Effective Date: February 21, 2026

Welcome to EcoSapa Travel ("we," "our," or "us"). As a premier travel operator based in Vietnam, we serve guests from across the globe. We recognize that the confidentiality and security of your personal data are of paramount importance. This Comprehensive Privacy Policy outlines our practices regarding the collection, processing, transfer, and safeguarding of your data when you interact with our website (ecosapabus.net) and utilize our transportation and tour services.

By accessing our platform or booking our services, you expressly consent to the data practices described in this document. We strictly adhere to global privacy frameworks, including the General Data Protection Regulation (GDPR) of the European Union and the California Consumer Privacy Act (CCPA).

1. Categorization of Information We Collect

To facilitate seamless travel logistics across Northern Vietnam, we collect data through various touchpoints. We categorize this data as follows:

1.1. Voluntarily Provided Information

When you initiate a booking, request a custom itinerary, or contact our support team, you directly provide us with:

• Identity Data: Full legal name, date of birth, nationality, and gender.
• Contact Data: Email address, primary phone number, and messaging app IDs (e.g., WhatsApp, Zalo).
• Travel Logistics Data: Hotel addresses in Hanoi for pick-up, flight arrival times, dietary restrictions, and specific health conditions relevant to adventure tours.
• Sensitive Identification Data: Passport copies or ID numbers. Note: This is strictly requested only when mandated by Vietnamese Law for specific regions.

1.2. Automatically Collected Information

When you navigate our website to read guides about Sapa trekking or Ninh Binh, our servers automatically record standard analytical data, including:

• Technical Data: IP address, browser type and version, time zone setting, operating system, and device type (mobile or desktop).
• Usage Data: URL referring pages, the pages you visited on our site, time spent per page, and clickstream behavior.

2. Purpose of Data Processing

We process your personal data exclusively for lawful and operational purposes. We do not engage in automated decision-making or profiling that produces legal effects concerning you. We use your data to:

• Contractual Fulfillment: To confirm your seats on our Limousine buses, dispatch local guides, and reserve accommodations at homestays.
• Customer Support & Communication: To issue electronic tickets, provide live updates (e.g., weather delays affecting mountain passes), and respond to emergency queries.
• Legal Obligations: To comply with Vietnamese immigration laws, tax reporting, and local police registry requirements.
• Business Optimization: To analyze website traffic patterns to improve our content architecture and user interface.

3. Disclosure and Sharing of Your Information

Under no circumstances do we sell, rent, or lease your personal data to third-party marketers or data brokers. Information is only shared on a "need-to-know" basis with the following entities:

• Operational Partners: Bus fleet drivers, local tour guides, and hotel partners who require your name and dietary preferences to execute the service you purchased.
• Government Authorities: Vietnamese border control, maritime port authorities, and local police stations when legally obligated.
• IT Service Providers: Secure payment gateways and cloud hosting providers that host our infrastructure under strict confidentiality agreements.

4. Cookies and Tracking Technologies

Our website utilizes Cookies to enhance functionality and analyze visitor behavior. We deploy:

• Strictly Necessary Cookies: Essential for the website to function, such as maintaining your booking session securely across different pages.
• Analytical Cookies: (e.g., Google Analytics) to aggregate anonymous data on how visitors interact with our travel guides.

You reserve the right to configure your browser to reject non-essential cookies. However, disabling all cookies may impair the functionality of our booking engine.

5. Data Retention Period

We retain your personal data only for as long as necessary to fulfill the purposes outlined in this policy. Specifically:

• Booking Data: Retained for a period of up to 5 years following your trip to comply with Vietnamese financial auditing and tax laws.
• Passport/ID Data: Deleted from our active servers within 30 days after your tour concludes, as it is no longer required for legal permits.
• Marketing Data: Retained until you actively unsubscribe or request deletion.

6. International Data Transfers

EcoSapa is headquartered in Vietnam. If you are accessing our site from the European Union, the United States, or other regions, please be aware that your data is transferred to and processed in Vietnam. We ensure that such transfers are conducted securely and that our processing standards align with international norms to protect your fundamental privacy rights.

7. Children's Privacy (COPPA Compliance)

Our services are designed for general audiences. However, we do not knowingly collect personal information directly from children under the age of 13 without verifiable parental consent. If a tour booking includes a minor, the data must be provided by the legal guardian. If we become aware that we have inadvertently collected data from a child independently, we will take immediate steps to delete such information.

8. Your Legal Rights (GDPR & CCPA)

Depending on your jurisdiction, you are entitled to rigorous data protection rights. We honor these rights for all our global customers:

• Right to Access: You may request a comprehensive disclosure of the personal data we hold about you.
• Right to Rectification: You may request corrections to any inaccurate or outdated information.
• Right to Erasure ("Right to be Forgotten"): You may request the permanent deletion of your data from our systems, subject to legal and taxation retention mandates.
• Right to Data Portability: You may request your data in a structured, machine-readable format.
• Right to Non-Discrimination (CCPA): We will not discriminate against you in pricing or service quality for exercising your privacy rights.

9. Updates to This Policy

As international data laws evolve and our services expand, we may periodically update this Privacy Policy. All revisions will be posted on this URL, and the "Effective Date" at the top of the document will be amended accordingly. We encourage travelers to review this policy prior to booking.

10. Contact the Data Protection Officer

If you have any questions, concerns, or wish to exercise your data rights, please contact our dedicated support team at our official offices: