Last updated: July 10, 2026
This GDPR Policy explains how Plunexa, operated by GTSSolution Co., Ltd, processes personal data of individuals in the European Economic Area (EEA), the United Kingdom, and Switzerland in accordance with the General Data Protection Regulation (GDPR). It supplements our Privacy Policy.
1. Data Controller
GTSSolution Co., Ltd, Ho Chi Minh City, Vietnam Email: privacy@plunexa.com
2. What Personal Data We Process
- Account data: name, email address, username, hashed password
- Transaction data: billing name and address, order history, invoices (payment card details are processed by our payment providers and never stored by us)
- Usage data: IP address, device and browser information, pages visited, downloads
- Communications: support tickets, emails, and messages you send us
3. Legal Bases for Processing
We process your personal data only where a legal basis applies:
- Performance of a contract — creating your account, processing orders, delivering digital products, providing support
- Legitimate interests — securing our platform, preventing fraud, improving our services, defending legal claims
- Consent — marketing emails and non-essential cookies (you can withdraw consent at any time)
- Legal obligation — tax, accounting, and regulatory record-keeping
4. Your Rights Under GDPR
You have the right to:
- Access — request a copy of the personal data we hold about you
- Rectification — correct inaccurate or incomplete data
- Erasure — request deletion of your data ("right to be forgotten"), subject to legal retention requirements
- Restriction — limit how we process your data in certain circumstances
- Data portability — receive your data in a structured, machine-readable format
- Object — object to processing based on legitimate interests or to direct marketing at any time
- Withdraw consent — where processing is based on consent, without affecting prior processing
To exercise any right, email privacy@plunexa.com. We respond within 30 days. We may need to verify your identity before fulfilling a request.
5. International Data Transfers
We are based in Vietnam and use service providers (hosting, payments, email) that may process data outside the EEA. Where required, we rely on appropriate safeguards such as Standard Contractual Clauses (SCCs) approved by the European Commission.
6. Data Retention
We keep personal data only as long as necessary for the purposes described above: account data while your account is active; transaction records for the period required by tax and accounting law; support communications for up to [X] years after resolution.
7. Complaints
If you believe we have processed your data unlawfully, you have the right to lodge a complaint with your local data protection supervisory authority. We would appreciate the chance to address your concerns first — contact privacy@plunexa.com.
