Privacy Policy

1. Introduction

Banh Mi Travel ("we," "us," or "our") is committed to protecting your privacy and personal data. This Privacy Policy explains how we collect, use, store, and protect your information when you use our website, book our travel services, or communicate with us.

We process personal data in accordance with applicable data protection laws, including the General Data Protection Regulation (GDPR) for individuals in the European Economic Area. For detailed information about your rights under GDPR, please see our GDPR Information page.

2. Information We Collect

2.1 Information You Provide

When you interact with us, you may provide the following types of personal information:

• Identity Information: Name, date of birth, nationality, passport details
• Contact Information: Email address, phone number, postal address
• Travel Information: Travel preferences, dietary requirements, medical conditions relevant to travel, emergency contacts
• Payment Information: Credit card details, billing address (processed securely through our payment providers)
• Communication Data: Correspondence with us via email, phone, or other channels
• Marketing Preferences: Your choices regarding receiving marketing communications

2.2 Information Collected Automatically

When you visit our website, we automatically collect certain technical information:

• Device Information: Browser type, operating system, device type
• Usage Data: Pages visited, time spent on pages, click patterns
• Location Data: General geographic location based on IP address
• Cookies and Tracking: Information collected through cookies and similar technologies

2.3 Information from Third Parties

We may receive information about you from third parties, including:

• Travel partners and service providers
• Social media platforms (if you connect your account)
• Marketing partners and analytics providers

3. How We Use Your Information

3.1 Service Delivery

We use your personal information to:

• Process and manage your travel bookings
• Communicate with you about your trip
• Provide customer support
• Arrange accommodations, transportation, and activities
• Handle payments and refunds
• Send travel documents and confirmations

3.2 Legal and Safety Purposes

We process your data to:

• Comply with legal obligations (e.g., immigration requirements)
• Ensure your safety during travel
• Prevent fraud and protect our services
• Respond to legal requests from authorities

3.3 Marketing and Improvements

With your consent, we may use your information to:

• Send newsletters and promotional offers
• Personalize your experience on our website
• Conduct surveys and gather feedback
• Improve our services and develop new offerings

4. Legal Basis for Processing

We process your personal data based on the following legal grounds:

• Contract Performance: Processing necessary to fulfill our booking agreement with you
• Legal Obligation: Processing required by law (e.g., tax records, immigration requirements)
• Legitimate Interests: Processing for our legitimate business interests, such as improving services and preventing fraud
• Consent: Processing based on your explicit consent, particularly for marketing communications

5. Data Sharing

5.1 Service Providers

We share your information with trusted third parties who help us deliver our services:

• Accommodation Providers: Hotels, resorts, and guesthouses in Vietnam
• Transport Operators: Airlines, car rental companies, boat operators
• Tour Partners: Local guides, activity providers, restaurants
• Technology Partners: Website hosting, payment processing, email services
• Insurance Providers: Travel insurance companies

5.2 Government and Authorities

We may share your data with government authorities when required by law, including immigration services, customs authorities, and law enforcement agencies.

5.3 International Transfers

Your data may be transferred to and processed in countries outside your home country, including Vietnam and other countries in Southeast Asia. When we transfer data internationally, we ensure appropriate safeguards are in place to protect your information.

6. Data Retention

We retain your personal information for as long as necessary to:

• Fulfill the purposes for which it was collected
• Comply with legal obligations (typically 7 years for financial records)
• Resolve disputes and enforce agreements
• Support our business operations

Booking records are typically retained for 7 years after your trip. Marketing data is retained until you withdraw consent. Website analytics data is retained for 26 months.

7. Data Security

We implement appropriate technical and organizational measures to protect your personal data:

• Encryption of data in transit (SSL/TLS)
• Secure data storage with access controls
• Regular security assessments and updates
• Staff training on data protection
• Incident response procedures

While we take all reasonable precautions, no method of transmission over the Internet is 100% secure. We cannot guarantee absolute security of your data.

8. Cookies and Tracking

8.1 Types of Cookies We Use

• Essential Cookies: Required for website functionality
• Analytics Cookies: Help us understand how visitors use our site
• Marketing Cookies: Used to deliver relevant advertisements
• Preference Cookies: Remember your settings and choices

8.2 Managing Cookies

You can control cookies through your browser settings. Note that disabling certain cookies may affect website functionality. You can also use our cookie consent tool to manage your preferences.

9. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

• Access: Request a copy of your personal data
• Rectification: Request correction of inaccurate data
• Erasure: Request deletion of your data (subject to legal requirements)
• Restriction: Request limited processing of your data
• Portability: Request transfer of your data to another service
• Objection: Object to processing based on legitimate interests
• Withdraw Consent: Withdraw consent for marketing communications

To exercise these rights, please contact us using the details below. We will respond to your request within 30 days.

10. Children's Privacy

Our services are not directed at children under 16. We do not knowingly collect personal data from children without parental consent. If you believe we have collected data from a child, please contact us immediately.

11. Third-Party Links

Our website may contain links to third-party websites. We are not responsible for the privacy practices of these external sites. We encourage you to review their privacy policies before providing any personal information.

12. Changes to This Policy

We may update this Privacy Policy periodically. We will notify you of significant changes by posting the new policy on our website and updating the "Last updated" date. Continued use of our services after changes constitutes acceptance of the updated policy.

13. Contact Us

If you have questions about this Privacy Policy or wish to exercise your rights, please contact us:

• Email: privacy@go2vietnam.com
• Phone: +84 123 456 789
• Address: Ho Chi Minh City, Vietnam

For data protection inquiries from the European Union, you may also contact your local data protection authority.