Introduction

The General Department of Digital Economy under Ministry of Economy and Finance (“we”, “us”, or “our”) has developed the Cambodia E-Invoicing System as an electronic invoicing system that enables enterprise /company /business ("you", or "your") to create, send and receive invoices electronically, optimizing financial workflows. We operate this website https://e-invoice.gov.kh to provide our services, we take your privacy seriously and are committed to providing a safe online experience. We believe in being transparent about our practices, which is why we provide this Privacy & Cookies Policy (“Policy”) to explain how we collect, use and disclose your data. This updated policy will give you more control over your data and more clearly explains how we use it.

Information that we collect

• The contents of personal data obtained by us are your name, e-mail address, mobile phone number, etc. The purposes of processing your personal data are to provide you with feedback on incidents (including, but not limited to, questions, bugs or complaints) that you raise when using our services, to provide you with updates on changes to our services (including bug fixes, new features and revised content) where you have already engaged with us by raising an incident, and to inform you when we launch new services that address the same capability as our previous services where you have engaged with us in the past.
• Our website may link to external sites that are not operated by us. Please be aware that we have no control over the content and practices of these sites and are not responsible nor liable for their respective privacy policies.
• You are free to deny our request for your personal data and are not subject to a legal obligation to provide such data, with the understanding that we may be unable to provide you with some of your desired services.

Why we collect your information

The legal basis for processing of your personal data includes (i) processing is necessary for the performance of a contract to which the data subject is a party, (ii) processing is necessary for compliance with a legal obligation which the data controller is subjected to, and (iii) processing is necessary for the legitimate interests of the data controller unless such interests are overridden by the interests or rights of the data subject. To be more precise, we have the purpose of legitimate interest of notifying you of any troubles (including but not limited to any security incidents).

How long we retain your information

We only retain collected data for as long as necessary to provide you with your requested service or comply with statutory retention period. Data that we store will be protected within commercially acceptable means to prevent loss and theft as well as unauthorized access, disclosure, copying, use or modification.

Sharing your information

In the case where we provide third parties with personal data to the extent permissible by applicable laws. Those third parties could be our partner and/or service provider.

Accessing your information

• You can demand access to information on collected personal data concerning you, and you have the right to receive, in a commonly used and machine-readable format, the information you have provided.
• If you have consented to your personal data being processed by us, you can withdraw that consent at any time. Such withdrawal of consent shall not affect the lawfulness of processing based on the consent before its withdrawal.
• You have the right to object the processing of your personal data if we use it based on a weighing of interest. In that case, we will no longer use your personal data, unless we have an overriding interest in doing so.

Keeping your information secure

• We build security into our service to protect your data from unauthorized access, alteration, disclosure or destruction. We use encryption to keep your data private while in transit. We review our data collection, storage and processing practices, including physical security measures, to prevent unauthorized access to systems
• We use strong access control security measures to restrict access to our employees, contractors and other third parties who need that data in order to process it.

Contact us

Your continued use of our website will be regarded as acceptance of our practices around privacy and personal data policy. If you have any questions about how we handle user data and personal information, feel free to contact us.