PERSONAL INFORMATION PRIVACY POLICY

1. Purpose and scope of collecting personal information

The company collects customers' personal information for the following purposes:

• Confirming and processing itinerary bookings, transport service bookings, goods transportation;
  
  

• Contacting customer support during service use;
  
  

• Providing information related to itineraries, trip changes, after-sales service;
  
  

• Resolving complaints, disputes (if any);
  
  

• Fulfilling legal obligations as required by competent state authorities.
  
  

Personal information that may be collected includes but is not limited to:

• Full name;
  
  

• Phone number;
  
  

• Email address;
  
  

• ID number:
  
  

• Date of birth
  
  

• Pick-up/drop-off address (if any);
  
  

• Goods delivery/receipt information (for transportation services);
  
  

• Other information provided by customers when contacting or using services.
  
  

The company does not collect sensitive information (bank accounts, personal passwords outside the system, special private data...) unless otherwise required by law.

2. Scope of information use

Customers' personal information is used by the company within the scope of:

• Internal company use for business operations and customer care;
  
  

• Providing to departments directly related to the service requested by the customer;
  
  

• Serving requests from competent state authorities as required by law.
  
  

The company commits not to use customers' personal information for purposes other than those notified, unless with customer consent or as required by law.

3. Information storage duration

• Customers' personal information is stored throughout the period the customer uses the service and/or until all related legal obligations are fulfilled.
  
  

• After the purpose of collection has been fulfilled, or upon a valid customer request, personal information will be:
  
  

  • Deleted;
    
    

  • Or anonymised;
    
    

  • Or stored according to mandatory legal deadlines (if any).
    
    

4. Individuals or organizations that may access information

Customers' personal information is only accessed when necessary, including:

• Internal company personnel authorized to process orders, customer care;
  
  

• Transport, delivery, and transit partners (if any) to properly perform the service requested by the customer;
  
  

• Competent state authorities upon lawful request.
  
  

All parties accessing the information are obligated to maintain confidentiality and use it only within the scope of assigned work.

5. Address of the unit collecting and managing information

Unit collecting and managing information:
338 TOURISM CO., LTD

• Head office address: 338 Tran Khat Chan, Hai Ba Trung, Hanoi

• Phone: 0914 077 779

• Website: xehunglong.com
  
  

Customers can contact the above information to inquire, request corrections, or file complaints related to their personal information.

6. Methods and tools for consumers to access, edit personal information

Customers have the right to:

• Check, update, edit, or request deletion of their personal information by:
  
  

  • Contacting directly via hotline;
    
    

  • Sending an email to the company's contact address
    
    

  • Or through support functions (if any) on the website.
    
    

The company will verify the request and assist customers within a reasonable time according to internal regulations and the law.

7. Mechanism for receiving and resolving complaints related to personal information

• All complaints related to personal information being used for the wrong purpose or beyond the notified scope will be received by the company through:
  
  

  • Hotline
    
    

  • Email
    
    

  • Or direct document at the company headquarters.
    
    

• The company commits to:
  
  

  • Verify the information;
    
    

  • Coordinate with related parties (if any);
    
    

  • Resolve complaints in good faith, in accordance with legal regulations.
    
    

In cases beyond authority, the matter will be transferred to competent state authorities for handling according to regulations.

8. Commitment to information confidentiality

The company applies necessary technical and management measures to protect customers' personal information from:

• Unauthorized access;
  
  

• Unauthorized disclosure, alteration, or destruction of data.
  
  

However, in force majeure cases due to technical errors, natural disasters, cyber attacks... the company will coordinate to handle and promptly notify according to legal regulations.

9. Policy effectiveness and disclosure

• This privacy policy is publicly announced on the website;
  
  

• Displayed clearly before or at the time of personal information collection;
  
  

• Customers' continued use of the company's website and services is understood as having read, understood, and agreed to this policy.