PERSONAL INFORMATION PRIVACY POLICY

1. Purpose and scope of personal information collection

The company collects customers' personal information for the following purposes:

• Confirm and process itinerary bookings, transportation service bookings, and goods transportation;
  
  

• Contact and support customers during the service usage;
  
  

• Provide information related to schedules, trip changes, after-sales services;
  
  

• Resolve complaints and disputes (if any);
  
  

• Fulfill legal obligations as required by competent state authorities.
  
  

The personal information that may be collected includes but is not limited to:

• Full name;
  
  

• Phone number;
  
  

• Email address;
  
  

• ID number:
  
  

• Date of birth;
  
  

• Pick-up/drop-off address (if any);
  
  

• Delivery/receipt information (for transportation services);
  
  

• Other information provided by the customer when contacting or using the service.
  
  

The company does not collect sensitive information (bank account, personal passwords outside the system, special private data...) unless otherwise required by law.

2. Scope of information usage

Customers' personal information is used by the company within the scope of:

• Internal company use to serve business operations and customer care;
  
  

• Providing to departments directly related to the execution of services requested by the customer;
  
  

• Serving the requirements of competent state authorities as prescribed by law.
  
  

The company commits not to use customers' personal information for purposes other than those announced, unless with the customer's consent or as required by law.

3. Information retention period

• Customers' personal information is stored throughout the period the customer uses the service and/or until the completion of related legal obligations.
  
  

• After the purpose of collection is fulfilled, or upon a valid request from the customer, personal information will be:
  
  

  • Deleted;
    
    

  • Or anonymized;
    
    

  • Or stored according to mandatory legal time limits (if any).
    
    

4. Individuals or organizations that may have access to information

Customers' personal information is only accessed in necessary cases, including:

• Internal company personnel authorized to process orders, customer care;
  
  

• Transportation, delivery, and transit partners (if any) to properly execute the service requested by the customer;
  
  

• Competent state authorities upon legal request.
  
  

All parties accessing the information are obligated to keep the information confidential and use it only within the scope of their assigned tasks.

5. Address of the information collection and management unit

Information collection and management unit:
338 TOURISM COMPANY LIMITED

• Head office address: 338 Tran Khat Chan, Hai Ba Trung, Hanoi

• Phone: 0914 077 779

• Website: xehunglong.com
  
  

Customers can contact the above information to inquire, request modifications, or file complaints related to their personal information.

6. Methods and tools for consumers to access and modify personal information

Customers have the right to:

• Check, update, modify, or request the cancellation of their personal information by:
  
  

  • Contacting directly via hotline;
    
    

  • Sending an email to the company's contact address
    
    

  • Or through support functions (if any) on the website.
    
    

The company will verify the request and support customers within a reasonable time according to internal regulations and the law.

7. Mechanism for receiving and resolving complaints related to personal information

• All complaints related to personal information being used for incorrect purposes or beyond the announced scope will be received by the company through:
  
  

  • Hotline
    
    

  • Email
    
    

  • Or direct document at the company's headquarters.
    
    

• The company commits to:
  
  

  • Verify the information;
    
    

  • Coordinate with related parties (if any);
    
    

  • Resolve complaints in good faith, in accordance with the law.
    
    

In cases beyond authority, the matter will be referred to competent state authorities for handling according to regulations.

8. Commitment to information security

The company applies necessary technical and management measures to protect customers' personal information from:

• Unauthorized access;
  
  

• Unauthorized disclosure, alteration, or destruction of data.
  
  

However, in cases of force majeure due to technical errors, natural disasters, cyber attacks... the company will coordinate to handle and promptly notify according to legal regulations.

9. Effectiveness and publication of the policy

• This privacy policy is publicly announced on the website;
  
  

• Displayed clearly before or at the time of personal information collection;
  
  

• Customers' continued use of the company's website and services is understood as having read, understood, and agreed to this policy.