CUSTOMER INFORMATION PRIVACY POLICY

Last Updated: 7 August 2026

KIGO GROUP (KIGORA) respects your privacy and is committed to protecting your personal data when you access, register for an account, place an order, or use services provided through the Kigora.com website.

This Privacy Policy explains the types of information KIGORA may collect, how such information is used, the circumstances in which it may be disclosed, how long it may be retained, and your rights in relation to your personal data.

1. Data Controller

The entity responsible for collecting and processing personal data through Kigora.com is:

• Legal Name: KIGO GROUP TRADING AND SERVICES COMPANY LIMITED
• Address: 1st Floor, Hateco Laroma Building, No. 4A Huynh Thuc Khang Street, Lang Ward, Hanoi, Vietnam
• Email for Personal Data Requests: kigogroup.vn@gmail.com
• Hotline: 0839 922 923

For the purposes of this Policy, the above entity is referred to as “KIGORA”.

2. Information We Collect

Depending on how you use Kigora.com, KIGORA may collect the following categories of information:

2.1. Information You Provide

KIGORA may collect information that you voluntarily provide, including:

• Full name.
• Telephone number.
• Email address.
• Delivery address.
• Name and telephone number of the recipient.
• Login credentials and customer account information, if you register for an account.
• Information required for invoicing as provided by you.
• Details of feedback, support requests, or complaints.
• Photographs, videos, receipts, documents, or other materials that you voluntarily provide for the purposes of order processing, returns, refunds, or complaint handling.

2.2. Transaction Information

KIGORA may collect information relating to your transactions, including:

• Products and quantities ordered.
• Order number.
• Order value.
• Payment method.
• Payment and delivery status.
• Purchase, return, and refund history.
• Promotional codes, Affiliate codes, or referral codes used.
• Other information necessary for performing transactions between you and KIGORA.

KIGORA will not request your bank account password, banking OTP, or online banking login credentials.

2.3. Information Collected Automatically

When you access Kigora.com, certain technical information may be automatically collected, including:

• IP address.
• Device type and browser type.
• Operating system.
• Access date and time.
• Pages and products viewed.
• Source or referring website through which you accessed the Website.
• Cookie data or similar technologies.
• Technical information necessary for security, fraud prevention, and maintaining the operation of the Website.

3. Purposes of Collection and Use

KIGORA collects and processes personal data only to the extent reasonably necessary for the following purposes:

• Creating and managing customer accounts.
• Receiving, confirming, and processing Orders.
• Contacting Customers to verify Order information where necessary.
• Packaging, delivering, and tracking Orders.
• Verifying payments made by bank transfer.
• Issuing invoices at the Customer’s request and as required by applicable law.
• Receiving and handling requests for returns, refunds, feedback, or complaints.
• Providing customer support and after-sales services.
• Recording referral codes and calculating Affiliate Program results.
• Preventing impersonation, fraud, abuse, or improper use of promotional programs.
• Protecting the rights, property, security, and legitimate interests of KIGORA, Customers, and relevant parties.
• Analyzing Website usage and performance to improve the Website’s interface, content, products, and shopping experience.
• Fulfilling accounting, tax, record-keeping, and other legal obligations.
• Sending information about products, promotions, special offers, or marketing communications where you have consented to receive such communications.

KIGORA will not use your personal data for purposes that are incompatible with the purposes disclosed to you, unless you have provided your consent or such use is otherwise permitted or required by applicable law.

4. How We Collect Information

Personal data may be collected when you:

• Register for or update an account on Kigora.com.
• Enter information in the shopping cart or checkout page.
• Place an Order through the Website.
• Subscribe to receive information or promotional offers.
• Contact KIGORA through its hotline, email, contact forms, or official customer service channels.
• Submit a request for a return, refund, or complaint.
• Participate in surveys, promotional programs, or other activities organized by KIGORA.
• Access or use the Website through cookies or similar technologies.

You are responsible for ensuring that the information you provide is accurate and that you have the lawful right to provide such information.

If you provide information relating to a recipient or another individual, you are responsible for informing that individual that their information will be used for the purposes of processing and delivering the relevant Order.

5. Legal Bases for Processing

KIGORA processes personal data on one or more applicable legal bases, including:

• Your consent, where consent is required by applicable law.
• Processing that is necessary to receive and fulfill an Order.
• Processing that is necessary to respond to and fulfill your requests.
• Compliance with KIGORA’s legal obligations.
• Processing necessary to protect the legitimate rights and interests of KIGORA, Customers, or relevant parties, to the extent permitted by law.

You may decline to provide information that is not mandatory. However, if you do not provide information necessary to verify, process, pay for, or deliver an Order, KIGORA may be unable to fulfill the relevant Order or request.

