1. Introduction
This Privacy Policy explains how Eddytrip Trading Service Company Limited ("Eddytrip", "we", "us", "our") collects, uses, discloses, and protects personal information about you when you use the Eddytrip website, mobile applications, and services (collectively, the "Services").
We are committed to handling personal data responsibly and in line with applicable laws including Vietnam's Decree 13/2023/ND-CP on Personal Data Protection (PDPD), the European Union General Data Protection Regulation (GDPR), and India's Digital Personal Data Protection Act 2023 (DPDP), to the extent each applies to you.
2. Who we are (data controller)
Eddytrip Trading Service Company Limited is the data controller for personal information collected through our Services. Our registered address is Cửa Lấp, Dương Tơ, Phú Quốc Special Zone, An Giang Province, Vietnam. Tax Code: 1702361400.
For any privacy-related question, contact legal@eddytrip.com.
3. What personal data we collect
Depending on how you use our Services, we may collect:
- Identity data: name, nationality, passport number, visa information, date of birth, photograph (selfie verification).
- Contact data: email address, phone number, accommodation address while in Vietnam.
- Account & usage data: account credentials, language preference, booking history, support communications.
- Transaction data: payment method details (processed by payment processors), purchase records, refund history.
- Device & technical data: IP address, device type, operating system, browser type, mobile carrier and eSIM identifiers, app version, crash reports.
- Location data: approximate or precise location when you grant permission and use location-dependent features.
4. How we collect personal data
We collect personal data directly from you (when you create an account, complete identity verification, make a booking, or contact us), automatically through your use of the Services (cookies, device identifiers, server logs), and from third parties (verified partners providing services to you, payment processors, identity verification providers).
5. Why we use personal data (legal bases)
- To provide the Services: account creation, identity verification (Trust Badge), booking, fulfilment, customer support. Legal basis: contract performance.
- To comply with law: tax records, anti-fraud, regulatory reporting, response to lawful government requests. Legal basis: legal obligation.
- To improve and secure the Services: analytics, fraud prevention, debugging, abuse detection. Legal basis: legitimate interests.
- For communications: service updates, transactional emails, support replies. Legal basis: contract performance and legitimate interests.
- For marketing (optional): only with your consent. You can withdraw consent at any time.
6. Sharing personal data
We share personal data only when necessary and with appropriate safeguards:
- Verified local partners who deliver services you book (e.g., a verified rental shop fulfilling your scooter booking) — limited to the minimum data needed.
- Payment processors and financial partners who process transactions on our behalf.
- Identity verification and fraud-prevention providers.
- Hosting, analytics, communications, and infrastructure vendors bound by confidentiality and data-protection terms.
- Authorities, regulators, courts when required by law.
We do not sell personal data to third parties.
7. International transfers
Eddytrip operates primarily in Vietnam, but data may be processed by vendors located in other countries. Where personal data is transferred outside Vietnam, the EU/EEA, or India, we use appropriate safeguards (such as standard contractual clauses, adequacy decisions where applicable, and contractual data-protection commitments).
8. Retention
We retain personal data only as long as necessary for the purposes set out in this policy, to comply with legal obligations (e.g., tax and accounting records), to resolve disputes, and to enforce our agreements. Identity verification records are typically retained for the duration of your account plus a defined post-closure period required by applicable law.
9. Your rights
Subject to applicable law, you have rights including:
- Access to your personal data.
- Correction of inaccurate data.
- Deletion (subject to retention requirements).
- Restriction of processing.
- Data portability.
- Withdrawal of consent (for processing based on consent).
- Objection to processing based on legitimate interests.
- Lodging a complaint with a supervisory authority — in Vietnam, the Ministry of Public Security (under Decree 13); in the EU/EEA, your local data-protection authority; in India, the Data Protection Board.
To exercise any of these rights, write to legal@eddytrip.com. We will respond within the timeframes required by applicable law.
10. Security
We use reasonable technical and organisational measures designed to protect personal data against unauthorised access, alteration, disclosure, or destruction. These include encryption in transit, access controls, audit logging, and staff confidentiality obligations. No system is ever completely secure; you also have a role in protecting your account (strong passwords, not sharing credentials, prompt reporting of suspected misuse).
11. Children
The Services are not directed at children under 16. We do not knowingly collect personal data from children under 16 without parental consent. If you believe a child has provided us with personal data, please contact legal@eddytrip.com and we will delete it.
12. Cookies and similar technologies
We use cookies and similar technologies as described in our Cookie Policy. You can manage cookie preferences through your browser settings.
13. Changes to this policy
We may update this Privacy Policy from time to time. Material changes will be communicated through the Services. The "Last updated" date at the top of this page reflects the most recent revision.
14. Contact
For any privacy-related question, request, or complaint, write to legal@eddytrip.com or to our registered address listed above.
Questions about this policy? Write to legal@eddytrip.com.