Legal

Privacy Policy

This Privacy Policy ("Policy") is issued by Unik Holdings Joint Stock Company (“Unik Holdings," "we,” “us,” or “our”) and applies to individuals with whom we interact, including but not limited to customers, prospective customers, investors, business partners, representatives of corporate clients or partners, job applicants, employees, suppliers, website visitors, and any other individuals who use our services or otherwise engage with us (collectively, "you" or "your”).

At Unik Holdings, we are committed to protecting your Personal Data and handling it responsibly, transparently, and in accordance with applicable law. As a company operating across preventive healthcare, wellness, hospitality, and related business activities, we recognize the importance of privacy, trust, and data security in every interaction.

This Policy explains how we collect, use, store, share, transfer, disclose, and otherwise process your Personal Data when you interact with our website, contact us, use our services, explore investment or partnership opportunities, or establish any current or potential relationship with Unik Holdings.

This Policy may be amended, supplemented, or updated from time to time to reflect changes in our business operations, our data processing practices, or applicable legal requirements. The latest version will be published on our website or otherwise communicated through appropriate channels.

1. Processing of Personal Data

1.1. Why We Collect and Process Personal Data

We collect and process your Personal Data for lawful and legitimate purposes, including where required or permitted by law.

Depending on the nature of your relationship with us, we may process Personal Data in order to:

verify your identity;
respond to your inquiries and requests;
provide information about our business, services, projects, or opportunities;
assess and manage investor, partnership, customer, or business relationships;
process registrations, applications, transactions, or service requests;
support communication, administration, and relationship management;
personalize your experience with our website or services;
maintain safety, security, and service quality;
comply with legal, regulatory, tax, accounting, and reporting obligations;
protect our lawful rights, interests, systems, and operations.

If you do not provide the Personal Data necessary for a particular purpose, we may be unable to provide the requested services, process your request, assess a potential relationship, or comply with our legal obligations.

1.2 Legal Bases for Processing Personal Data

We process Personal Data based on one or more of the following legal grounds:

your valid consent;
the necessity to enter into or perform a contract with you;
compliance with legal or regulatory obligations;
the protection of life or health in emergency situations;
our legitimate interests, provided these do not override your lawful rights and interests;
any other lawful basis permitted under applicable law.

1.3 Categories of Personal Data We May Process

The types of Personal Data we may process include basic personal data and sensitive personal data, where relevant and lawful, such as:

identification information, including full name, date of birth, gender, nationality, national ID card number, passport number, or tax identification number;
contact information, including telephone number, email address, residential address, and correspondence address;
professional information, such as occupation, position, employer, or workplace;
business and relationship information, including your interactions with us, investment interests, partnership interests, communications, and requests;
financial and transaction information, where relevant, including payment details, bank account information, and transaction history;
digital information, such as IP address, access logs, cookies, device identifiers, and approximate location data;
information related to your interest in our healthcare, wellness, hospitality, or other business activities;
health-related data or other sensitive data where necessary, appropriate, and permitted by law;
any other information reasonably required to provide our services, assess opportunities, or comply with legal requirements.

1.4 How We Collect Personal Data

We may collect Personal Data from the following sources:

directly from you when you contact us, complete forms, make inquiries, register, submit applications, sign documents, or otherwise engage with us;
during the course of providing services, customer support, or managing our relationship with you;
from the organization you work for or represent;
from business partners, service providers, consultants, payment providers, or other third parties involved in delivering our services or supporting our operations;
from publicly available lawful sources or databases permitted under applicable law;
from your access to and use of our website or digital platforms;
through cookies, tracking technologies, or lawful analytics systems.

1.5 Purposes for Which We Process Personal Data

We may process your Personal Data for the following purposes:

establishing, managing, and maintaining customer, investor, or business relationships;
responding to your inquiries, proposals, applications, or requests;
providing information about our business, services, projects, or strategic opportunities;
processing transactions, registrations, applications, and administrative procedures;
delivering customer care, relationship support, and after-service communication;
sending information about services, events, programs, updates, or relevant opportunities;
operating, maintaining, and improving our website, digital platforms, and information systems;
ensuring system security, fraud prevention, and access control;
ensuring safety and security at our offices, properties, or facilities, including through CCTV where applicable;
assessing service quality, conducting research, and improving user or stakeholder experience;
resolving complaints, disputes, or legal claims;
complying with the requests of competent state authorities;
carrying out other lawful purposes in accordance with applicable law.

1.6 Automated Processing and Decision-Making

In some cases, we may use automated systems, data analytics, or artificial intelligence tools to:

better understand user, customer, or stakeholder needs;
recommend relevant information, services, or opportunities;
improve website performance and user experience;
detect or prevent fraud and security risks.

