Privacy Policy

Last updated: September 16, 2026

TC Handcraft (“TC Handcraft”, “we”, “us”, or “our”) respects your privacy and is committed to protecting personal data in accordance with applicable data protection and privacy laws.

This Privacy Policy explains how we collect, use, disclose, retain and protect personal data when you visit https://tchandcraft.com, contact us, submit an inquiry, or use our AI advisor.

This Privacy Policy is intended to provide information relevant to users in Vietnam and, where applicable, users in other jurisdictions including the European Economic Area (EEA), the United Kingdom (UK), and the United States.

1. Who We Are

TC Handcraft operates tchandcraft.com and provides custom-crafted trophies, commemorative plaques, badges and related design and manufacturing services.

For privacy-related questions or requests, please contact:

• Email: [email protected]
• Hotline: 0966 321 629
• Zalo: https://zalo.me/0966321629

Where applicable under local law, TC Handcraft acts as the controller/business responsible for personal data collected directly through this website.

2. Personal Data We Collect

Depending on how you use the website, we may collect the following categories of personal data:

Information you provide directly. When you submit a contact or consultation request, we may collect:

• Name;
• Email address;
• Telephone number;
• Company or organization information, if provided;
• Inquiry type;
• Product or service requirements;
• Quantity or estimated order information;
• Needed-by date, if provided;
• Any other information contained in your message.

Our contact form does not accept file uploads. If you'd like to share a logo or design file, our team will direct you to send it via Zalo — a channel operated by Zalo, not stored on our own servers. Please do not submit passwords, payment-card numbers, government identification numbers, health information, or other sensitive personal information through the contact form.

AI Advisor information. When you use our AI advisor, we process:

• The messages you send, for the duration needed to generate a reply;
• A short list of your published-catalogue items used to ground the advisor's product suggestions (no personal data);
• Your IP address, retained for a maximum of 65 seconds solely to enforce a rate limit (20 messages per minute) and prevent abuse.

Your chat messages are not stored or logged. They are used only to generate an immediate reply and are then discarded — we keep no transcript or history of advisor conversations.

Please do not provide confidential, highly sensitive, financial, authentication, health or other information that you would not want processed by an AI service. The AI advisor is intended to provide general product and service guidance. It does not provide legal, financial, medical or other professional advice.

3. Information Collected Automatically

When you visit our website, certain technical information may be collected automatically, depending on your browser settings and your consent where required by law. This may include:

• IP address or an abbreviated/approximate location;
• Browser type;
• Device type;
• Operating system;
• Pages visited;
• Referring pages;
• Date and time of access;
• Approximate geographic location;
• Website usage information.

We use this information primarily for security, website operation, analytics and service improvement.

4. Google Analytics

We use Google Analytics (GA4) to understand how visitors use our website and to improve its content and functionality.

Google Analytics may process information such as:

• Pages viewed;
• Approximate geographic location;
• Device and browser information;
• Website interaction information;
• Technical identifiers and online activity information.

Google Analytics does not load automatically. On your first visit, a cookie banner asks for your consent before any analytics script runs. Google Analytics is only activated after you click “Accept”; if you decline, no analytics cookie or script is loaded. IP addresses are sent to Google Analytics with IP anonymization enabled. You may also control certain analytics-related settings through your browser or Google's available privacy controls.

Google may process data outside your country. International transfers are subject to the safeguards required by applicable law.

5. Cookies and Similar Technologies

Our website uses the following cookies:

• tc_locale (essential) — remembers your language preference between Vietnamese and English. Stored for up to 1 year. Contains no personal information.
• tc_consent (essential) — records whether you accepted or declined analytics cookies, so we don't ask again on every visit. Stored for up to 180 days.
• Google Analytics cookies (non-essential) — set only after you accept the cookie banner described in Section 4.

You may withdraw or change your cookie preferences at any time by clearing your browser's cookies for this site, which will show the consent banner again on your next visit.

6. Why We Use Personal Data

• To respond to inquiries and consultation requests;
• To prepare quotations and proposals;
• To communicate about products and services;
• To provide customer and after-sales support;
• To process design or customization requests;
• To provide and operate the AI advisor;
• To improve website functionality, content and user experience;
• To maintain website security and prevent abuse;
• To comply with applicable legal obligations;
• To establish, exercise or defend legal claims where necessary.

We do not sell or rent personal data for advertising purposes.

7. Legal Bases for Processing

Where laws such as the GDPR or UK GDPR apply, we process personal data using one or more lawful bases depending on the circumstances, including:

• Consent — where we ask you to provide consent for a specific processing activity (e.g. Google Analytics);
• Contract or steps prior to a contract — where processing is necessary to respond to a request, quotation or service arrangement;
• Legitimate interests — where processing is necessary for legitimate business purposes and is balanced against your privacy rights;
• Legal obligations — where processing is necessary to comply with applicable law.

Where processing is based on consent, you may withdraw your consent at any time. Withdrawal does not affect processing that occurred before withdrawal.

8. How We Share Personal Data

We do not sell or rent your personal data.

