PRIVACY POLICY

HA GIANG VISION SERVICE & TOURIMS CO., LTD (Công ty TNHH Dịch vụ & Du lịch Tầm Nhìn Hà Giang)
International Tour Operator Licence No. 31-097/2023/CDLQGVN-GP-LHQT · Tax Code 0202192921
Registered office: 135 Tung Dinh Street, Cat Hai Special Zone, Hai Phong City, Vietnam
Contact for data protection matters: hagiangvision@gmail.com | (+84) 818 340 222

Version 2.0 — Effective from 26 August 2026. This version replaces the version dated March 2026.

HA GIANG VISION SERVICE & TOURIMS CO., LTD (''we'', ''us'') is the controller of the personal data described below. This Policy explains what we collect, why, how long we keep it, and what rights you have. It forms part of our Terms and Conditions.

1. The Personal Data We Collect

When you book a tour, contact us, or use our website, we may collect:

Identity data — your full name and the full names of the people travelling with you.
Contact data — email address, telephone number, WhatsApp number, Messenger ID, country of residence.
Booking data — tour selected, departure date, number of travellers, accommodation and transfer choices, dietary requirements, and any message you send us.
Payment data — the amount, currency, date and reference of your payment, and the payment method used. We do not receive or store your full card number, expiry date or CVV; these are handled directly by our payment provider, OnePay.
Health and accessibility data — only where you choose to tell us about a medical condition, allergy or reduced mobility so that we can arrange the tour safely.
Contract evidence — the date, time and IP address from which you accepted our Terms and Conditions, and the version of those Terms in force at that moment.
Technical data — IP address, browser type and pages visited, collected through our website and analytics tools.

2. Why We Use It, and On What Basis

To conclude and perform your travel contract — confirming bookings, arranging accommodation, transport, guides and entrance tickets, issuing your voucher and invoice, and supporting you during the tour. Basis: performance of the contract with you.
To arrange insurance for you for the duration of the tour. Basis: performance of the contract and our legal obligation under Article 37 of the Law on Tourism 2017.
To meet legal obligations — guest registration with the local authorities, accounting and tax records. Basis: legal obligation.
To answer your enquiries by email, Messenger or WhatsApp. Basis: performance of the contract or our legitimate interest in responding to you.
To send marketing messages about our tours and offers. Basis: your consent, given separately. You can withdraw it at any time.
To improve our services and website. Basis: our legitimate interest.

3. Who We Share It With

We do not sell or rent your personal data. We share it only with those who need it to deliver your tour or to run our business:

Accommodation providers, transport and bus operators, cruise operators and local guides named in your itinerary.
VietinBank Insurance (VBI), our insurer, in order to issue the travel insurance certificate in your name for your tour. We provide your full name, date of birth, passport number and the tour dates.
Our payment provider, OnePay, to process your payment.
Local authorities, where we are legally required to register guests staying at our properties.
Meta (Facebook and Messenger) and WhatsApp, where you choose to contact us through those channels. Those platforms process your data under their own privacy policies.
Our website and IT service providers, under confidentiality obligations.

4. International Transfers

Your data is stored in Vietnam. Where you contact us through Meta or WhatsApp, or where our website or IT providers host data outside Vietnam, your data may be transferred abroad. We take reasonable steps to ensure it remains protected.

5. How Long We Keep It

Booking and contract records, including evidence of your acceptance of our Terms: 10 years from the end of the tour, in line with accounting and limitation requirements.
Enquiries that did not lead to a booking: 24 months.
Marketing contact details: until you withdraw your consent.
Health and accessibility information: deleted within 3 months of the end of your tour.

6. How We Protect It

Your data is stored on secured systems and is accessible only to authorised Ha Giang Vision staff who need it to do their work. Access is controlled by individual accounts. We do not hold your card details.

7. Your Rights

You may ask us to: confirm what data we hold about you and give you a copy; correct data that is inaccurate; delete your data; restrict or object to how we use it; withdraw a consent you have given; or provide your data in a portable form.

To exercise any of these rights, write to hagiangvision@gmail.com. We will reply within 7 working days. We may need to verify your identity first. Some data must be retained where the law requires it — for example accounting records — and we will tell you if that applies.

8. Cookies and Analytics

Our website uses cookies necessary for the site and the shopping cart to work, and analytics cookies that help us understand how the site is used. You can block or delete cookies in your browser settings; blocking necessary cookies may prevent the booking process from working.

9. Children

Our services are not sold directly to children. Where a child travels on a tour, their data is provided by the adult making the booking, who confirms they are authorised to provide it.

10. Changes to This Policy

We may update this Policy. Any updated version is published on this page with a new version number and effective date.

11. Contact and Complaints

HA GIANG VISION SERVICE & TOURIMS CO., LTD
Email: hagiangvision@gmail.com
Phone: (+84) 818 340 222
Website: https://hagiangvision.com

If you are not satisfied with how we have handled your data, you may complain to us at the address above, or to the competent Vietnamese authority for personal data protection.