Privacy Policy of Legend Travel Group
Last Updated: September 10, 2025
Legend Travel Group is committed to protecting the privacy and security of your personal information in accordance with applicable laws, including the Vietnamese Constitution of 1992 (as amended in 2001), the Personal Data Protection Decree No. 13/2023/ND-CP, and international standards such as the General Data Protection Regulation (GDPR) where applicable to our operations. This Privacy Policy outlines how we collect, use, disclose, store, and protect your personal information. By using our websites, services, or interacting with us, you consent to the practices described in this policy.
1. Introduction
This Privacy Policy explains our practices regarding the collection, use, disclosure, and protection of personal information. We value your privacy and aim to handle your data transparently and responsibly. Personal information refers to any data that identifies or can be used to identify an individual, such as your name, contact details, or other identifiers.
Legend Travel Group operates in the travel and tourism sector, providing services across Southeast Asia, including Vietnam, Cambodia, Laos, Thailand, Myanmar, and Malaysia. This policy applies globally to all individuals interacting with us, ensuring compliance with local and international privacy standards.
We may update this policy from time to time to reflect changes in our practices or legal requirements. Any material changes will be notified via our website homepage or email, and the updated policy will be posted here with the revised "Last Updated" date.
If you have any questions or concerns about this policy, please contact us using the details provided in the Contact Information section.
2. Scope
This Privacy Policy applies to all external parties, including:
- Visitors to Legend Travel Group's websites and social media pages.
- Subscribers to our briefings, newsletters, and marketing materials.
- Individuals whose personal information is collected, stored, or used by Legend Travel Group or our partners.
- Any other persons interacting with our services.
It also governs the management of personal information across all Legend Travel Group offices, both in Vietnam and internationally.
This policy does not apply to the privacy practices of third-party websites linked from our sites or services provided by external partners, unless explicitly stated. We encourage you to review the privacy policies of those third parties.
3. How We Collect Personal Information
We collect personal information only through lawful and fair means, where it is reasonably necessary for or directly related to our business functions under Vietnamese privacy laws and international standards.
Our usual practice is to collect information directly from you during interactions such as:
- Making an inquiry via phone, letter, email, in-person, or online.
- Registering an account on our websites.
- Subscribing to newsletters or requesting brochures.
- Applying to attend or exhibit at our events.
- Entering promotions or competitions.
- Engaging in business dealings (e.g., as a job applicant, employee of a service provider, government agency contact, or volunteer).
Where practicable, you may choose to interact anonymously or use a pseudonym. However, this may limit our ability to provide certain services.
We may also collect information indirectly through third parties, such as partners or public sources, but only with your consent or as permitted by law.
At or before the time of collection (or as soon as practicable thereafter), we will provide a collection notice detailing the purpose of collection, how we use the data, and your rights.
4. Types of Personal Information We Collect
The personal information we collect depends on the nature of your interaction with us and may include:
- Basic Identifiers: Name, address, email address, phone number, age group.
- Contact and Preferences: Details about your travel interests, holiday preferences, and customization requests.
- Booking and Payment Details: Travel dates, itineraries, payment information (e.g., credit card number, type, expiry date, CSC, billing address).
- Photographic and Media Information: Images or videos from events or interactions.
- Opinions and Feedback: Views on our services, complaints, or survey responses.
- Business Contacts: Professional details if you engage with us in a business capacity.
- Employment-Related Data: For job applicants, employees, or contractors (e.g., resumes, references).
- Usage Data: IP address, browser type, referring sites, pages visited, and interaction logs for website analytics.
- Location and Device Data: If you enable location services or use our apps.
For travelers registering for e-newsletters or accounts, we collect data to personalize content, such as your preferred holiday types.
We do not collect sensitive information (e.g., health data, racial origin) unless necessary for your travel arrangements and with your explicit consent.
5. How We Use Personal Information
We use your personal information primarily for the purpose for which it was collected, or as otherwise permitted by law. Examples include:
- Fulfilling your requests, such as managing bookings, sending newsletters, or providing customized web experiences.
- Communicating with you about your account, bookings, or inquiries.
- Marketing and promotional activities, including sending information about travel opportunities (with opt-out options).
- Handling complaints, research, forecasting, and improving our services.
- Employment and recruitment purposes.
- Notifying you of changes to our services or policies.
- Enforcing contracts and protecting our rights.
