Personal Data Protection Policy

Happy Team VN ("we," "our," "us") is dedicated to safeguarding the personal data of our customers, partners, and employees. This Personal Data Protection Policy outlines our commitments to protecting data and explains how we collect, use, store, and protect personal information. By using our services, you agree to the terms of this policy.

1. Purpose of Data Collection

We collect personal data solely for legitimate purposes related to providing and improving our services, ensuring customer satisfaction, and fulfilling legal obligations. The purposes include, but are not limited to:

Processing travel bookings and transactions.
Communicating with customers and responding to inquiries.
Enhancing our services based on user behavior and preferences.
Marketing, promotions, and customer relationship management (with explicit consent).
Legal compliance and dispute resolution.

2. Data We Collect

The types of personal data we collect may include:

Contact Information: Name, email address, phone number, and physical address.
Identification Information: Passport details and other government-issued identification (as required for travel bookings).
Financial Information: Payment details such as credit card information (processed securely through third-party payment processors).
Technical Data: IP address, device type, and usage patterns when you visit our website.
Preferences and Interests: Information you provide about your travel preferences or interests.

3. Lawful Basis for Data Processing

Our lawful basis for processing personal data depends on the specific context in which it is collected:

Contractual Necessity: Processing is required to fulfill our contract with you (e.g., processing bookings).
Legitimate Interest: Processing is necessary for our legitimate interests (e.g., service improvements, fraud prevention).
Consent: We obtain your consent for specific purposes, such as marketing emails.
Legal Obligation: Processing is required to comply with legal or regulatory obligations.

4. Data Retention

We retain personal data only as long as necessary to fulfill the purposes outlined in this policy or as required by law. Data that is no longer needed will be securely deleted or anonymized.

5. Data Security Measures

We implement comprehensive security measures to protect personal data from unauthorized access, alteration, and disclosure, including:

Encryption: Sensitive information (e.g., financial data) is encrypted during transmission.
Access Control: Only authorized personnel have access to personal data, limited to what is necessary for their role.
Regular Audits: We conduct regular security assessments to maintain data protection.

6. Your Data Protection Rights

In accordance with data protection regulations, you may have the following rights concerning your personal data:

Right to Access: You may request a copy of your personal data that we hold.
Right to Rectification: You may request corrections to inaccurate or incomplete data.
Right to Deletion: You may request deletion of personal data, subject to certain legal conditions.
Right to Restrict Processing: You may request restrictions on the processing of your data.
Right to Data Portability: You may request your data in a structured, machine-readable format.
Right to Object: You may object to certain types of processing, such as direct marketing.

To exercise any of these rights, please contact us. We will respond within the timeframes required by applicable law.

7. Third-Party Data Sharing

We may share personal data with trusted third parties for the purposes outlined in this policy:

Service Providers: We may share data with vendors who assist in providing our services, such as payment processors and travel partners.
Legal and Compliance: We may share data as required by law or to protect our legal rights.
Business Transfers: If our business is sold or merged, data may be transferred to the new owner, in accordance with this policy.

8. International Data Transfers

If your data is transferred outside of your country, we ensure that adequate safeguards are in place to protect your data in compliance with applicable laws.

9. Cookies and Tracking Technologies

We use cookies and similar technologies to enhance your experience on our website and to collect data on usage patterns. You can manage cookie preferences through your browser settings.

10. Data Protection Officer

We have appointed a Data Protection Officer (DPO) responsible for overseeing compliance with this policy and data protection laws.

11. Policy Updates

We may update this policy periodically to reflect changes in our data practices or legal requirements. Updated versions will be posted on our website with the effective date.