Privacy Policy

VAC Travel (Business License No: 0108766985) is deeply committed to protecting your personal information and respecting your right to privacy. We handle all personal data with the utmost discretion and care.

This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website or make a booking with us. We encourage you to read it carefully. If you have any questions, please do not hesitate to contact us.

Information you provide directly:

• Full name and email address (when submitting a booking enquiry or contact form)
• Travel preferences, proposed dates, group size, and special requirements
• All written communications exchanged with our team
• Payment information (processed securely by our trusted payment providers — we do not store card details)

Information collected automatically:

• IP address and browser type
• Pages visited and time spent on our website
• Referring website or traffic source
• Device and operating system information

We use Google Analytics (GA4) to collect anonymised usage data solely for the purpose of improving our website experience. You may opt out at any time via your browser settings or Google's opt-out tools.

We use the information we collect exclusively for the following purposes:

• To respond to your enquiries and provide personalised travel services
• To issue booking confirmations and essential tour-related communications
• To tailor our recommendations to your travel interests and preferences
• To continuously improve our website and service quality
• To fulfil our legal and regulatory obligations
• To send occasional updates about new tours or exclusive offers — only with your explicit consent

We will never sell, rent, or trade your personal information to third parties for any marketing or commercial purpose.

We share your information with trusted third parties only to the extent necessary to deliver our services:

• Local service partners: Boutique hotels, private transport providers, and activity specialists involved in your bespoke itinerary
• Technology partners: Supabase (secure database), Vercel (website hosting) — all operating under rigorous data protection standards
• Legal authorities: Where disclosure is required by law or necessary to protect our legal rights

All third-party partners are contractually obligated to keep your information strictly confidential and to use it solely for the purpose of delivering services on our behalf.

We retain your personal information only for as long as is necessary to provide our services and meet our legal obligations. Booking records are typically retained for a period of three years following your tour date.

You may request the deletion of your personal data at any time by writing to us at contact@vactravel.com, subject to any overriding legal retention requirements.

Our website uses a minimal number of cookies to enhance your browsing experience:

• Essential cookies: Strictly necessary for the website to function correctly — these cannot be disabled
• Analytics cookies: Google Analytics, used to understand how visitors interact with our site (data is fully anonymised)

You may manage your cookie preferences through your browser settings at any time. Please note that disabling certain cookies may affect the functionality of our website.

You hold the following rights with respect to your personal data. We will honour all requests promptly and without undue delay:

• Right of Access: To request a copy of the personal data we hold about you
• Right to Rectification: To request correction of any inaccurate or incomplete information
• Right to Erasure: To request deletion of your personal data
• Right to Object: To object to the processing of your data for direct marketing purposes
• Right to Data Portability: To request a transfer of your data in a structured, machine-readable format

To exercise any of these rights, please contact us at contact@vactravel.com. We will respond within 30 calendar days.

We employ appropriate technical and organisational security measures to safeguard your personal information against unauthorised access, alteration, disclosure, or destruction. Our website operates over HTTPS with SSL encryption at all times.

While we take every reasonable precaution, no method of electronic transmission is entirely without risk. We encourage you to contact us immediately if you suspect any unauthorised use of your data.

Our website and services are intended for adults. We do not knowingly collect or process personal information from individuals under the age of 13. If you believe we may have inadvertently received information from a child, please contact us immediately and we will take prompt action.

Our website may include links to third-party platforms, including TripAdvisor and social media channels. VAC Travel is not responsible for the privacy practices or content of these external sites. We encourage you to review the relevant privacy policies before providing any personal information to third parties.

We may update this Privacy Policy periodically to reflect changes in our practices or applicable regulations. Any material changes will be communicated by updating the "Last updated" date at the head of this page. Your continued use of our website following any such changes constitutes your acceptance of the revised policy.

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please reach out to us — we are always happy to help:

VAC Travel — HiddenPath Asia
Head Office: No 17 TT5.2 Westpoint Residence, Hoai Duc, Hanoi, Vietnam
Email: contact@vactravel.com
WhatsApp: +84 912 130 878
Business License No: 0108766985
Hanoi, Vietnam