We may use data for secondary purposes related to the original collection if you would reasonably expect it, such as quality assurance or public education.
We will not use your information for unrelated purposes without your consent, unless required by law, court order, or for enforcement activities.
6. Disclosure of Personal Information
We disclose personal information only as necessary and with appropriate safeguards. Recipients may include:
- Internal Teams: For operational purposes.
- Service Providers: Contractors, IT consultants, marketing agencies, publishing houses, and payment processors bound by confidentiality agreements.
- Business Partners: State and territory tourism authorities, travel service providers (e.g., hotels, airlines), and co-marketing partners under formal contracts.
- Government Entities: Commonwealth ministers or agencies as required.
- Third Parties with Consent: For the purposes you authorize.
We do not sell your personal information. Special protections apply to booking information: We do not disclose booking status, linkages, or identifiers without explicit customer consent, as this could reveal confidential preferences.
Disclosure occurs only:
- To fulfill the collection purpose.
- With your consent.
- As required or authorized by Vietnamese law, international agreements, or enforcement bodies.
7. Disclosure of Personal Information Overseas
As part of our global operations, we may transfer personal information to countries where we have offices or partners, including Cambodia, Laos, Thailand, Vietnam, Myanmar, Malaysia, and the United States (for server hosting).
We ensure overseas recipients comply with standards substantially similar to Vietnamese privacy principles or equivalent international frameworks (e.g., GDPR). Transfers occur only if:
- The recipient is bound by similar privacy laws with enforcement mechanisms.
- You provide informed consent.
- It is required by law or international agreement.
- Necessary for enforcement activities.
Data is stored on secure servers in the US and our overseas locations, protected by robust IT security measures.
8. Security of Personal Information
We take data security seriously and implement physical, electronic, and administrative safeguards, including:
- Firewalls, encryption, and access controls for electronic records.
- Secure storage for paper records.
- Employee confidentiality obligations and training.
- Regular security audits and updates.
Despite these measures, no system is entirely secure. We cannot guarantee absolute security for internet transmissions, but we strive to protect against unauthorized access, use, alteration, or disclosure.
9. Access and Correction of Personal Information
You have the right to access, correct, or delete your personal information under applicable laws. To do so:
- Log into your account profile on our website.
- Submit a written request to our Manager, Legal and Governance, including your details and the information sought.
We will verify your identity and respond within 30 days. If access or correction is refused, we will provide reasons and complaint options. There is no fee for reasonable requests.
10. Online Privacy Issues
When visiting our websites, we record visit data for personalization, research, statistics, and improvements. This includes IP addresses, referring sites, and pages viewed, but we do not link this to identifiable information unless required by law (e.g., for investigations).
You can browse anonymously, but providing personal information (e.g., for registrations) requires notice and consent. To unsubscribe from communications, use the link in emails or contact us.
We do not collect personal information from social media without consent.
11. Cookies and Tracking Technologies
Our websites use cookies and session tools to enhance your experience, remember preferences, and analyze trends. Cookies are small files stored on your device; no personal information is stored in them.
You can manage cookies via browser settings, but disabling them may affect site functionality. By using our sites, you consent to cookie use.
We may use third-party analytics (e.g., Google Analytics) subject to their privacy policies.
12. Online Security
We update security measures regularly to protect online submissions. However, internet transmissions carry inherent risks. Use alternative methods (e.g., post, phone) if concerned.
Links to third-party sites are for convenience; we are not responsible for their privacy practices.
13. Complaints
If you believe we have mishandled your personal information, submit a written complaint via email or post using our contact details. We will respond within 30 days.
If unsatisfied, you may escalate to the Vietnam Ministry of Information and Communications or relevant international authorities (e.g., under GDPR).
14. Children's Privacy
We do not knowingly collect personal information from children under 16 without parental consent. If we discover such data, we will delete it promptly.
14. Changes to This Privacy Policy
We review and may amend this policy periodically. Changes will be posted on our website, with notifications for material updates. Continued use of our services constitutes acceptance of the revised policy.
16. Contact Information
For questions, access requests, corrections, complaints, or unsubscribes, contact:
- Email: info@legendtravelgroup.com
- Post: 4F Building, Trung Hoa Street, Yen Hoa Ward, Hanoi City, Vietnam
- Phone: +84 (0) 825 862 222
Approved by the CEO of Legend Travel Group.