identified data that cannot reasonably be used to identify you with third parties for research, marketing, analytics, or other purposes. For example, we might report that a certain percentage of our customers are from a particular region, without revealing any individual’s identity or precise location. This sharing does not involve your personal information.

Cookies and Tracking Technologies

Our website uses cookies and similar tracking technologies to function properly, to enhance your browsing experience, and to provide us with analytics about how our site is used. This section explains what these technologies are, how we use them, and the choices you have regarding their use.

What Are Cookies?

A cookie is a small text file that a website places on your device when you visit. Cookies are widely used to make websites work efficiently, to remember your preferences, and to provide information to the website operators. Cookies may be “session cookies,” which are temporary and deleted when you close your browser, or “persistent cookies,” which remain on your device for a set period or until manually deleted.

Types of Cookies We Use

Essential Cookies: These cookies are necessary for the website to function and cannot be switched off in our systems. They are typically set in response to actions you take, such as adding items to your shopping cart, logging into your account, or completing a checkout process. Without these cookies, the services you have requested cannot be provided. You can set your browser to block or alert you about these cookies, but some parts of the site will not work as a result.

Functional Cookies: These cookies enable the website to provide enhanced functionality and personalization. They allow us to remember choices you make, such as your preferred language, your region, or items you have recently viewed, so that we can tailor your experience accordingly. They may be set by us or by third-party services we have added to our pages. If you disable these cookies, some or all of these functions may not work properly.

Performance and Analytics Cookies: These cookies allow us to count visits and traffic sources so we can measure and improve the performance of our site. They help us understand which pages are most and least popular and see how visitors move around the site. All information these cookies collect is aggregated and anonymized. We use Google Analytics for this purpose, and we have configured it to anonymize IP addresses and to respect your privacy choices.

Advertising and Marketing Cookies: We may use limited advertising cookies to measure the effectiveness of our marketing campaigns and to deliver relevant advertisements to you on other platforms. These cookies collect information about your browsing habits on our site to infer your interests. We do not currently use retargeting cookies that follow you across the internet, but if we implement such advertising in the future, we will update this policy and provide you with clear opt-out mechanisms.

Your Cookie Choices

Most web browsers allow you to control cookies through their settings preferences. You can typically set your browser to accept all cookies, to reject all cookies, to notify you when a cookie is being set, or to delete existing cookies. The methods for doing so vary by browser; consult your browser’s help section for specific instructions.

You can also opt out of certain third-party analytics and advertising cookies through industry-wide opt-out tools, such as the Network Advertising Initiative opt-out page and the Digital Advertising Alliance’s consumer choice tool.

Please be aware that disabling essential cookies may prevent you from completing purchases, logging into your account, or using other core features of our website. We do not recommend disabling essential cookies if you wish to shop with us.

Do Not Track Signals

Some browsers offer a “Do Not Track” setting that sends a signal to websites requesting that they not track your online activities. The standards for how websites should respond to these signals are not uniformly defined across the industry. THAO NGUYEN LLC currently does not respond to Do Not Track browser signals. However, we honor your preferences through the cookie controls and opt-out mechanisms described in this policy.

Other Tracking Technologies

In addition to cookies, we may use web beacons, pixel tags, and similar technologies in our emails and on our website. These technologies allow us to know whether an email we sent was opened, whether links within it were clicked, and how users interact with certain pages. We use this information to measure the effectiveness of our communications and to improve the relevance and quality of the content we send. You can avoid web beacons in emails by opting out of marketing communications or by configuring your email client to not display images.

Data Security

We take the security of your personal information seriously and have implemented a multi-layered security program designed to protect it against unauthorized access, alteration, disclosure, or destruction. While no method of transmission over the internet or method of electronic storage is one hundred percent secure, we follow generally accepted industry standards and continuously update our practices to stay ahead of evolving threats.

