Last updated: [29/06/2026]

THEMAX respects privacy and is committed to protecting the personal data of our customers, partners, website visitors, and other individuals associated with our operations.

This Policy explains how THEMAX collects, uses, stores, shares, and protects personal data when users:

• Visit https://themax.vn;
• Submit a contact form, register for consultation, or request a quotation;
• Communicate with THEMAX by email, telephone, social media, or other online platforms;
• Use products or services, or participate in programs implemented by THEMAX;
• Interact with THEMAX advertisements, content, and communication campaigns on digital platforms.

By providing personal data or consenting to THEMAX’s data collection notice, users confirm that they have read, understood, and agreed to the provisions of this Policy.

1. Personal Data Processing Entity

Company name: THEMAX JOINT STOCK COMPANY

Brand name: THEMAX

Enterprise registration number: 0316708078

Registered office: 77 Hoa Lan Street, Cau Kieu Ward, Ho Chi Minh City, Vietnam

Website: https://themax.vn

Data protection email: admin@themax.vn

Telephone: 0969368855

Depending on the relevant activity, THEMAX may act as:

• A Personal Data Controller, where THEMAX determines the purposes and means of personal data processing;
• A Personal Data Processor, where THEMAX processes personal data at the request of, under the instructions of, or pursuant to a contract with a customer;
• A Personal Data Controller and Processor, where THEMAX both determines the purposes and directly carries out the processing activities.

2. Categories of Personal Data Collected

Depending on how users interact with THEMAX, we may collect one or more of the following categories of information:

2.1. Identification and Contact Information

• Full name;
• Company or organization name;
• Job title or position;
• Telephone number;
• Email address;
• Contact address;
• Social media account or other contact details provided by the user.

2.2. Information About Service Requirements

• Consultation request details;
• Services in which the user is interested;
• Information relating to a project, product, or campaign;
• Estimated budget;
• Expected implementation schedule;
• Communications, feedback, and work history with THEMAX.

2.3. Transaction and Contract Information

• Quotation, contract, and purchase order information;
• Billing and invoicing information;
• Payment and reconciliation history;
• Information necessary to exercise rights and perform obligations under a contract.

THEMAX does not intentionally collect online banking passwords, one-time passwords (OTPs), card security codes, or users’ financial authentication information through the website.

2.4. Technical and Website Usage Data

When users visit themax.vn, the system or integrated measurement tools may automatically record:

• IP address;
• Device type, browser, and operating system;
• Language, time zone, and approximate access location;
• Access time, duration, and frequency;
• Pages viewed, links clicked, and interaction behavior;
• Referral source or advertising campaign leading to the website;
• Cookie, device, or session identifiers;
• Event data used to measure website and advertising performance.

2.5. Information From Platforms and Other Lawful Sources

THEMAX may receive information from:

• Google, Facebook, Instagram, TikTok, Zalo, or other advertising and social media platforms;
• Lead-generation advertising forms voluntarily submitted by users;
• Partners, business customers, or service providers;
• Publicly available sources or other sources that may lawfully be used;
• Customer relationship management systems, email tools, or operational support platforms.

THEMAX only receives and processes data where there is a lawful basis and where the processing is consistent with the purposes previously notified.

3. Purposes of Personal Data Processing

THEMAX may process personal data for the following purposes:

• Receiving and responding to contact requests;
• Providing service consultation, preparing quotations, and developing proposals;
• Verifying requirements and providing products or services;
• Entering into, managing, and performing contracts;
• Providing customer care and after-sales support;
• Managing relationships with customers, partners, and suppliers;
• Sending information about services, programs, events, or professional content where permitted;
• Personalizing content and user experience;
• Measuring website traffic and performance;
• Measuring, analyzing, and optimizing advertising effectiveness;
• Creating advertising audiences or conducting remarketing where the user has given consent;
• Preventing fraud, abuse, and information security incidents;
• Protecting the lawful rights, property, and interests of THEMAX, its customers, and users;
• Complying with accounting, tax, audit, legal, and regulatory obligations;
• Resolving requests, complaints, disputes, or violations;
• Carrying out other purposes that have been notified to and approved by the user.

THEMAX does not use personal data for purposes inconsistent with the notified purposes, unless otherwise permitted or required by law.

4. Legal Bases for Personal Data Processing

Depending on the circumstances, THEMAX processes personal data on one or more of the following legal grounds:

• The data subject’s voluntary and explicit consent;
• Performance of a contract or steps taken at the user’s request before entering into a contract;
• A legal obligation applicable to THEMAX;
• Protection of the lawful rights and interests of the user, THEMAX, or another relevant party;
• An emergency involving the protection of life, health, or another vital interest of an individual;
• Other legal grounds permitted under Vietnamese law.

Where processing is based on consent, users have the right to withdraw consent in accordance with this Policy.

