Privacy Policy

This policy explains how Lang Thang in Vietnam, part of the Travel Neutral Collective (“we”, “us”), collects, uses, stores and shares your personal data. We handle it in line with Vietnamese data protection law, including Decree 13/2023/ND-CP and the Law on Personal Data Protection, as in force from time to time, and with the EU and UK General Data Protection Regulation (GDPR) where it applies to you.

1. Who is responsible for your data

1.1 We decide how and why your personal data is used for your bookings and for this website. You can reach us at hello@langthang.travel. The legal entity that holds your booking is named in your booking confirmation, and we can give you its registration details on request.

2. The personal data we collect

2.1 Contact and identity details, such as your name, email address, phone number, nationality and country of residence. 2.2 Booking details, such as the Tours you choose, travel dates, group members and travel preferences. 2.3 Passport and travel document details, which we collect only when a Tour needs them, for example to register foreign guests with accommodation providers or to obtain permits. 2.4 Special requirements, such as allergies, dietary restrictions, mobility needs and health conditions relevant to the Tour. This is sensitive data, and we ask for it only so that we can keep you safe and meet your needs. 2.5 Information about people you book for, such as other group members and children. 2.6 Payment details. If you pay by card or online, the payment provider receives your payment details directly. 2.7 Messages you send us by email, messaging apps and social media, and anything you tell us on a call. 2.8 Website data, such as your IP address, device and browser type, pages visited and cookies (see section 11). 2.9 Photographs and video taken during Tours (see section 27 of our Terms and Conditions).

3. Why we use your data, and our legal grounds

3.1 To perform your booking and meet legal obligations: to confirm and run your Tour, arrange suppliers, take payment, and meet tax, accounting and immigration rules. (GDPR Art. 6(1)(b) and (c).) 3.2 For our legitimate interests: customer care, safety and risk management, quality control, security and running our business. We balance these against your rights. (GDPR Art. 6(1)(f).) 3.3 With your consent: for marketing messages, for use of your image in promotion, and for sensitive data such as health information. You can withdraw consent at any time. (GDPR Art. 6(1)(a) and 9(2)(a).) 3.4 Under Vietnamese law, we process your personal data on the basis of your consent, or another basis that the law allows. Where the law requires explicit consent, for example for sensitive personal data, we ask for it separately.

4. Who we share your data with

4.1 Suppliers who deliver your Tour, such as hotels, guides, drivers, boat operators, workshop hosts and restaurants. We share only what each of them needs. 4.2 Service providers that help us run the business, such as our website host (Wix), email and messaging providers, payment providers and booking tools. 4.3 Other companies in the Travel Neutral Collective, where they need the data to run your booking. 4.4 Public authorities, where the law requires us to disclose data or where we need to protect our legal rights, prevent fraud or protect safety. 4.5 We do not sell your personal data.

5. Transfers of data across borders

5.1 Your data may be stored or processed in countries other than the one you live in, including by our service providers and by suppliers in Vietnam. Where Vietnamese law applies, we follow its rules on cross-border transfers. Where GDPR applies, we use appropriate safeguards, such as standard contractual clauses, or rely on your explicit consent for a specific transfer.

6. How long we keep your data

6.1 We keep booking records for as long as we need them to deliver your Tour and to meet our tax, accounting and legal obligations, and then delete or anonymise them. 6.2 We delete health and dietary information after your Tour, unless we need it to deal with a claim or the law requires us to keep it. 6.3 We keep marketing contact details until you unsubscribe or withdraw consent.

7. Children

7.1 We do not market to children. We handle a child’s personal data only when a parent or guardian books for them, and with the consent of that parent or guardian, as the law requires. Please contact us if you believe we hold a child’s data without such consent.

8. Security

8.1 We use technical and organisational measures to protect your data against loss, unauthorised access, alteration or destruction. No system is completely secure, but we limit access to the people who need it and we ask our suppliers and providers to protect your data.

9. Data breaches

9.1 If a security incident affects your personal data, we will deal with it promptly and notify the competent authorities and affected people as the law requires, including Articles 33 and 34 of GDPR where they apply.

10. Your rights

10.1 You have the right to:

• know how your data is processed, and to access it;

• ask us to correct it;

• ask us to delete it;

• restrict or object to our processing;

• withdraw your consent at any time, without affecting processing already done;

• receive your data in a portable format;

• ask for a copy of the safeguards that protect international transfers; and

• complain to us or to the competent data protection authority, and seek compensation where the law allows.

10.2 To use these rights, write to hello@langthang.travel. We will confirm receipt within 7 days and reply within 30 days. If your request is complex, it may take longer, but never more than 60 days, and we will tell you why. 10.3 If you are in the EU or UK, you may also complain to your local data protection authority.

11. Cookies and analytics

11.1 Our website runs on Wix and uses cookies and similar technologies that are necessary for it to work, and others that help us understand how the site is used. You can control cookies through the cookie settings on the site and through your browser. Blocking some cookies may affect how the site works.

12. Marketing messages

12.1 We send marketing emails only with your consent. Every message has an unsubscribe link, and you can also write to us at any time.

13. Links to other websites

13.1 Our website may link to other websites, such as social media pages and our partners. We do not control their content or privacy practices, and we are not responsible for what they collect. Please read their policies.

14. Changes to this policy

14.1 We may update this policy. We will publish the new version on this page with a new date, and where a change is significant and the law requires, we will ask for your consent again.

15. Contact

15.1 For questions, requests or complaints about this policy, write to hello@langthang.travel.