Technical Security Measures

Encryption in Transit: All communications between your browser and our servers are encrypted using Transport Layer Security, commonly recognized by HTTPS and the padlock icon in your browser’s address bar. We use modern encryption protocols with strong cipher suites to prevent interception and eavesdropping.
Payment Tokenization: As described extensively in this policy, we do not store raw payment card data. Stripe tokenizes your payment information, ensuring that our systems have no access to your full card number.
Encryption at Rest: Sensitive data stored in our databases, including account credentials, is encrypted at rest. Passwords are hashed and salted using industry-standard algorithms, meaning that no one, including our personnel, can view your actual password.
Firewalls and Network Security: Our servers are protected by enterprise-grade firewalls, intrusion detection systems, and regular vulnerability scanning. We restrict network access to only those ports and protocols necessary for operations.
Secure Development Practices: Our website is built and maintained with security in mind. We follow secure coding practices, regularly update software dependencies to patch known vulnerabilities, and conduct periodic security assessments and penetration tests.

Organizational Security Measures

Access Control: Access to customer personal information within THAO NGUYEN LLC is restricted to authorized personnel who require it to perform their specific job functions. Access rights are reviewed regularly and revoked immediately upon role changes or employment termination.
Training and Awareness: Our team members receive training on data protection, privacy best practices, and security protocols. We foster a culture of security awareness so that every team member understands their role in protecting customer data.
Incident Response: We maintain a documented incident response plan for addressing security events that could affect personal information. In the unlikely event of a data breach, we will act swiftly to contain the incident, investigate the cause, and notify affected individuals and relevant authorities as required by applicable law.
Physical Security: Our physical facilities, including our headquarters in Albuquerque, New Mexico, are secured against unauthorized access, and physical access to server infrastructure is strictly controlled by our hosting providers.

What You Can Do

Security is a shared responsibility. We encourage you to take the following steps to protect your personal information:

Use a strong, unique password for your THAO NGUYEN LLC account and do not reuse passwords across multiple sites.
Keep your devices and browsers updated with the latest security patches.
Be cautious when accessing your account from public or shared devices, and always log out after your session.
Monitor your financial statements for unauthorized transactions, regardless of where you shop online.

Data Retention

We retain your personal information only for as long as is necessary to fulfill the purposes for which it was collected, including to satisfy legal, regulatory, accounting, or reporting requirements. The specific retention period depends on the nature of the data and the purposes for which it was collected.

Order and Transaction Data

Information related to your purchases, including the products ordered, the price paid, the shipping address used, and the payment method reference, is retained for a minimum period required by tax and accounting regulations, which is typically seven years in the United States. This retention is necessary to comply with audit requirements and to defend against potential legal claims.

Account Information

If you create an account, we retain your account information for as long as your account remains active. If you close your account, we will delete your personal information associated with the account within a reasonable timeframe, subject to any legal obligations that require us to retain certain data for longer periods.

Marketing and Communication Preferences

Your marketing preferences and consent records are retained indefinitely or until you unsubscribe. When you unsubscribe from marketing communications, we retain a record of your opt-out to ensure that we honor your preferences and do not inadvertently contact you again.

Automatically Collected Data

Log data, analytics information, and other automatically collected data is typically retained in aggregated and anonymized form after a period of twelve to twenty-four months. Data that is not aggregated is deleted once it is no longer needed for the purpose for which it was collected.

Data Deletion Procedures

When personal information reaches the end of its retention period, we securely delete or destroy it using methods appropriate to the format of the data. Electronic records are purged from active databases and backup systems in accordance with our data lifecycle management procedures. Physical records, if any, are shredded.

Your Privacy Rights

THAO NGUYEN LLC recognizes that you have rights regarding your personal information. We are committed to honoring these rights and have established procedures to facilitate their exercise. The specific rights available to you may vary depending on the laws of your jurisdiction, but we strive to provide a consistent baseline of rights to all our customers.

Right to Access and Portability

You have the right to request access to the personal information we hold about you. Upon receiving a verifiable request, we will provide you with a copy of your data in a structured, commonly used electronic format. This allows you to see exactly what information we have collected and how it has been used.

Right to Rectification

If you believe that any personal information we hold about you is inaccurate, incomplete, or out of date, you have the right to request its correction. You can update most of your information directly through your account settings on our website. For information that cannot be self-updated, contact our customer service team, and we will make the necessary corrections promptly.

Right to Deletion

You have the right to request the deletion of your personal information under certain circumstances, such as when the information is no longer necessary for the purposes for which it was collected, when you withdraw your consent and no other legal basis for processing exists, or when you object to processing and there are no overriding legitimate grounds.

We will comply with deletion requests unless an exception applies, such as when we are required to retain the information by law, or when the information is necessary for the establishment, exercise, or defense of legal claims. In such cases, we will explain the basis for our inability to delete the information and the specific retention obligations that apply.

