PRIVACY POLICY

Last updated: 15 December 2025

1. Introduction

At dribook.com ("dribook", "we", "us"), your privacy and the security of your information are a first-order priority. We understand that when you use dribook to keep a Car Logbook or look up vehicle information, you are placing trust in us.

This Privacy Policy describes how we collect, use, store and protect your personal data in accordance with the law of Vietnam, including Decree 13/2023/ND-CP on the Protection of Personal Data. By using the Service, you agree to the practices described in this Policy.

Governing language: this English text is a translation provided for convenience. The Vietnamese version of this Policy is the authoritative one, and in the event of any discrepancy between the two, the Vietnamese version prevails.

2. Information we collect

We collect information in order to provide and improve the Service for all users. The categories are:

2.1. Information you provide directly

1. Account information: display name, email address, phone number and password (stored encrypted) when you register.
2. Car Logbook information: vehicle details (registration plate, VIN, make, model year), service history, photographs of the vehicle, and any personal notes you enter.
3. Transaction information: if you use a paid service we may collect contact details and transaction records. Note that we do NOT store credit-card or bank details; those are handled by a secure payment-gateway partner.
4. Communications: posts, comments and messages exchanged with our support team.

2.2. Information collected automatically

1. Device and access information: IP address, browser type, operating system, time of access, and the pages you viewed.
2. Cookies and tracking: we use cookies to keep you signed in, remember your language setting, and analyse usage so we can personalise the experience. See the Cookies section below.

3. How we use information

Your data is used for the following lawful purposes:

1. Providing the Service: authenticating your account and running the Car Logbook and lookup tools.
2. Improving the experience: analysing data to understand how people use the site, and improving the interface and features accordingly.
3. Communication: sending important account notices, policy updates, or the newsletter if you subscribed.
4. Safety and security: detecting and preventing fraud and abuse, such as spam posts and impersonation accounts.
5. Advertising (limited): showing advertising relevant to your interest in cars. We do not sell personally identifying information to third parties.

4. Sharing information

We commit that we do NOT sell your personal data. We share information only in these limited circumstances:

1. With your consent: when you choose to make a Car Logbook or an article public, that content is displayed publicly on the site.
2. Service providers: we may share data with trusted partners — cloud hosting, email delivery, payment gateways — in order to operate the system. They may process the data only on dribook’s instructions and under strict confidentiality.
3. Legal requirements: we may disclose information where the law requires it, or to protect the rights, property and safety of dribook and its users.

5. Data security

We apply appropriate technical and organisational measures to protect your data:

1. Encryption: data in transit, such as passwords and sign-in credentials, is encrypted using SSL/TLS.
2. Access control: only authorised staff may access user data, and only to carry out support duties.
3. Storage: data is held on the secure servers of reputable partners (such as Google Cloud/Firebase) meeting international security standards.

Please note, however, that no method of transmission over the Internet is completely secure.

6. Your rights as a data subject

Under Decree 13/2023/ND-CP you have the following rights over your data:

1. Access and correction: you can view and correct your personal and vehicle information in Account Settings at any time.
2. Erasure: you may request deletion of your account and all associated data. Please email [email protected].
3. Withdrawal of consent: you may unsubscribe from marketing email or disable cookies.

7. Cookie policy

dribook uses cookies to:

1. keep you signed in;
2. remember your display preferences;
3. analyse traffic (Google Analytics).

You can configure your browser to refuse cookies, but doing so may affect some features of the site.

8. Changes to this Policy

We may update this Privacy Policy from time to time. Any change will be announced on the home page or by email. Continuing to use the Service after an update means you accept the change.

9. Contact

If you have any question or complaint about this Privacy Policy or how we handle data, please contact our data protection team:

Email: [email protected]

Postal address: (office or registered business address, once available)