Privacy Policy
Last updated: September 26, 2026
This policy explains what personal data we collect when you visit bachmanationalpark.com or book a tour with us, why we collect it, and your choices.
1. Who we are
Bach Ma Private Tours (“we”) runs bachmanationalpark.com and is the controller of the personal data described here. Contact: [email protected] or WhatsApp +84 368 938 081.
2. What we collect
When you book or message us: your name, email, WhatsApp number, tour date, pickup and drop-off hotel, number of guests, and anything you tell us about dietary, health or mobility needs. When you pay online, card details are handled directly by the payment provider; we never see or store your full card number.
When you browse: the technical data your browser sends (IP address, device and browser type) in our server logs, and the essential cookies described in our Cookie Policy. We do not run advertising pixels or analytics trackers.
3. Why we use it
To confirm and run your tour, to contact you about it before and on the day, to take payment (in full, or the 30% deposit), to meet our accounting and tax obligations, and to answer your questions. The legal bases are performance of a contract, legal obligation and our legitimate interest in running the business safely.
4. Who we share it with
Only what each party needs: your guide, driver and our licensed partner operator receive your name, group size, pickup and drop-off hotels, tour date and any special needs; if you chose to pay the balance in cash, your guide also knows the amount still due. The national park receives nothing beyond what ticket purchase requires. Payment providers process your payment. Our hosting provider stores the website data. We never sell personal data.
5. How long we keep it
Booking and payment records: 10 years, as required by Vietnamese accounting law. WhatsApp and email conversations: 24 months after your tour. Server logs: 30 days.
6. International transfers
We are based in Vietnam and our service providers may process data in other countries. Where required, we rely on the providers’ standard contractual safeguards.
7. Your rights
You can ask to see, correct or delete your personal data, or object to how we use it, by writing to [email protected]. We reply within 30 days. If you are in the EU or UK you may also complain to your local data protection authority.
8. Changes
We update this page when our practices change; the date at the top shows the latest version.