Right to Restrict Processing

In certain circumstances, you may have the right to request that we restrict or limit the processing of your personal information. This includes situations where you contest the accuracy of the data and we are verifying it, where the processing is unlawful but you oppose deletion, or where we no longer need the data but you require it for legal claims.

Right to Object to Processing

You have the right to object to the processing of your personal information for direct marketing purposes at any time, without providing any justification. We have explained the mechanisms for unsubscribing from marketing communications earlier in this policy. You may also object to processing based on legitimate interests, though we may continue processing if we can demonstrate compelling legitimate grounds that override your interests and rights.

Right to Withdraw Consent

Where we process your personal information based on your consent, you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing that occurred prior to the withdrawal.

Exercising Your Rights

To exercise any of the rights described above, please contact us using the contact information provided at the end of this policy. We will respond to your request within the timeframe required by applicable law, typically within thirty days. We may need to verify your identity before processing your request to ensure the security of your information and to prevent fraud. This verification may involve confirming details such as your order number, the email address associated with your account, or other identifiers that only you would know.

We will not discriminate against you for exercising any of your privacy rights. Your exercise of these rights will not affect the quality of products or services you receive from us, the prices we offer you, or your access to our website and account.

Children’s Privacy

THAO NGUYEN LLC does not knowingly collect personal information from children under the age of thirteen. Our website is intended for use by individuals who are at least eighteen years of age or the age of majority in their jurisdiction. We do not design our products or marketing to appeal to children, and we do not direct our website toward minors.

If we become aware that a child under the age of thirteen has provided us with personal information without verifiable parental consent, we will take immediate steps to delete such information from our records and terminate the associated account if one exists. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately so that we can take appropriate action.

For minors between the ages of thirteen and seventeen, we encourage parents and guardians to supervise their online activities and to discuss safe internet practices. We recommend that minors obtain parental consent before providing any personal information online, including to THAO NGUYEN LLC.

Third-Party Links and Services

Our website may, from time to time, contain links to third-party websites, plug-ins, and applications that are not owned, operated, or controlled by THAO NGUYEN LLC. Clicking on those links or enabling those connections may allow third parties to collect or share data about you. We do not control these third-party websites and are not responsible for their privacy practices or content.

When you leave our website, we encourage you to read the privacy policy of every website you visit, as their practices may differ materially from ours. This Privacy Policy applies solely to information collected by THAO NGUYEN LLC through our own direct channels.

Our integration with payment processor Stripe, shipping carriers, and other service providers is described elsewhere in this policy. While we carefully select these partners, their privacy practices are governed by their own policies, which we encourage you to review.

International Data Transfers

THAO NGUYEN LLC is headquartered in the United States of America, and our website and services are operated from the United States. If you are located outside the United States and choose to provide your personal information to us, your data will be transferred to, processed, and stored in the United States, which may have data protection laws that differ from those in your country of residence.

By placing an order, creating an account, or otherwise providing us with your personal information, you acknowledge and consent to the transfer of your data to the United States for processing and storage as described in this Privacy Policy.

We take reasonable steps to ensure that your personal information receives an adequate level of protection regardless of where it is processed. This includes entering into data processing agreements with our service providers that incorporate standard contractual clauses and other safeguards recognized by applicable data protection frameworks. We do not transfer personal information internationally unless adequate protections are in place.

For customers in the European Economic Area, the United Kingdom, Switzerland, and other jurisdictions with data transfer restrictions, we endeavor to apply appropriate safeguards to protect your information when it is transferred to the United States. If you have questions about the specific safeguards applicable to your data, please contact us.

California Privacy Rights

If you are a resident of California, you may have additional rights under the California Consumer Privacy Act and other California privacy laws. This section provides information about those rights and how to exercise them.

Categories of Personal Information Collected

Under California law, we are required to disclose the categories of personal information we have collected about consumers in the preceding twelve months. Those categories are: identifiers such as name, email address, postal address, and IP address; commercial information such as records of products purchased; internet activity such as browsing history and website interactions; and inferences drawn from the above to create a profile about consumer preferences.

No Sale of Personal Information

THAO NGUYEN LLC has not sold any personal information to third parties for monetary or other valuable consideration in the preceding twelve months, and we do not engage in such sales.

