Privacy Policy

1. Personal Data We Collect

We collect data when you book, use our services, subscribe to updates, or contact us, including:

• Identity data: full name, date of birth, ID card/passport number (required at check-in under guest-registration rules).
• Contact data: phone number, email, address.
• Transaction data: booking details, stay history, payment/invoice information.
• Technical data: IP address, device type, cookies collected while browsing our website (see our Cookie Policy).

2. Purpose & Legal Basis

We process data to: (i) perform your reservation/service contract; (ii) comply with legal obligations (guest registration, invoicing, tax); and (iii) with your consent, for marketing, surveys, or personalization — which you may withdraw at any time.

3. Sharing With Third Parties

We only share the data necessary with: partner booking platforms (Booking.com, Traveloka, etc.) when you book through those channels; payment processors/banks; and government authorities where required by law (e.g. guest registration). We do not sell or trade guest personal data for third-party commercial purposes.

Some partner platforms host servers outside Vietnam; where this occurs, the transfer is limited to what is necessary to complete the transaction you requested and complies with applicable cross-border data transfer rules.

4. Retention

Data is retained only as long as necessary for the purpose collected and for statutory accounting/guest-registration retention periods, after which it is deleted or anonymized.

5. Your Rights as a Data Subject

Under the Law on Personal Data Protection, you have the right to:

• Be informed about how your personal data is processed.
• Consent or decline to consent to data processing.
• Withdraw consent previously given, at any time.
• Access and request a copy of the personal data we hold about you.
• Request correction of inaccurate or incomplete data.
• Request erasure of data no longer necessary for the purpose collected.
• Request restriction of processing in certain circumstances.
• Object to processing for direct marketing purposes.
• Lodge a complaint, bring a claim, and seek compensation if your data rights are violated.

6. Security Measures

We apply appropriate technical and organizational measures — access controls, encryption of sensitive data, staff training — to protect personal data from unauthorized access, use, or disclosure. In the event of a data breach, we will notify the competent authority and affected data subjects within the legally required timeframe.

7. Exercising Your Rights

To exercise any of the rights above, please email the address below with information to verify your identity. We respond within 10 business days of receiving a valid request.