5. Cookies and Tracking Technologies

Themax.vn may use cookies, pixels, measurement tags, local storage, and similar technologies to:

• Maintain the technical operation of the website;
• Remember user choices and preferences;
• Analyze website traffic and how users use the website;
• Measure the effectiveness of content and advertising;
• Reduce repetitive advertising;
• Create audiences and conduct remarketing where the user has given consent.

Cookies may be classified as follows:

5.1. Strictly Necessary Cookies

These cookies are required for the website to operate, secure access sessions, and provide functions requested by users. They generally cannot be completely disabled through the website’s cookie management tool.

5.2. Functional Cookies

These cookies help the website remember user choices and provide a more appropriate experience.

5.3. Analytics Cookies

These cookies help THEMAX understand how users access and interact with the website, enabling us to improve content, interface, and performance.

5.4. Advertising Cookies

These cookies are used to measure conversions, deliver relevant advertisements, create audiences, and conduct remarketing.

Except for strictly necessary cookies, THEMAX only activates analytics or advertising cookies according to the user’s consent choices where required by law.

Users may:

• Accept or reject each cookie category through the cookie management panel;
• Change cookie choices at any time;
• Delete or block cookies through browser settings;
• Adjust advertising preferences on each platform.

Disabling certain cookies may affect the user experience or some website functions.

6. Third-Party Tools and Platforms

THEMAX may integrate or use third-party tools, including but not limited to:

6.1. Google

THEMAX may use Google Analytics, Google Ads, Google Tag Manager, YouTube, or related services to analyze traffic, measure conversions, and optimize advertising.

Google may receive technical data, cookies, access information, and interaction events according to the website configuration and Google’s policies.

6.2. Meta

THEMAX may use Meta Pixel, Conversions API, or Facebook and Instagram tools to measure advertising effectiveness, analyze behavior, and conduct remarketing.

Meta may receive device information, website access data, interaction events, and other data lawfully shared according to THEMAX’s configuration.

6.3. TikTok

THEMAX may use TikTok Pixel, Events API, or TikTok For Business tools to measure, analyze, and optimize campaigns.

THEMAX does not intentionally send sensitive personal data, government-issued identification information, or unauthorized data to TikTok through measurement tools.

6.4. Zalo

THEMAX may use Zalo Official Account, Zalo Ads, forms, messaging, or integrated Zalo tools for consultation, customer care, and communications.

Users may unfollow, block messages, or adjust privacy settings directly in their Zalo accounts.

6.5. Other Service Providers

THEMAX may use website hosting, customer relationship management, email, security, backup, analytics, payment, or other operational services.

Third parties have their own policies and may process data in an independent capacity. THEMAX selects appropriate providers and requires relevant parties to protect data under contractual obligations and applicable law.

7. Sharing and Disclosure of Personal Data

THEMAX does not sell or trade users’ personal data as a commodity.

Personal data may be shared, to the extent necessary, with:

• THEMAX personnel, departments, or affiliated units;
• Technology infrastructure, hosting, security, and backup providers;
• Analytics, advertising, and media service providers;
• Legal, accounting, audit, or financial advisers;
• Customers, partners, or contractors participating in project implementation;
• Competent government authorities where there is a lawful request;
• A receiving party in connection with a restructuring, merger, or transfer of business operations;
• Other parties where the user has consented or where disclosure is permitted by law.

THEMAX only shares the amount of data necessary for a specified purpose and applies appropriate measures to prevent misuse.

8. Data Provided by Customers for Campaigns

When THEMAX provides digital marketing, design, content creation, or advertising services, customers may provide prospect data, contact lists, or other campaign-related data.

For such data:

• The customer is responsible for ensuring that the data has been lawfully collected;
• The customer must provide all required notices and obtain the necessary consent or other lawful processing grounds;
• THEMAX only processes the data within the agreed scope of work and in accordance with the customer’s lawful instructions;
• THEMAX does not independently use the customer’s data for its own purposes;
• The parties may enter into a separate data processing and protection agreement;
• THEMAX may refuse to receive data that appears to have been collected unlawfully or has an unclear origin.

9. Marketing and Communications

THEMAX only sends advertising, marketing, or customer care content in accordance with:

• The recipient’s consent;
• An existing transaction or other appropriate lawful basis;
• Applicable law and the policies of the relevant platform.

Users may opt out of marketing communications by:

• Clicking the “Unsubscribe” link in an email;
• Following the opt-out instructions in a message;
• Blocking or unfollowing THEMAX on the relevant platform;
• Submitting a request through the contact details in Section 17.

Opting out of marketing communications does not affect essential notices relating to contracts, transactions, or users’ rights and interests.

10. Automated Processing and Profiling

THEMAX and advertising platforms may use automated tools to:

• Segment audiences;
• Analyze behavior and interests;
• Assess potential interest in services;
• Personalize content and advertisements;
• Optimize advertising delivery.

THEMAX does not use solely automated decision-making to produce legal effects or similarly significant impacts on users’ lawful rights and interests without an appropriate basis.

