Privacy Policy

Last updated: 9 November 2026

This policy explains how Autour Asia collects, uses and protects your personal data when you visit autourasia.com, send us an enquiry or book a trip with us. We apply the principles of the EU General Data Protection Regulation (GDPR) to all our travellers, wherever they live.

1. Who is responsible for your data

Autour Asia, MAY Place, No. 38, Lane 113 Hoang Cau Street, Hanoi, Vietnam.
Email: [email protected]
Phone / WhatsApp: +84 971 33 77 08

2. What data we collect

• When you contact us or request a quote: your name, email address, phone number, country of residence, travel dates, number of travellers, budget, travel wishes and the message you write to us.
• When you book a trip: the details needed to organise it, such as the names and dates of birth of the travellers, passport and visa information and flight details. Only if you choose to tell us: dietary requirements or health information relevant to your trip (for example reduced mobility).
• Payments: payment confirmations and bank transfer details. Card payments are processed by the bank or by PayPal; we do not store your full card number.
• Our exchanges with you: emails, WhatsApp messages and notes of phone calls with your travel consultant.
• Browsing data: pages visited, type of device and browser, approximate location and how you reached our website, collected through cookies (see section 6).

3. Why we use your data and on what legal basis

• To answer your enquiry, prepare a tailor-made proposal, then organise, confirm and follow up your trip, including assistance while you travel. Legal basis: steps taken at your request before a contract, and performance of the contract.
• To issue invoices, meet our accounting and tax obligations and answer requests from the competent authorities. Legal basis: legal obligation.
• To improve our website, measure its audience and the results of our advertising, and protect it against abuse. Legal basis: our legitimate interest, or your consent where the law requires it.
• To send you travel news or offers, only if you have agreed to it. Legal basis: consent, which you can withdraw at any time.

Health information is used only to adapt your trip, with your explicit consent, and is shared only with the partners who need it.

4. Who receives your data

We never sell or rent your personal data. We share it only when necessary with:

• Our travel partners who provide the services you book: hotels, cruise operators, airlines, transport companies, local guides, visa services and partner agencies in the destinations.
• Technical service providers acting on our instructions: OVHcloud (website hosting, France), Cloudflare (content delivery and security), Google (email, Google Analytics, Google Ads, Google Tag Manager), Meta (Facebook pixel, WhatsApp), banks and PayPal (payments).
• Public authorities, when the law requires it.

5. Transfers outside the European Union

Autour Asia is based in Vietnam and your trip takes place in Asia. Your data is therefore processed in Vietnam and shared with our partners in the countries you visit (for example Vietnam, Cambodia, Laos, Thailand or Indonesia). These transfers are necessary to organise the trip you ask us for. Some technical providers (Google, Meta, Cloudflare) may process data in the United States, under the EU-U.S. Data Privacy Framework or the European Commission's standard contractual clauses.

6. Cookies and similar technologies

Our website uses:

• Necessary cookies, for security and for our forms to work.
• Audience measurement: Google Analytics 4, to understand how visitors use the website.
• Advertising: Google Ads and the Meta (Facebook) pixel, to measure the results of our ads and show them to people who have visited our website.

You can refuse or delete cookies at any time in your browser settings. You can also block Google Analytics with the Google Analytics opt-out add-on and manage personalised Google ads at myadcenter.google.com, and Facebook ads in your Facebook ad preferences.

7. How long we keep your data

• Enquiries that do not lead to a booking: up to 3 years after our last exchange, then deleted.
• Booking files, invoices and related correspondence: for the period required by accounting and tax law, and as long as needed to handle any claim.
• Passport and visa details: only as long as needed for the trip and the related formalities.
• Browsing data: according to the settings of each tool, at most 14 months for Google Analytics.

8. Your rights

You can ask to access your data, correct it or delete it, restrict or object to its use, receive it in a portable format, and withdraw your consent at any time. To do so, write to [email protected]. We reply within one month. If you believe your rights have not been respected, you can lodge a complaint with the data protection authority of your country.

9. Security

Our website is served only over a secure connection (HTTPS). Access to customer data is restricted to the staff who need it for their work, and we ask our partners to protect the data we send them.

10. Children

Our services are intended for adults. Information about children travelling with their family is provided by their parents or legal guardians and is used only to organise the trip.

11. Changes to this policy

We may update this policy, for example when we start using a new tool. The date at the top of this page shows the latest version.