Privacy Policy

Who handles your data

Thiên nhiên Travel, an independent bus ticketing service based in Ho Chi Minh City, Vietnam, decides what happens to the personal data described in this policy. Data protection enquiries go to hello@thiennhientravel.com (placeholder).

We aim to meet Vietnam's personal data protection rules under Decree 13/2023/NĐ-CP. Where you are covered by the GDPR or the UK GDPR, the rights below are the ones we honour by email; we do not yet maintain a formal EU representative.

What we collect

Browsing the site

Reading routes, schedules and guides needs nothing about you. Your browser downloads a static index of route and timetable data so search works instantly, and that index holds no personal information. There are no accounts to register and no comments to post.

Once the site is deployed, our hosting provider records the ordinary technical details of each request: IP address, browser and device type, the page asked for, and the time. We use that for security and to keep the service running, not to build a profile of you.

Booking details you type

To arrange a trip we need: contact name, email address, phone number, the names of the passengers travelling, the route and date, the seats you picked, your pickup and drop-off points, and which payment method you chose.

We do not ask for and should never receive:

• card numbers, CVV codes, online banking logins;
• passport, ID card or national identity numbers;
• health details or anything else sensitive about you;
• your precise location. City-level choices only.

Messages

The newsletter box sends your email address to us so we can mail you route updates, and it is stored until you ask to be removed. The contact form on this preview build does not transmit anything yet; until it does, email us directly at the address below.

Where booking data lives

A booking creates two copies, and they are not the same thing:

• Your progress through the booking steps stays in your browser's own storage (the keys tn-booking-draft and tn-bookings), which is why the confirmation and lookup pages can show your reference on this device instantly.
• The submitted request is also written to our booking database on Cloudflare, so our staff can see it and follow up. Access is limited to the people handling bookings, and the lookup page only returns a record to a browser holding the token issued with that booking.
• The seat availability shown in this preview is generated from sample timetable data. No bus operator is contacted and no ticket is issued by this site yet.
• When confirmation email or staff notification is configured, the booking reference and trip details are sent through those channels. They never include card data.

Why we use it

• To arrange the ticket you asked for, which means passing the trip details to an operator.
• To contact you about that booking: confirmation, a price change, a pickup point move, a cancellation.
• To answer a message you sent us.
• To keep records where Vietnamese law asks us to, such as transaction documentation.
• To send route updates if you subscribe, until you unsubscribe.

We do not sell personal data, do not share it with advertisers, and do not make automated decisions about you or build behavioural profiles.

Who sees it

• The bus operator running your trip. They need passenger names, a phone number, your seats and your pickup point to let you board and to issue the ticket.
• Our service providers. Hosting, form delivery and, later, payment processing. Each handles only the data needed for its job and under its own terms.
• Our staff. Only the people processing bookings and answering support.
• Authorities, where Vietnamese law requires it. A court order, not a curiosity.

Where it is processed

We operate and store booking data in Vietnam. If a provider processes data outside Vietnam, such as a payment gateway or a form service, we rely on the contract terms they offer for that transfer and we keep what we send to the minimum the task needs.

How long we keep it

• On your device: until you clear the site's data in your browser, or use your browser's private mode which drops it when the window closes.
• A booking request we receive: while the trip is pending, then as long as our accounts and the operator's records require. Ask us to delete it sooner and we will, unless the law requires us to keep it.
• A support message: while we handle it and for a short period after, so a follow-up call makes sense.
• Newsletter email: until you unsubscribe or ask us to remove it.

Your rights and choices

You can ask us to confirm what we hold about you, correct it, delete it, or stop using it for a particular purpose. Email hello@thiennhientravel.com (placeholder) with your booking reference if you have one. We answer within 15 days and say no when the law makes us keep something.

To remove what this site saved on your device:

1. Open your browser's settings for site data and find this domain.
2. Choose to delete or clear the stored data. That removes the booking draft, your saved references and any details attached to them.
3. Nothing you delete here affects records already held by an operator.

You can also search and browse without giving us your name, and pay on departure rather than online if you would rather not. If you are in the European Economic Area or the UK, you may complain to your data protection authority; in Vietnam, complaints on personal data protection go to the data protection authority under Decree 13/2023/NĐ-CP.

Cookies and tracking

This site sets no cookies of its own. We count visits with Cloudflare Web Analytics, which works without cookies: it reports page views and referrers in aggregate, does not fingerprint your device and does not follow you across other sites. Advertising, social media and video embeds are not loaded, which is why there is no consent banner: there is nothing non-essential to agree to. Fonts and icons are served from our own build rather than a third-party CDN, so visiting a page does not tell an external company you were here.

The booking flow uses browser local storage instead of cookies. It is the same idea with different mechanics: data sits on your device, and you control it the way described above.

Security

The site is served over HTTPS. We collect the smallest set of details that still gets a ticket issued, keep card data off this site entirely, and limit staff access to bookings to the people who need it. No system is perfect, so please do not send passport scans or payment credentials to us by email.

Children

This site is not aimed at children, and we do not knowingly collect their data. Someone aged 18 or over should make the booking and supply contact details for a child travelling.

Changes to this policy

We update this page when the service changes and revise the date at the top. A real change in what we collect, such as a new payment flow, gets more than a quiet edit: we mark it here and tell people booking with us.

Contact

Data questions, deletion requests, or anything else on this policy: hello@thiennhientravel.com (placeholder), +84 90 000 0000 (placeholder), or the contact page. Our booking and service rules sit in the Terms & Conditions.