Victoria Healthcare Medical Development Joint Stock Company, Victoria Healthcare General Clinic System (“Victoria Healthcare”) sends our best wishes for health and our sincere gratitude to our valued customers for your trust and companionship with Victoria Healthcare.

Victoria Healthcare highly values your privacy and recognizes the importance of protecting your Personal Data (“PD”) when you provide it during the process of using our medical examination and treatment services. To ensure that you are fully informed about how your PD is processed, Victoria Healthcare provides this Personal Data Processing Notice with the following details:

Purposes of Personal Data Processing

Victoria Healthcare conducts activities such as collecting, receiving, aggregating, analyzing, verifying, storing, modifying, disclosing, combining, accessing, retrieving, recalling, encrypting, decrypting, copying, sharing, transferring, providing, deleting, and destroying your Personal Data (“PD”) (“Processing”) to fulfill the following purposes:

Contacting and confirming service requests upon receiving your registration;

Providing service information upon your request and suggesting services that may interest you, while personalizing your experience;

Performing necessary internal activities to deliver services, including but not limited to: registering patient record numbers, electronic medical accounts, recording medical history, creating, managing, updating, and storing your medical records, troubleshooting software errors and operational issues, conducting data analysis, testing, research, monitoring, and analyzing usage trends and activities;

Fulfilling obligations under contracts or agreements between Victoria Healthcare and you;

Confirming transactions and processing payments;

Protecting and enforcing the legal rights, interests, and obligations of Victoria Healthcare as a healthcare service provider, as per agreements with you and legal regulations;

Sending medical examination results, health consultation, and health-related information;

Responding to your inquiries and comments;

Analyzing your healthcare needs;

Contacting you for support and resolving other customer-related matters, including but not limited to: processing hospital fee guarantees and insurance claim procedures;

Sending notifications, including confirmations, invoices, technical updates, security alerts, support, administration, and other necessary documents related to the services;

Detecting, investigating, and preventing fraud or legal violations within Victoria Healthcare’s rights and obligations;

Sending updates on services, promotional programs, and customer care via mail, phone calls, messaging services, online messaging, text notifications, or emails. You can opt out of receiving these communications following Victoria Healthcare’s guidelines. Victoria Healthcare commits to complying with legal regulations regarding the frequency of messages, emails, and service-related calls;

Legal Compliance: Victoria Healthcare is legally required to collect, use, or store your PD in certain cases, including when requested, advised, suggested, or required by legal advisors, regulatory laws, government regulations, competent local or foreign authorities, or state agencies. This includes but is not limited to disclosure obligations, promotional reporting, record-keeping, audits, investigations, complaint resolution, court orders, or any legal, governmental, or regulatory requirements. Additionally, Victoria Healthcare may process PD to protect our rights or assets in case of disputes or claims.

Types of Personal Data Processed by Victoria Healthcare

The types of personal data processed by Victoria Healthcare include basic personal data and sensitive personal data, as follows:

Basic Personal Data

Includes: full name, other names (if any); date of birth; gender; place of birth, place of birth registration, permanent residence, temporary residence, current address, place of origin, contact address; nationality; personal image; phone number, identity card/citizen ID number, personal identification number, passport number, social insurance number, health insurance card number; marital status; information on family relationships (parents, children); data reflecting activities and history of activities on the internet.

Sensitive Personal Data

Sensitive personal data is data tied to your privacy, where any breach may directly affect your legal rights and interests. This includes: health status and personal life details recorded in medical records (excluding blood type information); information related to racial or ethnic origin; inherited or acquired genetic characteristics; information on physical attributes and unique biological traits; information on sexual life or sexual orientation; bank account information.

---

How Victoria Healthcare Processes Personal Data

Victoria Healthcare collects your personal data through the following methods:

Direct Provision by You

Victoria Healthcare collects any information you provide in relation to the services we offer, including but not limited to:

• Using our services or participating in community health projects or medical professional activities conducted by Victoria Healthcare.

• Registering an account, logging in, and interacting with Victoria Healthcare’s platforms.

• Participating in seminars, customer events, competitions, games, surveys, or other events organized by Victoria Healthcare.

• Using biometric authentication for personal identification and transaction verification.

Automated Collection

Victoria Healthcare automatically collects certain types of data when you interact with our services, including but not limited to:

• Information related to service and product providers.

• Transaction details (type of goods/services, location, transaction time).

• Payment method details (excluding critical payment card data such as card number, CVV, or other legally equivalent authentication codes).

• Device information (e.g., IP address, operating system, browser type, hardware specifications, UDID, MEID, location, referral webpage, pages visited on Victoria Healthcare’s platforms, app interactions, access frequency, response data, file names, versions, advertising identifiers, and other relevant details).