6. Disclosure and Sharing of Personal Data

KIGORA does not sell or trade Customers’ personal data.

Personal data may be disclosed or made available only to the extent reasonably necessary to the following categories of recipients:

6.1. Internal Personnel and Departments

Authorized personnel within departments such as sales, customer service, warehousing and logistics, accounting, information technology, and management may access personal data to the extent necessary to perform their respective duties.

6.2. Delivery Providers

KIGORA may provide the Customer’s name, telephone number, delivery address, and necessary Order information to delivery providers for the purposes of delivery, cash collection, and transaction reconciliation.

6.3. Service Providers

Personal data may be processed by service providers that provide:

• Hosting and data storage infrastructure.
• Sales and order management software.
• Email, SMS, or Order notification services.
• Accounting and invoicing services.
• Website security, analytics, and maintenance services.
• Customer support or other necessary technical services.

Such service providers may access and process personal data only to the extent necessary to perform the services assigned by KIGORA or as otherwise agreed between the parties.

6.4. Competent Governmental Authorities

KIGORA may disclose personal data where required pursuant to a lawful request from a competent governmental authority or where disclosure is necessary to comply with applicable law.

6.5. Affiliate Partners

Affiliate partners are not sellers and will not be provided with Customers’ complete personal data.

KIGORA may provide or make available to Affiliate partners only the information necessary to record referral results and reconcile commissions, such as Order numbers, Order status, or commission amounts, to the extent appropriate for the applicable Affiliate Program and permitted under applicable personal data protection laws.

7. Marketing and Advertising Communications

KIGORA will use your contact information to send advertising, promotional offers, product information, or other marketing communications only where you have subscribed or otherwise consented to receive such communications, where required by applicable law.

You may opt out of marketing communications by:

• Using the unsubscribe function included in an email.
• Following the opt-out instructions provided in a text message.
• Contacting KIGORA through its hotline or email.
• Updating your communication preferences in your account, where such functionality is available.

Opting out of marketing communications will not affect essential communications relating to Orders, payments, delivery, account security, or the handling of your requests.

8. Cookies and Similar Technologies

Kigora.com may use cookies and similar technologies for purposes including:

• Remembering login sessions and shopping cart information.
• Maintaining Website functionality.
• Recording referral codes or traffic sources.
• Analyzing Website performance.
• Improving Website content and customer experience.
• Preventing fraud and protecting the Website and its systems.

You may manage, disable, or delete cookies through your browser settings.

Disabling certain cookies may affect the functionality of the shopping cart, login features, or other functions of Kigora.com.

9. Data Retention

KIGORA retains personal data for as long as reasonably necessary to:

• Fulfill the purposes for which the data was collected.
• Manage customer accounts.
• Process and maintain records relating to Orders.
• Handle returns, refunds, complaints, or disputes.
• Comply with accounting, tax, invoicing, and record-retention obligations.
• Prevent and investigate fraud or other misuse.
• Comply with applicable statutory retention requirements.

When personal data is no longer necessary and there is no lawful basis for continued retention, KIGORA will delete, securely destroy, or anonymize the data in accordance with its applicable procedures.

Deleting a Customer account does not necessarily result in the immediate deletion of all transaction records. KIGORA may retain such information where required by law or where reasonably necessary to resolve disputes or fulfill other legal obligations.

10. Data Security Measures

KIGORA implements appropriate organizational, administrative, and technical measures designed to reduce the risk of:

• Unauthorized access.
• Loss or unauthorized disclosure of information.
• Misuse of information.
• Unauthorized disclosure, alteration, or destruction of information.
• Cyberattacks or exploitation of system vulnerabilities.

Such measures may include:

• Access controls and role-based permissions.
• Administrative account and password controls.
• System backups and monitoring.
• Security measures for the Website and servers.
• Confidentiality obligations imposed on personnel and service providers.
• Monitoring and investigation of unusual access or activity.

No electronic system can guarantee absolute security. If KIGORA becomes aware of an incident that may affect personal data, KIGORA will take appropriate measures to investigate, mitigate, and remedy the incident and will notify relevant authorities, organizations, or individuals where required by applicable law.

11. KIGORA’s Commitment to Personal Data Protection

KIGORA respects and protects Customers’ personal data in accordance with applicable laws and regulations concerning personal data protection.

