Privacy Policy

Latest Update: January 12, 2023

This Privacy Policy (“Policy”) applies to the website located at xofacafebistro.com and any other websites or applications, if any, including mobile applications related to the Xofa Café & Bistro brand that direct viewers or users to this Policy. The websites or applications of Xofa Café & Bistro that are subject to this Policy may contain links to other websites or applications owned and operated by other companies. However, this Policy does not apply to third-party websites or applications.

1. Scope of Information Collection

When you use our websites or applications, we collect certain information about you and the services you use. The information we collect includes three different types: (1) information you provide to us; (2) information we collect automatically from you when you use our services; and (3) information we collect from other sources.

Information You Provide to Us

We collect information that you provide to us when you use our services. Some examples of using our “services” include making a transaction at one of our stores, accessing or making a transaction through one of our websites, creating a Xofa Café & Bistro account, purchasing or sending a gift card or online gift, downloading and installing one of our mobile applications, or participating in a survey or promotion. You may also provide us with information related to job applications or managing a franchised Xofa Café & Bistro store. The information you provide to us may include your name or first name, username, password, email address, mailing address, phone number, your financial account information such as cardholder name, card number, expiration date, credit card verification code, debit card, local ATM card, date of birth, place of birth, demographic information, and other information you choose to provide to us. You may also allow us to access information stored in your device’s “contact list” or provide us with information related to individuals you designate us to send gift cards or online gifts to, if applicable.

Information We Collect When You Use Our Services

When you access our website or use our services or mobile applications, we may collect information about your access and usage. This information may include:

• Purchase Transaction Information: We may collect information about your transactions at our stores or on our websites or mobile applications, including the products you purchased, the frequency of your purchases, any gift cards or promotions associated with the purchase, and products you have added to your “wish list” for future reference.

• Device and Usage Information: When you download and install one of our mobile applications or use a computer, tablet, smartphone, or other device to access our website, use our services or mobile applications, or make purchases of products or services through our websites, we may collect information about the devices you use and how you use them.

• Account Information: When you make payments for transactions on our websites or mobile applications, we collect your payment information through our payment service providers to facilitate the payment process for you. This may include your cardholder name, card number, expiration date, and verification code.

This information may include details about the types of devices you are using, your operating system, your browser (e.g., whether you are using Internet Explorer, Firefox, Safari, Chrome, or another browser), your internet service provider, domain name, Internet Protocol (IP) address, device identification code (or UDID), websites that referred you to our website, web pages you visit (including the date and time of your visit), services or features you access or use (including the date and time of your access or use), and advertisements you click on to view or scroll over on the screen. To collect this information, we use cookies, web beacons, and similar technologies. Learn more about cookies, web beacons, and similar technologies.

Location Information: When you download and install one of our mobile applications or use a computer, tablet, smartphone, or other device to access our website, use our services or mobile applications, or make purchases or use services through our websites, we may collect information about your location, which may include information based on your IP address, SIM card, and/or GPS of your device (global positioning system).

We may combine this information with other location-based information, such as IP address and billing information, to provide you with information about stores near your location, provide you with information about the distance of those stores from your location, and enable the deployment of other services or features on our websites and mobile applications. We only share information about your location with service providers who assist us in providing you with these services and features or help us understand how these services and features are used. If you wish to opt out of the collection of location information, please refer to the section titled “Your Choices” below.

Information We Collect from Other Sources

We also collect information that is publicly available. For example, we may collect information that you post on a blog, chat room, or social media platform such as Facebook, Instagram, Twitter, or Google+. We may also collect information about you from other companies and organizations. By gathering additional information about you, we can correct any inaccurate information, enhance the security of your transactions, and provide you with recommended products and special offers that are likely to be of interest to you.

2. Scope of Information Usage

We may use the information we collect about you in various ways, including:

• Processing your product purchases and service usage.
• Facilitating smooth transaction processing and payment processing.
• Enabling the functionality of our website and mobile applications.
• Issuing gift vouchers or online gifts as per your instructions.
• Contacting you regarding your orders, purchases, returns, accounts, programs.
• Responding to customer service inquiries and information requests.
• Posting your opinions or comments on our websites.
• Sending you personalized promotions, advertisements, newsletters, and special offers.
• Notifying you about our products, services, contests, sweepstakes, events, or other promotions.
• Maintaining and improving our websites, mobile applications, products, and services.
• Detecting, preventing, or investigating security breaches and fraud.
• Maintaining accurate and appropriate record-keeping for internal management purposes.