California Consumer Rights

If you are a California resident, you have the right to request that we disclose the specific pieces of personal information we have collected about you, the categories of sources from which we collected it, the business purposes for which we collected it, and the categories of third parties with whom we shared it. You also have the right to request deletion of your personal information, subject to exceptions.

To exercise these rights, please contact us using the information at the end of this policy. We will verify your identity before processing your request, which may require you to provide information that matches what we have on file. You may designate an authorized agent to make a request on your behalf, provided that the agent can demonstrate written authorization and you verify your identity directly with us.

We will not discriminate against you for exercising your California privacy rights. You will not receive different pricing, different product quality, or different levels of service as a result of exercising these rights.

European Economic Area and United Kingdom Rights

If you are located in the European Economic Area, the United Kingdom, or Switzerland, you have certain rights under the General Data Protection Regulation and related laws. This section provides additional information relevant to those rights.

Legal Bases for Processing

We process your personal information based on one or more of the following legal grounds:

Performance of a Contract: Processing necessary to fulfill your order, deliver your products, and provide the services you have requested.
Legitimate Interests: Processing for our legitimate business interests, such as improving our website, preventing fraud, and marketing our products to existing customers, provided that these interests are not overridden by your rights and freedoms.
Consent: Processing based on your explicit consent, such as for sending marketing communications where required by law.
Legal Obligation: Processing necessary to comply with applicable laws and regulatory requirements.

Data Subject Rights

In addition to the rights described earlier in this policy, EEA and UK residents have the right to lodge a complaint with a supervisory authority in their country of residence if they believe their data protection rights have been violated. We encourage you to contact us first so that we can address your concerns directly.

Data Transfers

Transfers of personal data from the EEA, UK, or Switzerland to the United States are conducted with appropriate safeguards in place, as described in the International Data Transfers section of this policy.

Changes to This Privacy Policy

This Privacy Policy may be updated periodically to reflect changes in our data practices, our technology, our legal obligations, or our business operations. When we make material changes, we will notify you by posting a prominent notice on our website and, where appropriate, by sending an email to the address we have on file for you. The “Effective Date” at the bottom of this page indicates when the current version took effect.

We encourage you to review this Privacy Policy regularly to stay informed about how we are protecting your information. Your continued use of our website and services after any changes to this policy constitutes your acceptance of the updated terms.

If any change to this policy would allow us to use or share your personal information in a materially different way than we did at the time of collection, we will seek your affirmative consent before applying the change to your previously collected data.

Contact Us About This Privacy Policy

Your privacy is a priority, and we welcome your questions, comments, and concerns about this policy and our data practices. If you have any questions or would like to exercise any of your privacy rights, please contact us through any of the following channels.

Email: nthaonguyen0909@gmail.com
For written inquiries, privacy-related requests, or detailed questions. We respond to privacy inquiries promptly and thoroughly.

Phone: +84865398983
For time-sensitive privacy concerns or for those who prefer direct conversation. Our customer service team is trained in privacy matters and can address many questions immediately.

Postal Address:
THAO NGUYEN LLC
Attn: Privacy Inquiry
1209 Mountain Road PL NE STE R
Albuquerque, NM 87110
United States of America

For formal privacy requests, we recommend email as the most efficient channel, as it creates a written record that both parties can reference.

We are committed to working with you to address any concerns you may have about our handling of your personal information. If you believe that we have not adequately addressed your concerns, you may have the right to complain to the data protection authority in your jurisdiction, but we encourage you to contact us first so that we can attempt to resolve the matter directly.

Our Privacy Commitment in Summary

We recognize that privacy policies can be lengthy and detailed, and not every customer has the time or inclination to read every provision. At its core, our commitment to your privacy is simple and unwavering:

We collect only the information we need to serve you well.
We protect that information with industry-leading security.
We never sell your personal information to anyone.
We share your information only with the partners essential to fulfilling your orders.
We give you control over your data and your communication preferences.
We are transparent about our practices and accountable to our commitments.

You are not a data point to be exploited. You are a valued customer whose trust we must earn and re-earn with every interaction. We take that responsibility seriously, and we will continue to invest the care, resources, and attention necessary to protect the personal information you entrust to us.

Thank you for taking the time to understand our Privacy Policy. Thank you for your trust. And thank you for being part of the THAO NGUYEN LLC family.