[TL;DR version] Our Privacy Promise to You

At Vietnam Premium Voyages, we believe that true luxury is impossible without absolute discretion. While our formal [Privacy Policy & Data Protection Agreement] provides the legal framework for our data protection, here is our personal commitment to you:

• Curated, Not Shared: We collect only the information necessary to craft your bespoke itinerary—such as your travel preferences, dietary needs, and identity details for seamless premium transitions. Your data is never sold; it is only shared with our trusted inner circle of boutique hotels and private charters and relevant tourism partners to execute your journey.

• Secure & Discreet: From encrypted payments to secure CRM management, your personal and financial information is guarded by international security standards (GDPR & Vietnam’s Decree 13).

• Media & Memories: We love capturing the beauty of your voyage. However, your privacy is paramount. We only share media featuring our guests with your kind permission. If you prefer a completely private, “off-the-grid” experience, simply let your concierge know, and we will ensure no cameras are present.

• Always in Control: You retain full ownership of your data. At any time, you may request a copy of your information or ask us to remove it from our records.

Your Trust is Our Greatest Asset.

For any questions regarding your privacy, please contact your dedicated concierge or reach us directly at +84 911 52 8682

PRIVACY POLICY & DATA PROTECTION AGREEMENT

Document Ref: VPV-PP-2026

Last Updated: May 5, 2026

This Privacy Policy (the “Policy”) establishes the legal basis and protocols under which Vietnam Premium Voyages (VPV) (“the Company,” “we,” or “us”) collects, processes, and safeguards Personal Data. This Policy is designed to comply with the General Data Protection Regulation (GDPR) and Vietnam’s Decree No. 13/2023/ND-CP on Personal Data Protection.

ARTICLE I: DEFINITIONS

1.1 Personal Data: Any information relating to an identified or identifiable natural person (“Data Subject”).

1.2 Processing: Any operation performed on personal data, such as collection, recording, organization, storage, or disclosure.

1.3 Sensitive Data: Includes health information (allergies/disabilities), religious beliefs, and passport/biometric data.

ARTICLE II: SCOPE OF COLLECTION

The Company shall collect and process the following categories of data:

• Identity Data: Full legal name, gender, date of birth, and nationality.

• Documentary Data: Passport copies, visa numbers, and travel insurance certificates.

• Contact Data: Permanent address, electronic mail address, and mobile contact (WhatsApp/Telegram).

• Preference Data: Dietary restrictions, medical requirements, and specific leisure interests.

• Technical Data: IP address, browser type, and usage data via cookies on the VPV web domain.

ARTICLE III: LEGAL BASIS FOR PROCESSING

The Company processes data under the following legal frameworks:

• Contractual Necessity: To fulfill the travel services and itineraries requested by the Data Subject.

• Legal Obligation: To comply with Vietnam’s immigration laws and tax reporting requirements.

• Explicit Consent: For marketing communications and the use of media assets.

ARTICLE IV: MEDIA AND INTELLECTUAL PROPERTY

4.1 Media Capture: During the course of a voyage or travel arrangement service, Company representatives or professional photographers may capture photographic or video footage of guests (“Media Content”).

4.2 Usage Rights: The Data Subject grants the Company a non-exclusive, royalty-free, worldwide license to use Media Content for promotional, marketing, and portfolio purposes across digital and print platforms (e.g., WordPress, Instagram, and brochures).

4.3 Opt-Out Right: Data Subjects may withdraw media consent at any time. If a guest wishes to remain anonymous or strictly private, a written “Non-Disclosure/No-Photo” request must be submitted to the Concierge prior to the commencement of the voyage.

ARTICLE V: DATA SHARING AND TRANS-BORDER TRANSFERS

5.1 Third-Party Service Providers: Data may be shared with vetted partners (including but not limited to Hotels, Airlines, Private Charter Operators) solely to execute the travel contract.

5.2 CRM & Storage: Data is stored using secure cloud infrastructure and managed via CRM platforms (e.g., HubSpot) following strict SOC2 compliance standards.

5.3 No Sale of Data: The Company expressly prohibits the sale or lease of Personal Data to third-party marketing entities.

ARTICLE VI: DATA SECURITY AND RETENTION

6.1 Technical Measures: The Company employs SSL/TLS encryption for all digital transmissions and restricted-access protocols for physical records.

6.2 Retention Period: Personal Data shall be retained for a period of ten (10) years following the conclusion of the final service provided, or as required by Vietnamese accounting and tax law.

ARTICLE VII: RIGHTS OF THE DATA SUBJECT

In accordance with international and local law, Data Subjects possess the following rights:

• Right to Access: Request a copy of all personal data held by the Company.

• Right to Rectification: Mandate the correction of inaccurate or incomplete data.

• Right to Erasure (“Right to be Forgotten”): Request the deletion of data when it is no longer necessary for the purposes for which it was collected.

ARTICLE VIII: CONTACT AND GRIEVANCE

All inquiries, requests for data access, or withdrawals of consent should be directed to the VPV Data Protection Officer:

Attn: Data Protection Officer

Email: [info@vietnampremiumvoyages.com]