Privacy

PRIVACY POLICY

Last Updated: July 30, 2026

At Serenity Cao Bang, we respect your privacy and are committed to protecting the personal data you provide when visiting our website, making an enquiry, booking a tour, purchasing transportation services, or communicating with our team.

This Privacy Policy explains what information we collect, why we collect it, how it is used and protected, and the choices available to you regarding your personal data.

By accessing or using https://serenitycaobang.com, you acknowledge that you have read and understood this Privacy Policy.

In this Privacy Policy, the terms “Serenity Cao Bang,” “we,” “us,” and “our” refer to Serenity Cao Bang and the company operating the website.

1. Information We Collect

We may collect information directly from you, automatically through your use of our website, or from authorized service providers involved in processing your booking.

1.1 Information You Provide Directly

When you make an enquiry, request a quotation, book a service, subscribe to updates, or contact us, we may collect:

  • Full name.

  • Date of birth.

  • Nationality.

  • Gender, when required for the booked service.

  • Email address.

  • Telephone number.

  • Residential or contact address.

  • Passport or identification information when required for travel arrangements.

  • Arrival, departure, accommodation, and transportation details.

  • Tour preferences and special requests.

  • Dietary requirements.

  • Emergency contact information.

  • Information about other travelers included in your booking.

  • Messages, documents, photographs, or other information you send to us.

You are responsible for ensuring that the information you provide is accurate and up to date.

When you provide personal data relating to another traveler, you confirm that you are authorized to provide that information and that the traveler has been informed of this Privacy Policy.

1.2 Account Information

If our website allows customers to create an account, we may collect:

  • Username.

  • Encrypted password.

  • Booking history.

  • Saved preferences.

  • Account activity.

Customers are responsible for maintaining the confidentiality of their login credentials.

1.3 Payment Information

When you make a payment, we may collect or process information such as:

  • Payment amount.

  • Transaction reference.

  • Billing information.

  • Bank transfer details.

  • Payment status.

  • Limited card transaction information provided by the payment processor.

Online card payments may be processed by authorized banks or third-party payment gateways. Serenity Cao Bang does not ordinarily store complete credit or debit card numbers on its own servers.

1.4 Information Collected Automatically

When you visit our website, certain technical information may be collected automatically, including:

  • Internet Protocol address.

  • Browser type and version.

  • Device type.

  • Operating system.

  • Language settings.

  • Referring website.

  • Pages viewed.

  • Date and time of access.

  • Time spent on individual pages.

  • General geographic location derived from the IP address.

  • Website interaction and error data.

This information helps us maintain website security, understand how visitors use the website, and improve its performance.

2. How We Use Personal Data

We may process personal data for the following purposes:

  • Responding to enquiries and quotation requests.

  • Creating and managing reservations.

  • Confirming tours, transportation, accommodation, and related services.

  • Communicating booking changes, pickup information, schedules, and travel instructions.

  • Processing payments, refunds, invoices, and transaction records.

  • Providing customer support before, during, and after a journey.

  • Coordinating with tour guides, drivers, hotels, restaurants, cruise operators, and other service providers.

  • Complying with immigration, passenger registration, insurance, accounting, tax, and other legal requirements.

  • Managing complaints, disputes, emergencies, and insurance-related matters.

  • Improving our website, products, tours, and customer service.

  • Preventing fraud, unauthorized transactions, and security incidents.

  • Sending promotional information when you have agreed to receive it.

  • Carrying out internal reporting, analysis, and business administration.

We will not use your personal data for purposes that are incompatible with the purposes explained in this Privacy Policy unless permitted or required by applicable law.

3. Legal Basis for Processing

Depending on the circumstances, we may process your personal data on one or more of the following grounds:

  • Your consent.

  • The need to take steps at your request before entering into a contract.

  • The performance of a booking or service agreement.

  • Compliance with legal obligations.

  • Protection of the life, health, or safety of a traveler or another individual.

  • Our legitimate business interests, provided that such interests do not unlawfully override your rights and interests.

  • Other grounds permitted by applicable Vietnamese law.

Where processing is based on consent, you may withdraw that consent subject to applicable law and any contractual or legal requirements.

4. Cookies and Similar Technologies

Our website may use cookies and similar technologies to improve functionality, remember preferences, analyze performance, and provide relevant content.

Cookies are small text files stored on your browser or device when you visit a website.

We may use the following types of cookies:

4.1 Essential Cookies

These cookies are necessary for the website to function properly. They may support security, navigation, booking forms, language preferences, and session management.

4.2 Analytics Cookies

These cookies help us understand how visitors use our website, including which pages are visited and whether technical errors occur.

4.3 Preference Cookies

These cookies remember choices such as preferred language, location, or display settings.

4.4 Advertising and Marketing Cookies

Where used and permitted, these cookies may help us measure advertising performance or display content that is more relevant to visitors.

You may manage or disable cookies through your browser settings. However, disabling essential cookies may affect certain website functions.

Where required, we will request your consent before placing non-essential cookies on your device.

5. Analytics and Third-Party Services

We may use analytics and technology services, such as website analytics, advertising measurement, customer communication, map, video, or social media tools.

These service providers may collect technical information about your interaction with our website in accordance with their own privacy policies.

Our website may contain links to external websites or platforms. Serenity Cao Bang is not responsible for the privacy practices, security, or content of third-party websites. We encourage you to review their privacy policies before providing personal information.