3. Purpose of Information Collection

We may share your information in the following circumstances:

• Working Together – We may share the information we collect with Xofa Café & Bistro for the purpose of management, analysis, and appropriate decision-making, including decisions related to expanding and promoting product and service offerings, our orders, or fulfilling customer requests, operating our websites and mobile applications, and for other purposes described in this Policy.
• Working with Service Providers – We may share your information with service providers who provide support services to us, such as website hosting, email delivery, map location, postal mail processing, order fulfillment and delivery, and analytics. We require these companies not to collect, use, or disclose your information except when they are performing work for us or when the disclosure of your information is required by law.
• Business Transactions – If we engage in a merger, acquisition, or other transaction involving the transfer of all or part of our business assets, we may share your information with the business entities or parties involved in the negotiation or transfer.
• Protecting Legal Interests – We may disclose your information if we believe that disclosure is required by law, if we believe that disclosure is necessary to enforce our agreements and policies, or if we believe that disclosure will help us protect the rights, property, or safety of Xofa Café & Bistro, our customers, or our partners.
• Sharing with Marketing Partners – We may share your information with service providers to use your information on our behalf to provide you with promotions and special offers, notify you about contests, sweepstakes, events, or for other marketing purposes. We may also share aggregated usage data about our websites and applications with other companies.
• With Your Consent – We may share information about you with other companies if you give us permission or instruct us to share the information.
• Non-Identifiable Information – We may share your information in a way that does not directly identify you. For example, we may aggregate information about you with information about others and share the aggregated information in a manner that does not link the combined information back to you.
• When You Post on Our Website – If you post information on our blog or other sections of our website, the information you post may be visible to other visitors on our website, including your posted information and username.

4. How We May Allow Others to Collect Your Information

When you use our websites or applications, we may allow third parties to collect information about you through cookies, web beacons, and similar technologies. Learn more about cookies, web beacons, and similar technologies. The information collected by third parties may include the types of devices, operating systems, and browsers you use, your internet service provider, your domain name, your Internet Protocol (IP) address, your device identification code (or UDID), the referring web pages that brought you to our website, the web pages you visit (including the date and time you accessed them), the services or features you access or use (including the date and time of your access or use), and the advertisements you click to view or scroll past on your screen.

We allow third parties to collect this information on our website for the following purposes:

• Displaying advertisements for products or services: We allow certain advertising companies to collect this information to display advertisements on our website that are most relevant to you. Third parties may also collect anonymous information about visitors to our website to create market segments and display relevant ads on other websites. This is known as “online behavioral advertising.” Please refer to “Your Choices” below for more information on opting out of targeted advertising and controlling the use of cookies, web beacons, and similar technologies.
• Gathering information about how our websites and applications are used: We allow certain service providers to collect this information to help us understand how our websites and applications are used and to support us in improving the content and functionality of our online products. These service providers collect aggregate statistical data that is not associated with or linked to any individual user.
• Deploying services of other companies: We allow companies to supplement our websites or applications with cookies, web beacons, and similar technologies to enhance the operation of specific services and functionalities. For example, we allow Adobe to set and activate special cookies necessary for Adobe Flash Player to deliver video content. These cookies are called Flash cookies.
• Linking your activity to your social media: We have added certain features to our websites and applications to allow social networks (such as Facebook, Instagram, Twitter, and Google+) to track the activities of their members or collect certain information when they use our website or application. These features may include technologies known as “plugins” and “widgets.” Plugins create direct links between two websites, and widgets are small interactive programs that provide other services of the company on our websites. If you are concerned about how a social network tracks your activity, please contact the social network or review their privacy policy.

5. Cookie Files, Web Beacons, and Similar Technologies

We and others may use a variety of technologies to collect information about your device and your use of our websites and applications. These technologies include cookies, web beacons, JavaScript, entity tags, and HTML local storage. Most web browsers can be programmed to accept or reject these technologies in certain circumstances or altogether. For more information on changing your browser settings, please refer to the “Your Choices” section of this Policy.

Cookies: Cookies are small data files sent from a website’s server and stored on your device’s hard drive during your visit (session cookies) or for a specific period of time (persistent cookies). Cookies contain information that can be later read by a web server.

