PRIVACY POLICY

1. Who is responsible for your personal data

The relevant MAAS entity with which you interact or contract will generally be responsible for the processing of your personal data. For the Sites covered by this Policy, the primary company reference is MAAS Impex Company Limited. Where MAAS acts on behalf of another organization, the respective contractual and legal roles will apply.

2. Personal data we may collect

• Identification and business-contact data: such as name, company, job title, business address, email address, telephone or WhatsApp number and country.
• Business inquiry and transaction data: such as product, grade or specification, quantity, preferred origin, destination, Incoterm, delivery period, RFQ details, quotations, order/transaction information and related commercial correspondence.
• Technical and usage data: such as IP address, browser/device type, operating system, referring page, pages viewed, access date/time, site interaction and similar security or analytics information.
• Marketing and communication preferences: including newsletter or promotional-consent choices where applicable.
• Supplier, customer and business-partner due-diligence information: where reasonably necessary for KYC, anti-fraud, sanctions, anti-bribery, anti-money-laundering or other compliance checks.
• Recruitment information: if you apply to work with MAAS, such as CV/resume details, qualifications, work history, references and information necessary for lawful screening.
• Voluntary communications: Information you voluntarily provide to MAAS in emails, forms, calls, meetings or documents.

3. How we collect personal data

• Directly from you: when you complete a form, contact us, communicate with our team, provide documents, request services or enter a business relationship.
• Automatically: when you use the Sites, including through server logs, cookies and similar technologies.
• From third parties: from your employer, business partners, suppliers, buyers, agents, professional advisers, public sources or compliance-information providers where lawful and relevant to a business relationship.
• From third-party platforms: or social networks if you choose to interact with MAAS through those services.

4. How we use personal data

• Respond to inquiries and requests and communicate with prospective or existing buyers, suppliers, partners and other business contacts.
• Assess sourcing, supply and commercial opportunities and support negotiations, quotations, orders, logistics coordination and contract performance.
• Administer and improve the Sites, troubleshoot technical issues, understand usage and maintain security.
• Carry out identity, supplier, customer, anti-fraud, sanctions, KYC, anti-bribery, AML/CFT or other compliance checks where relevant and lawful.
• Maintain business records, manage accounts, process or reconcile transactions and meet tax, accounting, audit, regulatory or legal obligations.
• Send business updates or marketing communications where permitted; you may opt out of promotional emails at any time.
• Assess employment applications and manage recruitment where applicable.
• Establish, exercise or defend legal claims and protect MAAS, its systems, users and business partners.

5. Legal bases and lawful processing

Depending on the circumstances and applicable law, MAAS may process personal data because it is necessary to take steps at your request before entering into a contract, to perform a contract, to comply with a legal obligation, for MAAS’s legitimate business interests, or on the basis of consent where consent is required. Where MAAS relies on legitimate interests, it will consider the relevant rights and interests of affected individuals.

6. Sharing of personal data

• MAAS employees and authorized personnel who need the information for their work.
• Affiliates or associated MAAS entities where necessary for the business purpose for which the information was collected.
• Service providers such as website hosting, IT, communications, analytics, professional advisers, logistics or other operational providers acting for MAAS.
• Banks, payment providers, insurers, inspection companies, laboratories, logistics providers, ports, terminals, customs brokers or other parties needed to support a contemplated or actual transaction, where relevant.
• Authorities, regulators, courts or law-enforcement bodies where disclosure is required or permitted by law.
• A purchaser, investor or successor in connection with a genuine corporate transaction, subject to appropriate confidentiality and legal safeguards.

MAAS does not sell personal data as a business practice. Where third parties process personal data for MAAS, MAAS expects them to use it only for authorized purposes and to apply appropriate security and confidentiality measures.

7. International transfers

Because MAAS operates in international trade, personal data may be accessed, transferred or processed in countries other than the country where it was collected. Where required by applicable law, MAAS will use appropriate contractual, technical and organizational safeguards for such transfers.

8. Data retention

MAAS keeps personal data only for as long as reasonably necessary for the purpose for which it was collected, including to provide services, manage business relationships, comply with legal, tax, accounting or regulatory obligations, resolve disputes and enforce agreements. Retention periods vary depending on the type of information, legal requirements, the sensitivity of the data and legitimate business needs. Backup or archival copies may remain for a limited period where reasonably necessary.

9. Security

MAAS uses reasonable technical and organizational measures designed to protect personal data against unauthorized access, misuse, loss, alteration or disclosure. No internet transmission or storage system can be guaranteed to be completely secure. Users should also take appropriate precautions, including protecting account credentials and avoiding the transmission of unnecessary sensitive information.

10. Cookies and analytics

The Sites may use cookies and similar technologies for necessary website functions, preferences, security and analytics. For more information, see the separate Cookies Policy linked in the website footer.

11. Your privacy rights

Depending on your location and the law that applies, you may have rights to request access to personal data, correction of inaccurate data, deletion, restriction of processing, objection to certain processing, data portability, withdrawal of consent, or to make a complaint to a competent data-protection authority. These rights may be subject to legal conditions and exemptions.

To exercise an applicable privacy right, email info@maas.com.vn. MAAS may request reasonable information to verify your identity and understand your request before responding.

12. Marketing communications

Where MAAS sends electronic marketing communications, recipients may use the unsubscribe option in the message or contact info@maas.com.vn to opt out. Opting out of marketing does not prevent MAAS from sending non-promotional messages that are necessary for an existing business relationship or transaction.

13. Third-party websites

The Sites may link to websites, services or platforms operated by third parties. MAAS is not responsible for the privacy practices or content of third-party services. You should review their privacy notices before providing personal data to them.

14. Changes to this Privacy Policy

MAAS may update this Privacy Policy from time to time to reflect changes in its Sites, business practices or applicable requirements. The latest version will be published on the Sites with the date shown below.

15. Contact