6. Social Media

Our website may include links or buttons connected to platforms such as Facebook, Instagram, YouTube, WhatsApp, or other social networks and communication services.

When you interact with these features, the relevant platform may collect information about your visit according to its own terms and privacy policy.

To limit this collection, you may log out of your social media accounts before visiting our website or adjust your privacy settings directly on the relevant platform.

7. Sharing Personal Data

We may share your personal data only when reasonably necessary to provide the requested services, manage our business, protect customers, or comply with legal obligations.

Recipients may include:

  • Tour guides and tour operators.

  • Drivers and transportation companies.

  • Hotels, homestays, and accommodation providers.

  • Restaurants and activity providers.

  • Ticketing and reservation partners.

  • Banks and payment processors.

  • Insurance companies where applicable.

  • Website hosting, email, information technology, analytics, and customer-support providers.

  • Accountants, auditors, legal advisers, and professional consultants.

  • Government agencies, courts, law-enforcement bodies, or regulatory authorities when required by law.

  • Emergency services when necessary to protect health or safety.

We require relevant service providers to process personal data only for authorized purposes and to apply appropriate confidentiality and security measures.

We do not sell or rent customers’ personal data to third parties.

8. International and Cross-Border Data Processing

Some technology, payment, communication, booking, or cloud-service providers may process or store information outside Vietnam.

When personal data is transferred or processed across borders, we will take appropriate measures required under applicable law to protect the information and ensure that the transfer is carried out lawfully.

9. Data Retention

We retain personal data only for as long as reasonably necessary to:

  • Complete your booking and provide the requested services.

  • Maintain customer-service and transaction records.

  • Fulfill accounting, tax, insurance, and regulatory obligations.

  • Resolve complaints or legal disputes.

  • Prevent fraud and maintain system security.

  • Establish, exercise, or defend legal claims.

Retention periods may vary depending on the type of information, the nature of the service, and applicable legal requirements.

When personal data is no longer required, we will delete, anonymize, or securely dispose of it unless continued retention is required by law.

10. Data Security

We implement reasonable administrative, technical, and physical security measures designed to protect personal data from:

  • Unauthorized access.

  • Accidental loss.

  • Misuse.

  • Alteration.

  • Disclosure.

  • Destruction.

  • Unlawful processing.

These measures may include access controls, password protection, encrypted connections, system monitoring, backups, employee confidentiality obligations, and restrictions on access to customer information.

Only authorized personnel and service providers may access personal data when necessary to perform their duties.

Although we take reasonable security precautions, no internet transmission or storage system can be guaranteed to be completely secure. Customers should avoid sending sensitive information through unsecured communication channels.

11. Personal Data of Children

Our travel services may be used by children when accompanied or represented by a parent, legal guardian, or other authorized adult.

When booking a service for a child, the parent, guardian, or authorized representative must provide the necessary information and consent required for processing the child’s personal data.

We do not knowingly collect children’s personal data directly for marketing purposes without the appropriate authorization.

12. Marketing Communications

We may send newsletters, promotions, travel suggestions, or service updates when you have requested them or otherwise permitted us to do so.

You may stop receiving marketing communications at any time by:

  • Using the unsubscribe option in the message.

  • Contacting us by email.

  • Requesting that our customer service team remove you from the marketing list.

Withdrawing from marketing communications will not affect essential communications relating to an existing enquiry, booking, payment, or service.

13. Your Rights

Subject to applicable law and relevant limitations, you may have the right to:

  • Be informed about the processing of your personal data.

  • Give or withhold consent where consent is required.

  • Access your personal data.

  • Request correction of inaccurate or incomplete information.

  • Request deletion of personal data.

  • Withdraw previously provided consent.

  • Request restriction of certain processing activities.

  • Object to certain uses of your personal data.

  • Request a copy of information you have provided.

  • Submit a complaint concerning the processing of your personal data.

  • Request compensation where provided by applicable law.

  • Exercise other rights available under Vietnamese law.

To protect your information, we may request reasonable proof of identity before responding to a data-related request.

Some requests may be limited when the information must be retained or processed to fulfill a contract, comply with legal obligations, protect another individual, resolve a dispute, or establish or defend legal claims.

14. Data Breaches

If a personal data breach occurs, Serenity Cao Bang will assess the nature and potential consequences of the incident.

Where required by applicable law, we will take appropriate remedial measures and notify the relevant authorities and affected individuals within the required timeframe.

15. Changes to This Privacy Policy

We may revise this Privacy Policy from time to time to reflect changes in:

  • Applicable laws and regulations.

  • Our services and business operations.

  • Website technologies.

  • Payment and booking systems.

  • Data-processing practices.

The updated version will be published on this page with a revised “Last Updated” date.

We encourage visitors to review this Privacy Policy periodically.

16. Data Controller and Contact Information

The organization responsible for processing personal data through this website is:

Brand: Serenity Cao Bang

Operating Company: GREEN LAN HA INTERNATIONAL TOURISM JOINT STOCK COMPANY

Head Office:
106 Tran Nhat Duat Street, Hang Buom Ward, Hoan Kiem District, Hanoi, Vietnam

Cao Bang Office:
Please update with the official Cao Bang office address.

Hotline: +84 97 695 1999

Email:info@serenitycaobang.com

Website:https://serenitycaobang.com

For questions, requests, complaints, withdrawal of consent, or concerns relating to this Privacy Policy or the processing of personal data, please contact us using the information above.