Collection and Use of Cookies

Victoria Healthcare uses cookies, pixels, and similar technologies (collectively referred to as “cookies”) to recognize your browser or device, learn more about your preferences, and provide essential features and services, including:

• Identifying you when you log in to use our services, enabling us to provide personalized recommendations and customized features.

• Remembering your chosen preferences (e.g., language settings, configurations).

• Conducting research and analysis to improve service quality.

• Preventing fraudulent activities.

• Enhancing security measures.

• Providing relevant content, including advertisements, on our websites and third-party websites.

• Measuring and analyzing service quality.

Cookies enable you to take advantage of essential website features. If you block or reject our cookies, some services may not function correctly, and you may need to manually adjust preferences each time you visit Victoria Healthcare’s website.

Third-Party Cookies:
Approved third parties (such as search engines, analytics providers, social media platforms, and advertising companies) may also place cookies when you interact with our services. These third parties use cookies to deliver personalized ads, measure advertising effectiveness, and provide services on our behalf.

Managing Cookies:
You can control browser cookies through your browser settings. The “Help” feature in most browsers explains how to block new cookies, receive notifications about new cookies, disable cookies, and set expiration preferences. If you disable all cookies, neither we nor third parties can transfer cookies to your browser, but some website features may not function properly, and certain services may require manual adjustments each time you visit.

Entities and Individuals Authorized to Process Your Personal Data

Entities and Individuals Authorized to Process Your Personal Data

You agree to allow Victoria Healthcare to share your Personal Data (DLCN) with the following entities and individuals within the scope of the purposes stated in this Notice:

Government agencies as required by law, including but not limited to Social Insurance agencies, Tax authorities, Labor Unions, Departments of Labor, and Law Enforcement agencies upon request.

Consultants and service providers for Victoria Healthcare, including but not limited to suppliers of medical equipment, IT service providers, marketing service providers, market research firms, training service providers, legal consultants, audit firms, and transportation service providers for Victoria Healthcare.

Employees and workers of Victoria Healthcare.

Business partners when Victoria Healthcare enters into or negotiates a business agreement related to the sale or transfer of all or part of its business or assets.

Third parties upon your request, including organizations and individuals you authorize to access or share your data.

Data Processing and Retention Period

Start: From the moment you provide your Personal Data to Victoria Healthcare.

End: Within 72 hours from when you:

Request Victoria Healthcare to delete your Personal Data and accept potential consequences.

Object to data processing, and Victoria Healthcare has no valid reason to continue processing.

Determine that data processing is inconsistent with the stated purposes in this Notice or violates legal regulations.

When Victoria Healthcare finds that processing has fulfilled its intended purpose or is no longer necessary for its legal obligations.

Potential Risks and Unintended Consequences

Victoria Healthcare prioritizes data security and employs high-security measures, including:

Using Practice Partner (EGM Practice Partner) by McKesson (USA), BKPACS, and IQI, known for high security standards.

Encryption (SSL/TLS), firewalls, antivirus software, secure access control, and regular backups.

Collaborating with cybersecurity experts to stay updated on security risks and potential threats.

However, certain unforeseen risks may occur, including but not limited to:

Hardware or software failures resulting in data loss.

Security breaches or cyberattacks beyond Victoria Healthcare’s control.

User negligence, such as falling for phishing scams or accessing malicious websites.

Force majeure events that Victoria Healthcare cannot anticipate or resolve.

User Responsibilities

You must:

Keep your account credentials secure.

Safeguard your devices when accessing personal health records.

Log out of your account after each session.

Victoria Healthcare is not responsible for data security when using third-party platforms not managed by Victoria Healthcare. Please review the privacy policies of these external providers before sharing your data with them.

Data Retention and Disposal

Victoria Healthcare retains your Personal Data for as long as necessary to provide services and comply with legal obligations. Once your data is no longer needed, Victoria Healthcare will:

Restrict access or usage beyond compliance, security, and fraud prevention.

Permanently delete or anonymize identifiable data according to legal requirements.

Contact Information

If you have any questions regarding Victoria Healthcare’s data processing practices or your legal rights and obligations, please contact us via:

Contact Victoria Healthcare directly at the following addresses:

• 37-39 Luong Dinh Cua, An Khanh Ward, Thu Duc City

• 20-20Bis-22 Dinh Tien Hoang, Da Kao Ward, District 1

• 135A Nguyen Van Troi, Ward 11, Phu Nhuan District

• 1056 Nguyen Van Linh, Sky Garden 1, Phu My Hung, District 7

 Email: customer_support@victoriavn.com
 Hotline: (028) 3910 4545
 Website: victoriavn.com

EXECUTIVE BOARD VICTORIA HEALTHCARE INTERNATIONAL CLINIC SYSTEM