Web beacons: Web beacons are small, clear images embedded in websites, applications, and emails that are sometimes referred to as “clear gifs,” “single pixel gifs,” “page tags,” or “web bugs.” We use web beacons to track the web pages you visit, to measure the effectiveness of our marketing efforts, and to determine if an email has been opened and acted upon.

JavaScript: JavaScript is a code snippet embedded in various parts of websites and applications that enables a range of activities, including speeding up certain functions or monitoring the usage of different online components.

Entity Tags: Entity Tags are HTTP mechanisms that allow parts of a website to be stored or “cached” in your browser and validate the cache when the website is accessed, enhancing website performance as the web server doesn’t need to send a full response if the content hasn’t changed.

HTML5 Local Storage: HTML5 local storage allows pairs of encoded character strings/values to be named from websites to be stored or “cached” in your browser, enabling the storage and retrieval of data within an HTML5 page when the website is revisited.

These technologies are primarily used for the following purposes:

• Services and Functions: Some of these technologies are required to enable you to access or use our website or mobile applications and various services and functions we provide. Without these technologies, some of the services and functions we offer on our websites and mobile applications would not work properly.
• Performance Monitoring: Some of these technologies help us analyze and estimate the traffic and usage volume of services and functions on our websites and mobile applications. They show us how visitors and users interact with the digital features, whether certain web pages, applications, services, or functions are accessed and used, and how they operate or function. When these technologies are used for performance monitoring, no personally identifiable information is collected.
• User Convenience: Some of these technologies enhance the ease of use of our websites, mobile applications, and the services and functions we provide by speeding up loading times, refreshing times, and remembering information you have provided in previous visits to our websites or the last time you used a specific service or function of our website or mobile application.
• Marketing: Some of these technologies are used to tailor your experience on our website or in our mobile applications by controlling promotions, advertisements, and other marketing messages that may appear when you access or use the digital features. These technologies also help us learn about the services and functions you are using and how you access information about us. We may use this information to personalize your access to a website or use of a mobile application and to send you relevant promotions and advertisements.

6. Your Choices

Promotional Information Choices

You can opt out of receiving promotional information, advertisements, emails, newsletters, text messages, phone calls, and mail by notifying us of your preferences when registering for an Xofa Café & Bistro account, modifying your online advertising options in the account profile management section, or following the instructions to unsubscribe from promotional emails we send you. In the case that our mobile applications allow for “push notifications,” you can also opt out of receiving these notifications by toggling the “Push Notifications” feature button in our mobile applications to the “off” position.

Additionally, you can let us know that you do not wish to receive some or all promotional information by emailing us at lienhe@xofacafebistro.com, calling us at (08) 7306 7676, or sending us a letter to the Customer Care Center, Idea Vietnam Food & Beverage Company Limited, 14 Tong Duy Tan, Hang Bong, Hoan Kiem, Hanoi. Please note that if you choose to opt out of receiving promotional information from us, we may still send you non-promotional information, including emails about your account and purchase transactions.

Choices Regarding Information Collection

Location Information – You can adjust the settings of your computer, tablet, smartphone, or other devices to prevent the transmission of your geographic location information by (a) disabling “location services” in the device settings or (b) denying permission for specific websites or mobile applications to access location information by changing the relevant options and permissions in your mobile device.

Use of Cookies – Upon request, we provide options to decline the use of cookies when you first access our website. If you do not decline the use of cookies at this time, continuing to use our website will be considered as your acceptance of their use. If you decline the use of cookies at this time, we will not set any cookies on your device except for the necessary ones required to allow you to access or use our website or mobile applications and other services and features we provide.

Cookies, Web Beacons, and Similar Technologies – You can choose to refuse the use of most cookies, web beacons, local storage HTML5, and similar technologies by adjusting the appropriate settings in your browser. Each browser has slight differences, but the most popular browsers (Internet Explorer, Chrome, Firefox, and Safari) have options or preferences that can be adjusted to notify you when a website wants to set or install a cookie or similar technology. You can then choose to accept or reject the cookies or technologies before they are set or installed, or you can remove or refuse the use or installation of these technologies entirely. If you want to learn the exact steps to modify your browser settings, please use the Help menu in your browser.

Java Scripts – Similar to cookies, web beacons, and similar technologies, most browsers allow you to refuse the use of Java Scripts by adjusting the appropriate browser settings. While each browser is slightly different, most browsers allow you to accept or reject Java Scripts.

