PERSONAL INFORMATION PRIVACY POLICY

1. Purpose and Scope of Personal Information Collection

The company collects customers' personal information for the following purposes:

• To confirm and process itineraries, transportation service bookings, and cargo shipments;
  
  

• To contact and support customers during service use;
  
  

• To provide information related to schedules, trip changes, and after-sales services;
  
  

• To resolve complaints and disputes (if any);
  
  

• To fulfill legal obligations as required by competent state authorities.
  
  

Personal information that may be collected includes but is not limited to:

• Full name;
  
  

• Phone number;
  
  

• Email address;
  
  

• ID number;
  
  

• Date of birth;
  
  

• Pick-up/drop-off address (if any);
  
  

• Delivery/receipt information (for transportation services);
  
  

• Other information provided by the customer when contacting or using the service.
  
  

The company does not collect sensitive information (bank accounts, personal passwords outside the system, special private data…) unless otherwise required by law.

2. Scope of Information Use

Customers' personal information is only used by the company within the scope of:

• Internal company use to serve business operations and customer care;
  
  

• Providing to departments directly related to the service requested by the customer;
  
  

• Serving the requests of competent state authorities as required by law.
  
  

The company commits not to use customers' personal information for purposes other than those announced, unless with the customer's consent or as required by law.

3. Information Storage Duration

• Customers' personal information is stored throughout the duration of service use and/or until the completion of related legal obligations.
  
  

• After the collection purpose is completed, or upon a valid request from the customer, personal information will be:
  
  

  • Deleted;
    
    

  • Or anonymized;
    
    

  • Or stored according to mandatory legal timeframes (if any).
    
    

4. Individuals or Organizations that May Access Information

Customers' personal information is only accessed when necessary, including:

• Internal company personnel authorized to process orders and customer care;
  
  

• Transportation, delivery, and transit partners (if any) to properly execute the service requested by the customer;
  
  

• Competent state authorities upon legal request.
  
  

All parties accessing the information are obligated to maintain confidentiality and use it only within the scope of their assigned duties.

5. Address of the Information Collection and Management Unit

Information Collection and Management Unit:
338 TOURISM COMPANY LIMITED

• Head office address: 338 Tran Khat Chan, Hai Ba Trung, Hanoi

• Phone: 0914 077 779

• Website: xehunglong.com
  
  

Customers can contact the above information to inquire, request corrections, or file complaints related to their personal information.

6. Methods and Tools for Consumers to Access and Modify Personal Information

Customers have the right to:

• Check, update, correct, or request the cancellation of their personal information by:
  
  

  • Contacting directly via the hotline;
    
    

  • Emailing the company's contact address;
    
    

  • Or through support functions (if any) on the website.
    
    

The company will verify requests and assist customers within a reasonable time according to internal regulations and the law.

7. Mechanism for Receiving and Resolving Complaints Related to Personal Information

• All complaints related to the misuse or exceeding the announced scope of personal information will be received by the company through:
  
  

  • Hotline
    
    

  • Email
    
    

  • Or direct written communication at the company's headquarters.
    
    

• The company commits to:
  
  

  • Verify the information;
    
    

  • Coordinate with related parties (if any);
    
    

  • Resolve complaints in good faith, in accordance with the law.
    
    

In cases beyond authority, the matter will be referred to competent state authorities for handling according to regulations.

8. Commitment to Information Security

The company applies necessary technical and management measures to protect customers' personal information from:

• Unauthorized access;
  
  

• Unauthorized disclosure, alteration, or destruction of data.
  
  

However, in cases of force majeure due to technical errors, natural disasters, cyberattacks… the company will coordinate handling and timely notification according to legal regulations.

9. Policy Effectiveness and Disclosure

• This privacy policy is publicly disclosed on the website;
  
  

• Clearly displayed before or at the time of personal information collection;
  
  

• Customers' continued use of the company's website and services is understood as having read, understood, and agreed to this policy.