Article 1: Purpose and scope of data collection

1.1. Scope of Data Collection

The data collected on the website www.victoriavn.com and during the provision of healthcare services at the hospital includes:

• Appointment booking: Full name, date of birth, phone number, email address, registered specialty, and request details (if any).
• Laboratory test result lookup: Customer ID, sample collection date, and sample collection code.
• Consultation and customer care: Contact information and details of the support request.
• Recruitment: Personal information, educational qualifications, and work experience.
• Access data, IP address, access time, browser information, landing page, and HTTP response code.
• Information and status of connected devices.
• Identification data and cookies.

These data are necessary for Victoria Clinic to provide accurate, safe, and effective services. Victoria Clinic is committed to collecting, analyzing, consolidating, processing, storing, and securing personal data in accordance with applicable laws. The exercise of data subjects’ rights shall be carried out in accordance with applicable laws and regulations.

1.2. Purposes of Data Collection

Customers’ personal data is collected for the following purposes:

• Providing and managing healthcare services.
• Contacting customers to confirm appointments and provide support.
• Sending notifications related to services and healthcare.
• Resolving issues arising during the provision of services to customers.
• Optimizing the user experience.
• Identifying customers’ needs.
• Ensuring system security and administration.
• Complying with legal requirements and conducting reconciliation when requested.

Victoria Clinic is committed to not using personal data for purposes other than those stated above without the Customer’s consent, except where otherwise provided by law.

Article 2: Sharing data with third parties

To the extent necessary for service operations and provision, Victoria Clinic may share personal data with third parties—specifically affiliates or authorized partners. These entities are required to:

• Process data solely for the specific agreed-upon purposes and in accordance with the data collection purposes outlined in this policy.
• Strictly comply with data security and safety requirements established by Victoria Clinic and applicable laws.

Article 3: Data retention period

Victoria Clinic will retain your personal data for the period necessary to fulfill the identified purposes of collection, while complying with applicable laws and regulations of specialized regulatory bodies, including but not limited to sector-specific regulations issued by competent authorities.

In the event that you submit a valid request to delete the personal data you have provided, Victoria Clinic will verify the request and the data previously provided by you before proceeding with the deletion in accordance with the law. (1)

Article 4: Entity collecting and managing information

VICTORIA HEALTHCARE INTERNATIONAL HOSPITAL JOINT STOCK COMPANY

Address: 190 Tran Luu Street, Quarter 2, Binh Trung Ward, Ho Chi Minh City

Phone: 028 6686 5656

Email: info@www.victoriavn.com

Article 5: Customer's Obligations

5.1. Customers’ Obligations:

• Take responsibility for protecting their own personal data.
• Respect and protect the personal data of others.
• Provide complete and accurate personal data in accordance with applicable laws, contracts, or when giving consent to the processing of their personal data.
• Comply with personal data protection laws and participate in preventing and combating activities that infringe upon personal data.

5.2. When Exercising Their Rights and Obligations, Customers Must Comply with the Following Principles:

• Comply with applicable laws. The exercise of Customers’ rights and obligations must be for the purpose of protecting their own legitimate rights and interests.
• Do not obstruct or interfere with the exercise of the legal rights and obligations of the personal data controller, the personal data controller and processor, or the personal data processor.
• Do not infringe upon the legitimate rights and interests of the State, agencies, organizations, or other individuals.

Article 6: Your Rights

Customers may exercise the following rights:

• Request the correction or updating of personal data.
• Request to stop receiving service-related information.
• Request assistance regarding personal data.
• Be informed about the processing of personal data.
• Give or withhold consent, or request to withdraw consent to the processing of personal data.
• Access, correct, or request the correction of personal data.
• Request the provision, deletion, or restriction of processing of personal data, or submit a request to object to the processing of personal data.
• File complaints, denunciations, or lawsuits, and request compensation for damages in accordance with applicable laws.
• Request competent authorities or agencies, organizations, or individuals involved in the processing of personal data to implement measures and solutions to protect their personal data in accordance with applicable laws.

For all requests, please contact info@www.victoriavn.com so that they can be handled within a reasonable period in accordance with applicable laws.

Article 7: Data Privacy Commitment

Victoria Clinic is committed to protecting customers’ personal data through appropriate technical, organizational, and managerial measures, ensuring safety and security throughout the data processing and usage process.

Victoria Clinic commits to using customers’ personal data solely for the purposes specified in Clause 1.1, Article 1 and within the scope of use defined in Article 2 of this policy.

(1) Pursuant to Clause 2, Article 14 of the Law on Personal Data Protection 2025; Clause 10, Article 7 of the Law on Medical Examination and Treatment 2023; and Clause 2, Article 60 of the Law on Medical Examination and Treatment 2023.