Legal

Privacy Policy

Last updated:

This Privacy Policy explains how we process personal data when you use nha-trang.vn (the "Site"), operated by CÔNG TY TNHH BESPALOV IN VIETNAM (Số ĐKKD/MST: 4201947140), registered at Lô 21 LK8-5 đường số 16, khu đô thị Mỹ Gia gói 8, Xã Vĩnh Thái, Thành phố Nha Trang, Tỉnh Khánh Hòa, Việt Nam (the "Operator", "we", data controller). It is drafted with regard to the law of Vietnam, including the Law on Personal Data Protection No. 91/2025/QH15 and Decree No. 356/2025/NĐ-CP.

Who we are and scope

This policy applies to personal data processed through the Site: data of visitors, of registered users, of people who send us a Submission, and of third parties whose information appears in content the Site republishes from public sources (see "Aggregated Content" below).

The short version

For ordinary visitors we collect almost nothing: no analytics trackers, no advertising cookies, no profiles. The Site also displays information about third parties taken from public sources; if that includes your data, the "Your rights" section below explains your options.

Data of visitors (no account)

Browsing the Site requires no registration. We do not load third-party analytics or advertising scripts and set no tracking cookies. Our infrastructure keeps standard technical server logs (IP address, user agent, requested URL) for security and troubleshooting; they are not used to profile you.

The "online now" counter uses a random session identifier generated in your browser; it is kept only in server memory for a few minutes, is never written to a database, and is not linked to you.

Cookies and local storage

The Site stores in your browser: your interface language, your favourites list, sign-in tokens (if you sign in), and a draft of a listing you are composing. One functional cookie exists in the admin interface, and a short-lived technical cookie is used during optional social sign-in.

We use no non-essential cookies, so no cookie-consent banner is required; this section is our cookie notice. If this ever changes — for example if analytics or advertising is introduced — we will update this policy and, where required, ask for your consent first.

Account data

If you create an account, we process: your email address, your password (stored as a hash), your display name, and an optional avatar. If you use social sign-in (such as Telegram, Google, Facebook or Zalo), we receive the identifier and basic profile data the provider shares with us. This data is used to operate the account and is deleted when the account is deleted, except records we must keep by law.

Submissions

If you send us material for publication, including via the submission channel linked from the Site, we process the content and the contact details you choose to include, in order to review and publish your offer. Publishing your contact details is the purpose of a listing — include only the channels you want shown publicly.

Aggregated Content and data of third parties

The Site republishes, in structured and often translated form, offers, announcements and discussion content originally published in public sources — including social networks, messaging platforms, mapping services and many others. This includes items shown in classifieds, rentals, jobs, events, the news & city-digest section, and the community discussion section.

Such Aggregated Content may include personal data of its original authors — typically a name or alias, a public username, and sometimes a phone number that the author published themselves in order to be contacted about their offer. We process this data to present the offer or item in the way its author made it public; we do not use it for marketing, enrichment or profiling, and we do not sell it.

We treat this processing as compatible with the purpose the author themselves pursued by publishing the information — being found and contacted about their offer — and we apply the safeguards described in this policy, including data minimisation, the retention limits in the "Retention" section, and the removal channel in "Your rights" below.

Automated processing and AI

Content, including personal data of third parties it may contain, is processed by automated tools, including AI models operated by our providers, for classification, extraction, translation and quality scoring, and for aggregate analysis of publicly available reviews. We make no automated decisions that produce legal effects for individuals.

Purposes and grounds for processing

We process personal data for the following purposes and on the following grounds:

  • Account data — to provide and secure your account, on the basis of our contract with you (these Terms) and, for social sign-in, your action of connecting the provider.
  • Submissions and their contact details — to review and publish your offer, on the basis of our contract with you and your explicit choice to include those details.
  • Aggregated Content, including third-party data within it — to present offers and community content in the way they were originally made public, on the basis described above.
  • Technical logs and the presence counter — kept only as necessary for security, abuse prevention and service operation, a processing purpose recognised under Vietnamese data-protection law.

Sharing and processors

We share data only with: hosting and infrastructure providers; AI providers (currently Anthropic PBC and/or OpenAI) that process message and listing text for classification, extraction and translation; and Apify, which helps us collect publicly available business information (such as places and reviews) shown on the Site. Processors act on our documented instructions and may not use the data for their own purposes.

We do not sell personal data. We disclose data to Vietnamese state authorities when a lawful request requires it.

Cross-border transfers

Processing by our providers may take place outside Vietnam, including in the United States and, where applicable, other jurisdictions. Such transfers are carried out under the requirements of the PDPL, including cross-border transfer assessment procedures where the law requires them.

Your rights, and removal of third-party data

Under Vietnamese data-protection law you may request access to, correction of, deletion or restriction of, your personal data, object to its processing, and withdraw consent where processing is based on consent.

If a listing, a community-section item or any other part of the Site shows your contact details or other personal data and you want it corrected or removed, contact us at [privacy@nha-trang.vn] or by phone. We aim to act on verified requests within 72 hours, and in any event within the timeframe required by law. We may ask you to verify your identity or your connection to the content. Complaints may also be addressed to the competent Vietnamese data-protection authority.

Retention

Account data is kept for the life of the account. Published listings and other published Content are kept until unpublished, expired or archived. Raw ingested source material and rejected submissions are kept for up to 90 days, then deleted. Unpublished media is kept for up to 90 days. Technical logs are kept for up to 30 days. Moderation records are kept for up to 24 months for quality and legal-defence purposes. Backups follow the same limits on their normal rotation schedule.

Security

We use access controls and role separation, encrypted transport (HTTPS), password hashing, and isolated storage. No method of transmission or storage is completely secure, but we follow reasonable industry practice. If a breach affecting personal data occurs, we will notify the competent authority and affected users as required by law.

Children

The Site is not directed at children (under 16 years old under Vietnamese law). We do not knowingly collect children's personal data; accounts require the user to be at least 16. If you believe a child's data has reached us without appropriate consent, contact us and we will delete it.

Location data

We do not request or collect your device's geolocation. Maps on the Site show locations of businesses and offers; for private residential rental listings we aim to show an approximate area rather than an exact address.

Third-party services you may encounter from our pages

Map tiles are loaded from OpenStreetMap; partner booking pages (such as Viator) open on their own sites; links to community chat channels open in the corresponding messaging app. These services see your IP address when you use them and apply their own privacy policies.

Images on some place pages are loaded directly from third-party image hosts, including Google's, and certain page assets are loaded from third-party content delivery services. In both cases, the third-party host sees your IP address when the image or asset loads, in the same way as any other embedded third-party resource.

No marketing

We send no marketing emails or push notifications and run no advertising network on the Site. If this changes, we will ask for your consent first where required.

Changes to this policy

The current version and its date are always on this page; material changes are announced on the Site. Previous versions are available on request.

Contact

Data controller: CÔNG TY TNHH BESPALOV IN VIETNAM, Số ĐKKD/MST: 4201947140, Lô 21 LK8-5 đường số 16, khu đô thị Mỹ Gia gói 8, Xã Vĩnh Thái, Thành phố Nha Trang, Tỉnh Khánh Hòa, Việt Nam. Phone: 093-599-25-14. Privacy requests: [privacy@nha-trang.vn].

Site operator
CÔNG TY TNHH BESPALOV IN VIETNAM
Số ĐKKD/MST: 4201947140
Lô 21 LK8-5 đường số 16, khu đô thị Mỹ Gia gói 8, Xã Vĩnh Thái, Thành phố Nha Trang, Tỉnh Khánh Hòa, Việt Nam
093-599-25-14