Privacy Policy

KeyHay ("we", "our", "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, store, and protect your personal information when using KeyHay.com and related services. By using the Service, you agree to the collection and use of information in accordance with this policy. We comply with personal data protection regulations under Vietnamese law.

a) Information you provide directly: • Registration info: Full name, email, phone number (optional). • Payment info: Transaction codes, payment methods. We do NOT store bank card information — payments are processed through PayOS and PayPal. • Support info: Chat content, support requests, feedback. • Order info: Purchase history, products bought, order numbers. b) Automatically collected information: • Device info: Browser type, operating system, screen size. • Access info: IP address, access time, pages viewed. • Cookies: We use cookies and similar technologies to improve user experience. See the Cookies section below. c) Third-party information: • Payment info from PayOS/PayPal (transaction status, reference codes). • Social login information (if available in the future).

We use collected information to: • Provide and maintain the Service: Process orders, automatic delivery, account management. • Customer support: Handle support requests, respond to complaints, improve CS service. • Security: Detect fraud, prevent abuse, verify payments. • Improve service: Analyze user interactions to optimize experience. • Communication: Send order notifications, service updates, promotions (you can opt-out). • Legal compliance: Meet legal requirements, resolve disputes. We do NOT sell, rent, or share personal information with third parties for marketing purposes.

We implement multiple security measures to protect your information: • SSL/TLS Encryption: All data transmitted between your browser and our servers is encrypted. • Password Hashing: Passwords are hashed using bcrypt algorithm and cannot be reverse-decoded. • Database Security: Databases are protected by multiple layers of firewalls and access controls. • No Card Storage: We do not directly store bank card or payment account information. • JWT Tokens: JSON Web Tokens with expiration times are used for session authentication. • Regular Audits: Systems are monitored and security-updated regularly. Data is stored on secure servers. We retain your data for as long as your account is active or as required by law.

KeyHay uses cookies and similar technologies for the following purposes: • Essential Cookies: Maintain login sessions, shopping cart, preferred language. Cannot be disabled. • Analytics Cookies: Help us understand how users interact with the website (pages viewed, time spent). Data is anonymized. • Functional Cookies: Remember your preferences (light/dark theme, language). You can manage cookies through your browser settings. However, disabling essential cookies may affect website functionality.

We only share personal information in the following cases: • Payment partners: PayOS, PayPal — only information necessary to process transactions. • Legal requirements: When legally required by competent government authorities. • Protecting rights: When necessary to protect the rights and safety of KeyHay and other users. • With your consent: In any other case, we will ask permission first. In all cases, we only share the minimum necessary information and require recipients to maintain confidentiality.

You have the following rights regarding your personal data: • Right to access: View personal information we store about you. • Right to rectification: Update or correct inaccurate personal information. • Right to deletion: Request account and personal data deletion (subject to legal retention requirements). • Right to object: Opt out of marketing/promotional emails. • Right to portability: Request export of personal data in a readable format. To exercise these rights, contact: support@KeyHay.com. We will respond within 30 days.

KeyHay does not knowingly collect personal information from children under 16. If you are under 16, please do not provide personal information without parental or guardian consent. If we discover we have collected information from a child under 16 without appropriate consent, we will delete it immediately. Parents or guardians can contact us to request deletion.

We may update this Privacy Policy from time to time. Significant changes will be notified via: • Email to your registered account. • Website announcements. • Updated "Last Updated" date at the top of this page. We encourage you to periodically review this page for changes. Last updated: February 26, 2026.

If you have questions or concerns about this Privacy Policy, please contact: • Email: support@KeyHay.com • Zalo: 0123 456 789 • Live Chat: Visit KeyHay website • Address: Ho Chi Minh City, Vietnam We are committed to resolving all privacy inquiries as quickly as possible.