Privacy Policy

01 Data Controller

The services offered under Asia Travel Mates are operated by Asia Travel Mates Corp, registered in the Socialist Republic of Vietnam.

If you have any questions about this policy, or wish to exercise your data rights, you can reach our Data Protection Officer at privacy@asiatravelmates.com.

Registered address: Asia Travel Mates Corp · 3C69 Thanh Nien Street, Tan Vinh Loc Ward, Ho Chi Minh City, Vietnam.

02 What Personal Data We Collect

We collect personal data in three ways: what you give us directly, what is collected automatically when you use our website, and what we receive from trusted third-party services.

2.1 Directly Provided by You

• Enquiry and booking details — name, email, phone number, travel dates, group size, destination interests and any preferences you share with us.
• Travel documents — passport details and dietary or accessibility requirements, only when needed for a confirmed booking.
• Messages and correspondence — the content of emails, contact form submissions and WhatsApp conversations with our specialists.
• Payment details — processed by our payment partners; we do not store full card numbers on our own servers.

2.2 Automatically Collected

• IP address, browser type, device identifiers and system language.
• Pages viewed and general usage of our website, collected through standard analytics tools.
• Crash logs and performance metrics that help us keep the site running.

2.3 From Third Parties

• Authentication tokens from third-party sign-in services (such as Google or Apple), if you choose to use them.
• Fraud-prevention signals from security partners, used to protect against misuse.

2.4 What We Do Not Collect

We do not process sensitive personal data such as biometric patterns, religious beliefs, sexual orientation or health records — except where you specifically share dietary or accessibility needs with us for a journey, and only with your consent.

03 Why We Collect It

Under applicable data protection law, we rely on three legal bases to process your data:

You can withdraw consent at any time by contacting us — though this may affect our ability to send you updates or offers.

04 AI, Tools & Automation

We use a small set of digital tools and services to run our operations — analytics, email delivery, CRM and customer support systems. These tools help us respond faster and design better journeys, but they are not the source of our advice.

Our journey planning is done by people. When you write to us with a question about a route, a hotel, a cruise or a specific experience, the answer comes from a specialist in our team — not from an algorithm.

4.1 What We Do Not Do With Automation

• We do not use automated decision-making that produces legal or similarly significant effects on you.
• We do not profile you for advertising or sell behavioural data to third parties.
• We do not use AI to generate itinerary recommendations that we then present to you as human advice.

If you ever receive something that looks like a generic automated reply from us, please let us know. We take pride in personal correspondence, and we want to know when it slips.

05 How We Share Your Data

We share your personal data only where it is necessary to deliver the services you have asked for. This includes:

• Suppliers — hotels, cruise operators, transport providers, guides and restaurants that form part of your journey.
• Service partners — email delivery, CRM, analytics and payment processing providers who process data on our behalf under contract.
• Regulatory authorities — where required by law, regulation, or to respond to a lawful request.

We do not sell your data. We do not rent your email list. We do not share your information with third parties for their own marketing purposes.

06 Your Rights

Wherever you are in the world, we extend the same core rights to everyone whose data we handle. You have the right to:

• Access the personal data we hold about you.
• Rectify anything inaccurate or out of date.
• Delete your personal data, where we are not required by law to keep it.
• Restrict how we process your data in certain circumstances.
• Port your data to another service in a machine-readable format.
• Object to processing based on legitimate interests.
• Withdraw consent at any time, where processing is based on consent.

To exercise any of these rights, email privacy@asiatravelmates.com. We respond to every request personally, typically within 30 days.

07 Jurisdiction-Specific Clauses

7.1 European Economic Area and United Kingdom (GDPR / UK GDPR)

If you are located in the EEA or UK, you have the right to lodge a complaint with your local data protection authority. We process data on the legal bases described in Section 03, and we take the same care with international transfers as we do with data held in Vietnam.

7.2 Vietnam

We maintain strict compliance with Vietnam’s Decree on Personal Data Protection and the Law on Cyber Security. Our primary data is hosted on servers located in the Socialist Republic of Vietnam.

7.3 Other Jurisdictions

Where local privacy laws grant you additional rights — for example, under California’s CCPA or similar legislation — we will honour those rights on request. Contact us at privacy@asiatravelmates.com.

08 Security & Retention

We implement industry-standard administrative, physical and technical safeguards to protect your personal data. Access to your information is limited to the team members who genuinely need it to do their work.

We retain personal data only for as long as necessary to fulfil the purposes described in this policy. For legal, tax and dispute-resolution purposes, this generally aligns with a seven-year cycle. Where retention is no longer necessary, data is deleted or anonymised.

If you would like us to delete your data sooner, and we are not required by law to keep it, we will do so on request.

09 Changes to This Policy

We may update this policy from time to time to reflect changes in our practices, technology or legal obligations. When we make significant changes, we will notify you by email or by a prominent notice on this site.

The date at the top of this page shows when the policy was last revised. We recommend checking back occasionally if you would like to stay informed.

10 Contact Us

For any request regarding your personal data — access, correction, deletion or any other matter covered by this policy — please write to us. We treat every privacy enquiry personally.