Privacy policy
Last updated: 3 August 2026 · policy version privacy-2026-08-03
Information we collect
When you send an enquiry, we collect your name, email address, optional phone number, message and the tour you asked about. When you submit a review, we collect your display name, email address, rating and review. Review email addresses are never published.
Consent choices
Submitting an enquiry requires consent for us to process the details needed to answer it. Marketing consent is separate, optional and never required to send an enquiry. Review submission separately requires private moderation consent and permission to publish the display name, rating and review after approval. We store the policy version, choices and server-side capture time as private evidence.
How we use it
We use enquiry details to respond, arrange travel services and maintain an operational history. If you separately opt in to marketing, we may send occasional trip-planning updates until you withdraw that choice. Reviews are held for moderation and are published only after approval. We do not sell personal information.
Analytics
Our first-party operational measurement stores daily aggregate event counts without contact details, messages, IP addresses or raw search terms. Optional third-party analytics and field performance measurement remain disabled until privacy review is explicitly enabled.
Retention and deletion
Closed enquiries and rejected, spam or retracted reviews are deleted after the configured retention period, normally 730 days. Authorized staff can also perform an audited deletion for a verified privacy request. Consent evidence follows the submission's retention lifecycle.
Access, withdrawal and requests
To request access, correction or deletion, or to withdraw optional marketing consent, email info@camelliatours.vn. We may need to verify that the request concerns your information before acting.
Security
Private form submissions and consent evidence are available only to authorized staff. Access, exports, lifecycle changes and privacy deletions are capability-restricted and audited.