Flash Player Technology – We allow Adobe to set and activate special cookies and Java Scripts in conjunction with Adobe Flash Player for delivering video content. While Flash cookies and Java Scripts cannot be removed by changing browser settings, you can limit the websites that can deploy Flash cookies and Java Scripts on your device by accessing the Adobe website.

DAA and NAI Opt-Out Choices – In addition to adjusting the appropriate settings in your browser, many advertising companies that are members of the Digital Advertising Alliance (DAA) or Network Advertising Initiative (NAI) may collect anonymous information for the purpose of targeted advertising. Both organizations provide opt-out choices to refuse participation in targeted advertising from their respective members on corresponding websites.

“Do Not Track” Technology – Some newer web browsers have a “Do Not Track” option that sends a “Do Not Track” header to the websites you visit, indicating that you do not want your activities to be tracked. Currently, we do not respond to the “Do Not Track” signals from browsers.

7. Means and Tools for Accessing and Managing Your Personal Information

According to the Law on Information Technology and the Law on Network Information Security (“the Law”), you have the right to request us to inspect, correct, or update the information we hold about you by sending us an email at lienhe@xofacafebistro.com, calling us at 024 3717 1555, or sending a postal letter to 14 Tong Duy Tan, Hang Bong, Hoan Kiem, Hanoi.

If you wish to modify your information and cancel your account, please contact us as outlined in the “Information of Collecting and Managing Information Unit” section below. We will make efforts to respond promptly to your requests. We will retain your information as long as your account is active or as necessary to provide you with services. If you request us to delete your account, we will cease using your account information and promptly remove that information from our database as per your request unless the law, court, or administrative authority requires us to retain that information for other purposes. You agree to indemnify and hold us harmless from any claims, legal liabilities arising from your request to delete your account.

8. Commitment to Customer Personal Information Security

Xofa Café & Bistro protects your information by employing technical, physical, and managerial security measures to mitigate the risks of loss, misuse, unauthorized access, disclosure, or alteration of your information in accordance with the provisions of the Law. Some of our security measures include firewalls, data encryption, physical access controls, and information management controls. When you transmit sensitive information (such as credit card numbers) through our website or mobile application, we encrypt the transmission using Secure Sockets Layer (SSL) protocol. While we utilize technologies and security procedures to help safeguard your personal information, we cannot guarantee the security of the system or network is 100% secure.

Please do not disclose sensitive information such as account information, passwords, credit/debit/ATM card details to others. In the event of any suspicious transactions, please contact our Customer Care Center, and we will make every effort to assist you in preventing the consequences of such incidents. However, we do not assume any legal responsibility arising from such incidents.

9. Storage and Processing of Your Information

The information you provide to us is stored and processed on servers owned or controlled by Xofa Café & Bistro and other companies in Vietnam, the United States, and/or the United Kingdom. Some other companies or organizations outside the European Economic Area (EEA) may also process your information in these countries, which may not provide the same level of protection as countries within the EEA. The United States is one of the countries that offers weaker protection compared to EEA countries. Regardless of the company or processor of your information and the location where it is processed, we will take steps to protect your information in accordance with applicable data protection laws and this Policy.

10. Use by Minors

We do not intend to provide our websites or online services to anyone under the age of 18. If you are a parent or guardian and believe that we may have collected information about a child, please contact us as outlined in the “Information Collection and Management Unit” section below.

11. Changes to This Privacy Policy

This Policy is effective as of the date recorded at the top of this website. We may update this Policy from time to time. If we make material changes, we will post the updated Policy on this page and change the date at the top of this website. We encourage you to review any updates and changes to this Policy by checking the date of the Policy when you access this website. We will notify you of any changes to this Policy that may materially affect how we use or disclose your personal information prior to the effective date of those changes by posting a notice on this website.

12. Information of the Collecting and Managing Units

We are pleased to receive your questions, opinions, and concerns regarding information security, including safety and security related to our websites, mobile applications, or services. You can contact the Customer Care Center of Xofa Café & Bistro online at https://xofacafebistro.com/, via email at lienhe@xofacafebistro.com, by phone at 024 3717 1555, or by mail at 14 Tống Duy Tân, Hàng Bông, Hoàn Kiếm, Hà Nội.