Privacy Policy

Last updated: 4 October 2026

In short: we collect what you type into our enquiry form so we can reply to you. We do not use advertising trackers and we never sell personal data. Our social media tool only connects to Goo Farm's own company accounts and does not read data about other people. You can ask us to see, correct or delete your data at any time by emailing antony@goofarm.com.vn.

1. Who we are

The website goofarm.com.vn and the tool Goo Farm Web are operated by GOO FARM TEA VIETNAM COMPANY LIMITED (Goo Farm Tea Vietnam Co. Ltd., “Goo Farm”, “we”, “us”). We decide how and why the personal data described on this page is used.

Registered address: No. 325B Pho Vong, Tuong Mai Ward, Hanoi City, Vietnam
Office: 15 Le Van Thiem, Thanh Xuan, Hanoi, Vietnam
Email: antony@goofarm.com.vn
Phone / WhatsApp: +84823751769

2. What this policy covers

The website goofarm.com.vn and all of its language versions.
Goo Farm Web, our own publishing tool, which connects to Goo Farm's company accounts on Facebook, Instagram, Telegram and VK. It is the app registered with Meta as “Goo Farm Web” (App ID 985432417911068). This policy also applies to any other platform we connect in the future, such as LinkedIn, X, YouTube or TikTok. We will update this page when we add one.
Messages you send us directly by email, phone or chat apps.

3. Information we collect

3.1 Enquiry form

When you send the form on our Contact us page, we receive:

the details you type: your name, email address, phone or WhatsApp number, country, company and message;
the product or page you sent the form from;
for spam protection: the country of your internet connection (looked up by our hosting provider from your IP address), your browser's user-agent text, and a pseudonymous code calculated from your IP address and the date. We do not store your IP address itself. These details let us limit each sender to 3 messages per 10 minutes and block automated spam.

We store the enquiry in our database and send a copy to our sales inbox by email so we can answer you.

3.2 When you contact us directly

If you email, call or message us on WhatsApp, WeChat, Telegram, Viber or our social media pages, we receive your message and the contact details the service shows us. We use them to reply to you and to do business with you. Those services also handle your data under their own privacy policies.

3.3 Technical data

Our hosting provider, Cloudflare, processes the IP address, browser type and requested page of every visit. It uses them to deliver the website, protect it against attacks and keep short-lived technical logs. We use Cloudflare Web Analytics to count visits in aggregate. It does not use cookies and does not build profiles of individual visitors.

3.4 Cookies and browser storage

We do not use advertising or tracking cookies.
ng: a first-party cookie that can remember the language you chose, for up to 1 year.
Session storage: on translated pages, your browser keeps a copy of our translated website text for the current tab so that pages load faster. It contains no personal data.
The admin area for Goo Farm staff uses its own sign-in cookies. They are never set for visitors.

3.5 Content from other websites

Contact page: a Google Maps map of our office loads when you scroll to it. Google may collect data under Google's Privacy Policy.
Home page: the video thumbnail is loaded from YouTube's image server. The video player loads from youtube-nocookie.com, YouTube's privacy-enhanced mode, only when you click play.
Links to WhatsApp, WeChat, Telegram, Viber, Facebook, Instagram, LinkedIn, X and Alibaba.com open those services only when you click them.

4. Social media publishing (Goo Farm Web)

Who uses it. Only Goo Farm staff, signed in to our admin area with a password and two-step verification. It is not offered to the public.

What it does. It publishes posts written by our staff, with text, links, images and videos, to Goo Farm's own Facebook Page, Instagram professional account, Telegram channel and VK pages.

Data we receive when a staff member connects one of our accounts:

Facebook and Instagram (Meta): the Page ID and name, a Page access token, and the ID and username of the Instagram account linked to the Page. Permissions requested: pages_show_list, pages_manage_posts, pages_read_engagement, business_management, instagram_basic and instagram_content_publish. The personal Facebook sign-in token used while connecting is not stored.
Telegram: our bot token and the channel's ID, title and username.
VK: an access token and refresh token, the connecting staff member's VK user ID and name, and the communities they manage (ID, name, short name and type).

What we read afterwards: whether the connection still works, the processing status and link of the posts we published, and our Instagram account's 24-hour publishing limit.

What we never do: read comments, messages, followers, likes or insights, collect any information about other people, or use platform data for advertising.

Storage and retention. Access tokens are stored encrypted (AES-GCM) in our database. They are kept until a staff member disconnects the account in our admin area, which deletes the token and account details from our database. Videos uploaded for posting are stored temporarily and deleted automatically 1 hour after every post is published, or 7 days after a failed post. We keep a record of our own published posts: the text, the links and the staff member who scheduled them.

5. How we use personal data

to answer enquiries and send quotations and samples;
to agree and carry out orders and contracts with you;
to keep business and accounting records;
to protect the website against spam and abuse;
to publish Goo Farm's own content on social media.

We use your data because you asked us to reply or to do business with us, or because we have a legitimate interest in running and protecting our website. We do not sell personal data, and we do not make automated decisions about you.

Service providers that work for us: Cloudflare (hosting, database, file storage, security, analytics and logs) and our email delivery provider, which sends enquiry notifications to our inbox.
Social media platforms: the content we publish goes to the platform where it appears.
Public authorities, only when the law requires it.

Our providers operate worldwide. Our database is stored mainly in Asia, with copies in other regions so that pages load quickly for visitors in other countries.

7. How long we keep it

Enquiries: for as long as we need them to deal with your enquiry and any business that follows, and to keep business records. You can ask us to delete them earlier (see section 9).
Backups: we keep copies of our database only to restore the website after a failure. Daily copies are kept for 60 days and one copy per month is kept for longer, so deleted data can remain in those copies. We do not use backups for any other purpose.
Social media connection data: until the account is disconnected (see section 4).
Technical logs: for a short period set by Cloudflare.

8. Your rights

You can ask us to give you a copy of your personal data, correct it, delete it, or stop or limit using it, and you can withdraw any consent you gave. Email antony@goofarm.com.vn. We may ask you to confirm your identity, and we reply as quickly as we can, within the time the law requires. You can also complain to the data protection authority in your country or in Vietnam.

9. How to delete your data

Website enquiries: email antony@goofarm.com.vn with the subject “Delete my data” and the email address you used in the form. We delete your enquiry from our database and confirm by email.
Goo Farm Web (Facebook, Instagram, Telegram, VK): the app connects only to Goo Farm's own accounts and holds no data about other Facebook, Instagram, Telegram or VK users. If you think we hold data about you, email us as above and we will delete it.
You can also remove the app's access on the platform itself. On Facebook, go to Settings & privacy → Settings → Business integrations and remove “Goo Farm Web”. On Telegram, remove our bot from your channel. On VK, remove the app in your account's settings for connected apps and services.

10. Children

Our website and services are for businesses and are not directed at children under 16. We do not knowingly collect personal data from children.

11. Security

The website uses HTTPS encryption. Social media access tokens are encrypted in our database. Only Goo Farm staff can open the admin area, using a password and two-step verification.

12. Changes to this policy

When we change this policy, we update the “Last updated” date at the top of this page.

13. Contact

GOO FARM TEA VIETNAM COMPANY LIMITED, No. 325B Pho Vong, Tuong Mai Ward, Hanoi City, Vietnam. Email: antony@goofarm.com.vn. Phone / WhatsApp: +84823751769. See also our Terms of Service.