We may share or make personal data available to service providers that process data on our behalf, where necessary to operate our website and services:

• Google — website analytics (Google Analytics, only after consent).
• Cloudflare — website hosting, security, networking, our KV data store, and the AI infrastructure that powers our advisor (Cloudflare Workers AI, running an open-weight Llama 3.1 model). No separate external AI company receives your messages — processing happens within the same Cloudflare infrastructure already used to host this website.
• Other technology, communications or service providers where necessary to provide requested services.

Service providers may process personal data in countries outside Vietnam, the EEA or the UK. We require appropriate contractual, technical and organizational safeguards where required by applicable law.

9. International Data Transfers

Because we use global technology and service providers, personal data may be processed or transferred internationally. Where applicable privacy laws restrict international transfers, we will use an appropriate legal mechanism or safeguard, such as an adequacy decision, Standard Contractual Clauses, UK-approved safeguards, or another mechanism permitted by applicable law.

You may contact us using the details in Section 20 to request additional information about applicable transfer safeguards.

10. Data Retention

• Contact form submissions are stored in our database until manually deleted by our team — there is no automatic expiry. You may request deletion at any time (Section 11).
• AI advisor chat messages are not stored at all; only your IP address is retained, for a maximum of 65 seconds, solely for rate-limiting.
• Analytics data is retained by Google Analytics according to Google's own retention settings.

When personal data is no longer required, we will delete, anonymize or otherwise securely dispose of it where reasonably practicable and as required by applicable law.

11. Your Privacy Rights

Depending on your location and the law applicable to you, you may have rights including:

• The right to know whether we process your personal data;
• The right to access your personal data;
• The right to correct inaccurate or incomplete information;
• The right to request deletion;
• The right to request restriction of processing;
• The right to object to certain processing;
• The right to data portability, where applicable;
• The right to withdraw consent where processing is based on consent;
• The right to object to certain direct marketing activities;
• The right to lodge a complaint with a competent data protection authority.

To exercise your rights, contact [email protected]. We may need to verify your identity before completing certain requests in order to protect your personal data from unauthorized disclosure.

12. Rights of California Residents

If the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA), applies to our processing of your personal information, California residents may have additional rights, including rights to:

• Know/access certain personal information;
• Correct inaccurate personal information;
• Delete personal information, subject to legal exceptions;
• Opt out of the sale or sharing of personal information where applicable;
• Limit certain uses or disclosures of sensitive personal information where applicable;
• Non-discrimination for exercising applicable privacy rights.

TC Handcraft does not sell personal information for monetary consideration. If our processing is subject to CCPA/CPRA requirements concerning “sale” or “sharing”, we will provide the legally required disclosures and opt-out mechanisms. Requests may be submitted to [email protected].

13. Children's Privacy

Our website is not directed specifically to children. We do not knowingly request or intentionally collect personal data from children in circumstances where such collection is prohibited by applicable law. Where applicable law requires parental or guardian consent for the processing of a child's personal data, we will comply with the applicable requirements.

If you believe that a child has provided personal data to us unlawfully, please contact us at [email protected].

14. Data Security

We use reasonable technical and organizational measures designed to protect personal data against unauthorized access, alteration, disclosure, loss or destruction. Website communications are protected using HTTPS/TLS. However, no internet transmission or electronic storage system can be guaranteed to be completely secure.

In the event of a personal data breach, we will take appropriate steps required by applicable law, which may include investigation, mitigation, notification and cooperation with competent authorities where required.

15. AI Processing and Automated Responses

Our website provides an AI advisor that generates responses based on information submitted by users. The AI advisor is powered by Cloudflare Workers AI, running the open-weight model Llama 3.1 (8B), developed by Meta and hosted by Cloudflare — the same infrastructure provider we use to host this website. Your messages are processed to generate a reply and are not stored, logged, or used to train any model.

AI-generated responses may contain errors or may not reflect the most current information. Users should independently verify important information before relying on it. The AI advisor is not intended to make legally binding decisions about individuals and is not intended to make decisions concerning employment, credit, insurance, healthcare or other similarly significant matters.

16. Third-Party Websites and Services

Our website may contain links to third-party services such as Zalo, Facebook, Instagram, LinkedIn, Google or other websites. Those third parties operate under their own privacy policies and terms. We are not responsible for the privacy practices of third-party websites or services that we do not control. We recommend reviewing the privacy policy of any third-party service before submitting personal information to it — this applies in particular if you choose to send a logo or design file via Zalo, as described in Section 2.

17. Your Choices

You may choose not to provide certain personal information. However, if information is necessary to respond to an inquiry or provide a requested service, we may be unable to provide that service without the relevant information.

You may also disable cookies through your browser settings, or decline the analytics cookie banner described in Section 4. Some website functionality may be affected as a result.

18. Complaints and Regulatory Rights

If you believe that our processing of your personal data violates applicable privacy law, please contact us first so that we can investigate and address your concern. You may also have the right to lodge a complaint with the competent data protection or privacy regulator in your country or region.

19. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to our services, technology, legal requirements or data-processing practices. The latest version will be published on this page with the applicable “Last updated” date.

20. Contact Us

For questions, privacy requests or complaints concerning this Privacy Policy, please contact:

• TC Handcraft
• Email: [email protected]
• Phone: 0966 321 629
• Zalo: https://zalo.me/0966321629

We will handle privacy requests in accordance with applicable law.