In particular, KIGORA undertakes to:

• Collect and process personal data only to the extent necessary, for the purposes disclosed to Customers, and on an appropriate legal basis.
• Not sell or trade Customers’ personal data in any form.
• Not use Customers’ personal data for purposes that are inconsistent with the purposes disclosed or contrary to applicable law.
• Not intentionally disclose, provide, or share Customers’ personal data with third parties beyond what is reasonably necessary to perform transactions, provide services, or fulfill legal obligations.
• Implement appropriate administrative, technical, and organizational measures to prevent unauthorized access to, use, alteration, disclosure, copying, or destruction of personal data.
• Restrict and control access to personal data by personnel, departments, and relevant parties based on legitimate business needs and the requirements of their respective duties.
• Require delivery providers, service providers, and other authorized parties that access or process personal data to comply with applicable confidentiality and data protection obligations within the scope of their services.
• Facilitate the exercise of Customers’ rights regarding their personal data in accordance with this Policy and applicable law.
• Where an incident or activity may adversely affect Customers’ personal data is identified, take appropriate measures to investigate, prevent, mitigate, and remedy the incident, and fulfill applicable notification and reporting obligations where required by law.
• Delete, securely destroy, or anonymize personal data when the processing purpose has been fulfilled and there is no longer a lawful basis for continued retention, except where the data must be retained to fulfill accounting, tax, invoicing, dispute resolution, or other legal obligations.

Customers are responsible for keeping their account credentials, passwords, and authentication information secure. If you become aware of any unauthorized access to or use of your account or personal data, please notify KIGORA as soon as reasonably possible so that appropriate assistance can be provided.

12. Customer Rights

To the extent permitted by applicable law, Customers may have the right to:

• Be informed about the processing of their personal data.
• Give or withhold consent to processing where consent is required.
• Access or request a copy of their personal data.
• Request correction of inaccurate or incomplete personal data.
• Withdraw consent where processing is based on consent.
• Request that personal data no longer be used for marketing purposes.
• Request deletion of or restriction on the processing of personal data where applicable.
• Object to processing, submit a complaint, or request remedial action where personal data is processed improperly.
• Seek compensation for damage where their lawful rights or interests have been infringed, in accordance with applicable law.

Certain requests may not be fulfilled, or may only be partially fulfilled, where continued retention or processing of the relevant data is necessary to:

• Fulfill an Order or an outstanding request.
• Comply with KIGORA’s legal obligations.
• Protect the lawful rights and interests of the relevant parties.
• Prevent or investigate fraud.
• Handle complaints, disputes, or lawful requests from competent authorities.

13. How to Exercise Your Data Protection Rights

Customers may submit requests through:

• Email: kigogroup.vn@gmail.com
• Hotline: 0839 922 923

Requests should, where applicable, include:

• Full name.
• Telephone number or email address used with KIGORA.
• Order number or relevant account information, if applicable.
• Details of the specific access, correction, deletion, or other action requested.
• Information or documentation reasonably necessary to verify that the requester is the relevant data subject or their lawful representative, where necessary.

KIGORA may request identity verification before processing a request in order to prevent unauthorized disclosure, alteration, or deletion of personal data.

KIGORA will acknowledge and respond to requests within a timeframe appropriate to the nature of the request and in accordance with applicable law.

14. Cross-Border Data Transfers

Where KIGORA engages service providers whose systems store or process personal data outside Vietnam, any transfer or processing of personal data will be carried out in accordance with applicable law.

KIGORA will implement appropriate measures to ensure that service providers process personal data only for authorized purposes, within the scope of the services provided, and subject to appropriate data protection safeguards.

15. Links to Third-Party Websites and Services

Kigora.com may contain links to websites or services operated by third parties.

KIGORA does not control and is not responsible for the privacy policies, data processing practices, or activities of such independent websites, applications, or services.

Customers are encouraged to review the privacy policies of third parties before providing them with personal information.

16. Changes to This Policy

KIGORA may update this Policy from time to time to reflect:

• Changes to its business operations.
• New Website features or services.
• Changes in the way personal data is collected or processed.
• Changes in applicable legal requirements.

The updated version of this Policy will be published on Kigora.com and will indicate the date on which it was last updated.

Where an amendment materially affects Customers’ rights, KIGORA will provide appropriate notice or obtain renewed consent where required by applicable law.

17. Customer Acknowledgment

By providing information to Kigora.com, you acknowledge and confirm that:

• The information you provide is accurate and lawfully provided.
• You have read this Policy or have had reasonable access to it.
• You understand the purposes for which your information may be used to process transactions and provide services.
• You will update your information when necessary to keep it accurate.
• If you provide information relating to another person, you have the lawful right to provide such information and have informed that person of the purposes for which their information will be used.

18. Contact Information

For any questions, feedback, or requests relating to the protection of personal data, please contact:

• Entity: KIGO GROUP TRADING AND SERVICES COMPANY LIMITED
• Email: kigogroup.vn@gmail.com
• Hotline: 0839 922 923
• Address: 1st Floor, Hateco Laroma Building, No. 4A Huynh Thuc Khang Street, Lang Ward, Hanoi, Vietnam
• Contact Hours: 09:00 – 17:30, Monday to Saturday