Users have the right to request information about or object to automated processing in accordance with applicable law.

11. Cross-Border Transfers of Personal Data

Some technology providers and advertising platforms used by THEMAX may locate servers or process data outside Vietnam.

Where personal data is transferred outside Vietnam, THEMAX will:

• Identify the purpose and scope of the transfer;
• Provide notice or obtain consent where required;
• Apply appropriate contractual terms and safeguards;
• Comply with applicable impact assessment, record-keeping, notification, or reporting obligations;
• Require the recipient to protect the data and process it only for the specified purposes.

12. Personal Data Retention Period

THEMAX retains personal data for as long as necessary to fulfill the notified purposes or comply with legal obligations.

Retention periods may be determined based on:

• The duration of consultation and service provision;
• The term of a contract;
• Applicable limitation periods for complaints and disputes;
• Accounting, tax, and record-retention obligations;
• Security and fraud-prevention requirements;
• The lawful choices and requests of users.

When data is no longer required, THEMAX will delete, destroy, anonymize, or restrict its processing according to appropriate procedures, unless continued retention is required by law.

13. Information Security Measures

THEMAX applies appropriate technical and organizational measures, which may include:

• Role-based access control;
• Account management and user authentication;
• Encryption of data transmission and secure connections;
• Data backup and recovery;
• Software updates and security patching;
• Monitoring, detecting, and addressing unusual access;
• Securing devices and storage systems;
• Confidentiality obligations for personnel and service providers;
• Data protection awareness training;
• Personal data incident response procedures.

No system can guarantee absolute security. If an incident is identified, THEMAX will take measures to contain and remedy it and will comply with applicable legal notification obligations.

14. Rights of Data Subjects

To the extent permitted by law, users have the following rights:

• The right to be informed about personal data processing;
• The right to provide or withhold consent;
• The right to withdraw consent;
• The right to access and request provision of personal data;
• The right to request correction or updating of personal data;
• The right to request deletion of personal data;
• The right to request restriction of processing;
• The right to object to processing;
• The right to request that personal data no longer be used for advertising or marketing;
• The right to request data provision or transfer subject to statutory conditions;
• The right to lodge complaints, make denunciations, or initiate legal proceedings;
• The right to claim compensation for damage in accordance with law;
• Other rights provided under Vietnamese law.

Withdrawal of consent does not affect the lawfulness of processing carried out before THEMAX receives and processes the withdrawal request.

15. How to Exercise Personal Data Rights

Receiving entity: THEMAX JOINT STOCK COMPANY

Email: admin@themax.vn

Telephone: 0969368855

Address: 77 Hoa Lan Street, Cau Kieu Ward, Ho Chi Minh City, Vietnam

A request should include:

• The requester’s full name;
• Contact information;
• Details of the request;
• Information sufficient to identify the relevant data;
• Identity verification or authorization documents where necessary.

THEMAX may request identity verification to prevent personal data from being accessed, amended, or deleted by an unauthorized person.

THEMAX will receive and respond to requests within the time limits prescribed by applicable law. Certain requests may be restricted or refused where fulfillment:

• Would violate the law;
• Would adversely affect the lawful rights and interests of another person;
• Would prevent the performance of contractual or legal obligations;
• Cannot be fulfilled because the requester’s identity cannot be verified;
• Falls within another circumstance in which refusal is permitted by law.

16. Children’s Personal Data

THEMAX’s website and services are primarily intended for customers, partners, and users who have sufficient legal capacity under applicable law.

THEMAX does not intentionally collect children’s personal data for behavioral advertising purposes. Where processing a child’s personal data is necessary, THEMAX will apply appropriate consent mechanisms and safeguards in accordance with the child’s age, the best interests of the child, and applicable law.

A parent or legal guardian may contact THEMAX to request access to, correction of, or deletion of a child’s personal data.

17. Links to Other Websites and Services

Themax.vn may contain links to third-party websites, social media platforms, or services.

THEMAX does not control all data processing activities conducted on such websites or platforms. Users should review the relevant third party’s privacy policy before providing personal data.

18. Changes to This Privacy Policy

THEMAX may update this Policy to reflect:

• Changes in business operations;
• Changes in technology or the tools used;
• Changes in platform policies;
• Changes in applicable law;
• Requirements to enhance user protection.

The updated version will be published on themax.vn and will clearly state the date of the update. For material changes, THEMAX may provide notice through the website, email, or another appropriate method.

19. Contact Information

For any questions, concerns, or requests relating to this Privacy Policy or personal data, please contact:

THEMAX – THEMAX JOINT STOCK COMPANY

Address: 77 Hoa Lan Street, Cau Kieu Ward, Ho Chi Minh City, Vietnam

Email: admin@themax.vn

Telephone: 0969368855

Website: https://themax.vn

THEMAX appreciates the trust of our customers, partners, and users and is committed to processing personal data transparently, for specified purposes, responsibly, and in compliance with applicable law.