Where required by law, you may request a review of decisions that have a material impact on your rights or interests.

2. Disclosure of Personal Data to Third Parties

We may share your Personal Data with:

affiliated companies or entities within the UNIK ecosystem;
business partners involved in healthcare, wellness, hospitality, investment, operations, or related services;
banks, payment service providers, auditors, legal advisors, and consultants;
technology, cloud storage, CRM, marketing, analytics, or other service providers;
competent state authorities where disclosure is required by law;
other organizations or individuals where you have given consent or where disclosure is otherwise permitted by law.

We require recipients of Personal Data to process it only for lawful purposes, apply appropriate security measures, and comply with applicable data protection obligations.

3. Cross-Border Transfer of Personal Data

In certain circumstances, your Personal Data may be stored or processed on servers, systems, or platforms located outside Vietnam.

Where cross-border transfer of Personal Data is involved, we will comply with applicable Vietnamese legal requirements, including any conditions, procedures, protective measures, documentation, and impact assessments required by law.

4. Data Security

We apply appropriate technical and organizational measures to protect Personal Data, including:

firewalls, encryption, and access controls;
internal role-based access management;
employee training on data protection and confidentiality;
regular monitoring, review, and assessment of information security;
risk management and incident response procedures;
data backup and recovery measures;
security requirements for third-party service providers.

While we take reasonable steps to protect Personal Data, no system can be guaranteed to be completely secure. You should also take appropriate measures to protect your own personal information.

Data Breach Notification

If a personal data breach occurs, including unauthorized access, loss, leakage, or misuse of Personal Data, we will take appropriate remedial action and provide notification to competent authorities and/or affected data subjects where required by applicable law.

5. Data Accuracy

We take reasonable steps to ensure that Personal Data is accurate and kept up to date where necessary.

You are responsible for:

providing accurate and complete information;
informing us of any changes to your information;
cooperating with us in any verification process where necessary.

6. Data Minimization

We collect and process Personal Data only to the extent necessary and proportionate for the purposes described in this Policy and in accordance with the principle of data minimization under applicable law.

7. Data Retention

We retain Personal Data only for as long as necessary to:

fulfill the purposes for which it was collected;
provide our services or manage relationships with you;
comply with legal, regulatory, tax, accounting, or record-keeping obligations;
resolve disputes or protect our lawful rights and interests;
meet audit or internal governance requirements.

After the applicable retention period expires, Personal Data will be deleted, destroyed, or anonymized in accordance with applicable law and our internal procedures.

8. Your Legal Rights and Obligations

Subject to applicable law, you may have the following rights in relation to your Personal Data:

the right to be informed about the processing of your Personal Data;
the right to give or withdraw consent where processing is based on your consent;
the right to access your Personal Data and request a copy;
the right to request correction or update of inaccurate or outdated data;
the right to request deletion of Personal Data where permitted by law;
the right to request restriction of or object to processing in certain circumstances;
the right to request suspension of disclosure to third parties where permitted by law;
the right to lodge complaints, initiate legal proceedings, or claim damages in accordance with law.

To exercise your rights, you may contact us using the details set out in the Contact Information section below. We may require identity verification before processing your request.

When providing Personal Data to us, you are responsible for ensuring that the information is accurate, complete, lawful, and, where relevant, that you have a lawful basis to provide the data of any third party.

9. Communications and Reporting

We may process your Personal Data to contact you by email, telephone, text message, or other electronic communication channels in order to share information about our services, projects, events, updates, or opportunities that may be relevant to your interests.

If you no longer wish to receive marketing communications from us, you may opt out at any time by contacting our customer service team or by using the unsubscribe function included in our electronic communications, where available.

Once we receive your request, we will stop sending you marketing communications within a reasonable period. However, we may still contact you where necessary to provide services, process transactions, communicate important updates, or comply with legal obligations.

10. Cookies

Cookies are small data files stored on your device when you access our website. They help the website recognize your device, remember user preferences, support system functionality, improve user experience, analyze website performance, and, where applicable, support lawful marketing activities.

Our website uses strictly necessary cookies to ensure core functionality, security, accessibility, and appropriate website performance. These cookies are essential for features such as page navigation, session management, system load balancing, and information security.

Because these cookies are necessary for the technical operation of the website, they may be used without separate consent to the extent permitted by law. If you disable or block these cookies through your browser or device settings, some parts of the website may not function properly or may become inaccessible.

11. Contact Information

If you have any questions about this Policy, our processing of Personal Data, or if you wish to exercise your rights as a data subject, please contact us at:

Unik Holdings JOINT STOCK COMPANY

Personal Data Protection Department

Hotline: 024.2200.1076

Email: info@unikholdings.vn

Address: No 4 Lieu Gia, Cong Vi, Ba Dinh, Ha Noi