Effective 6 August 2026 · Version 2026-08-06
1. Who holds your data
- Holi Wellness Travel — operator of holiwellnesstravel.com
- Data protection contact: info@holiwellnesstravel.com
We act as the personal data controller for the information you provide on this website. We operate under the laws of Vietnam, including the Law on Personal Data Protection No. 91/2025/QH15 and Decree 356/2025/ND-CP.
2. What we collect
| Category | Details | When |
|---|---|---|
| Contact details | Name, email, phone number, country | When you request a consultation, download a guide or send an enquiry |
| Trip planning details | Travel dates, treatment interest, companions | When you ask us to prepare an itinerary |
| Browsing behaviour data | Pages viewed, time on page, referring source | Only after you click accept on the consent banner |
| Messages you send us | Enquiries, attachments | When you contact us |
Browsing behaviour data is classified as sensitive personal data under Article 4 of Decree 356/2025/ND-CP. We therefore collect it only with your consent, and you can withdraw that consent at any time via the «Privacy» button in the corner of the screen.
Health information. Holi Wellness Travel is a travel operator, not a medical provider. We do not diagnose, treat or give medical advice. If you choose to share health details so that we can coordinate with a hospital or clinic, we pass them only to the specific licensed provider you have selected, and only with your instruction.
3. Why we use it
- To answer your enquiry and prepare the itinerary or quotation you asked for.
- To coordinate bookings with airlines, hotels, insurers and the licensed medical providers you select.
- To send you knowledge emails and service offers — only if you ticked that specific box.
- To measure and improve our website content — only with your consent.
- To meet our accounting, tax and travel-industry record-keeping obligations.
4. We never buy or sell personal data
We do not buy, sell or trade your personal data with anyone. This is prohibited under Article 7(6) of Law 91/2025/QH15, and it is also our own standing rule.
We share your data only with: (a) technical providers that help us operate, under contracts containing data protection terms; (b) the specific partners delivering the service you booked — airline, hotel, insurer, medical provider; (c) government authorities where the law requires it.
5. Where your data is stored
We use services whose servers are located outside Vietnam: GetResponse (email lists), Google (analytics, documents, calendar), Meta (messaging, advertising), Pancake (message and order handling). Cross-border transfers are handled under Article 20 of Law 91/2025.
6. How long we keep it
- Email subscription details: until you unsubscribe or ask us to delete them.
- Booking records and accounting documents: for the period required by Vietnamese accounting and tax law — even if you ask for deletion, we must retain these records for audit purposes.
- Identity documents used for flight, hotel or insurance bookings: kept within the trip file for the period above, used for nothing else.
- Browsing behaviour data: up to 14 months.
7. Your rights
Under Law 91/2025 you have the right to: be informed · give and withdraw consent · access · correct · delete · restrict processing · obtain a copy of your data · object to processing · complain, denounce or bring legal action · claim compensation for damage.
To exercise them, email info@holiwellnesstravel.com. Our deadlines:
| Your request | We acknowledge within | We complete within |
|---|---|---|
| Withdraw consent · restrict · object | 2 working days | 15 days |
| Access, correct, receive a copy | 2 working days | 10 days |
| Delete your data | 2 working days | 20 days |
Deadlines set by Article 5 of Decree 356/2025/ND-CP.
8. If something goes wrong
In the event of a data breach we notify the competent Vietnamese authority within 72 hours of discovery, and we notify you directly if the incident affects you.
9. Changes to this policy
We update the date and version number at the top of this page whenever we revise it. If a change widens how we use your data, we will ask for your consent again rather than apply it silently.