Privacy Policy

KAMON, at Vincom Center, Ben Thanh, Ho Chi Minh, operates Kamon. Privacy questions and the requests described in section 6 go to support@kamon.vn.

When you book, the shop decides what it does with your details and we process them on its behalf. For the platform itself — your account, our billing — we decide.

If you book an appointment: your name, your phone number or email address, which shop and which service, the date and time, any note you added, and whether the appointment happened. If you booked over Zalo or LINE, the identifier that channel gives us so we can send your reminder.

If you run a shop:your sign-in details, your shop’s name, address, coordinates, photos, service list and opening hours, and billing records.

If you work at a shop that uses the timeclock: your name, your working hours, your pay rate if your employer entered one, and a photograph taken at each clock-in and clock-out.

We do not use face recognition.A clock-in photograph is a picture a human looks at, nothing more. We never convert it into a face template or match it against anything, because that would make it biometric data — which Vietnam’s PDPL and Thailand’s PDPA both treat as sensitive, and which we have no need for.

Location.If you tap “Shops near me”, your coordinates are sent to find nearby shops and are not stored. Under the PDPL precise location is personal data, and there is no reason for us to keep it once the search has run.

To take and confirm your booking; to send you the confirmation and the reminder; to let a shop run its diary, its staff hours and its payroll; to keep the service working and secure; and to meet our legal obligations.

For customers, the basis is your consent, recorded when you book, plus the performance of the booking itself. We record consent per purpose— agreeing to our terms is separate from agreeing to reminders, which is separate again from agreeing to your data being held outside Vietnam. Marketing is never included by default.

Kamon runs on Supabase and Vercel, both in the Singapore region — the closest either provider offers to Ho Chi Minh City and Bangkok.

For a customer in Vietnam this is a cross-border transferof personal data. That is why it is asked as its own consent when you book, rather than being bundled into the terms. Vietnam’s Personal Data Protection Law does not permit bundling it, and we think you should be told plainly rather than in a clause.

The shop you booked with, and nobody else’s shop — every table is separated at the database level, so one shop cannot read another’s customers.

Our infrastructure providers: Supabase (database, sign-in, file storage) and Vercel (running the site). Zalo, LINE, and our email provider Resend, to deliver the messages you agreed to receive. Each sees only what it needs to do its job.

We do not sell your personal data, and we never have.

A copy of what we hold about you. A correction. Deletion. Withdrawal of a consent you previously gave. To object to a particular use.

Withdrawing consent does not erase the record that you once gave it. Our consent log is append-only by design: withdrawing adds a row saying so rather than editing the original, because a record that can be rewritten is not evidence — and being able to show consent was properly obtained protects you as much as us.

Write to privacy@kamon.vn. If the request is about a booking, the shop may also need to act, and we will tell you so.

Booking records for as long as the shop’s account is open, and afterwards only where we are required to keep them. Consent records for as long as we may need to demonstrate consent was given. Clock-in photographs for as long as your employer’s shop keeps them, and they are held in private storage that is reachable only through a link that expires.

Kamon is not for children to use on their own. A parent or guardian can book on behalf of a child.

The date at the top is the version in force. Where a change affects what you previously agreed to, we ask again rather than assuming.