Privacy Policy

1. Who we are

The Platform is operated by EDDYTRIP TRADING SERVICE COMPANY LIMITED (CÔNG TY TNHH THƯƠNG MẠI DỊCH VỤ EDDYTRIP) (“Eddy Trip”, “we”, “us”, or “our”), a company registered under business registration number 1702361400, with its registered office at Tổ khu phố Cửa Lấp, Phường Dương Tơ, Đặc khu Phú Quốc, Tỉnh An Giang, Việt Nam. For the purposes of applicable data protection laws, Eddy Trip is the controller of the personal information described in this policy, except where we act as a processor on behalf of our suppliers or connectivity partners.

If you have any questions about this policy or your personal information, contact us at legal@eddytrip.com.

2. Scope & service availability

The Eddy Trip app is available to download in countries where the Apple App Store and Google Play Store operate. However, individual services are offered only where we are permitted to provide them.

eSIM availability. In some countries, the sale or use of eSIM and mobile connectivity services is restricted or prohibited by local law or regulation. Where that is the case, the eSIM service will not be available to you, and we will not offer it or collect eSIM-related identity information from you in that country. Our other services may still be available.

Travel services. Flights, vehicle rentals, daily tours, attraction tickets, and airport transfers are currently focused on travel to and within Vietnam, and may be purchased by travelers regardless of their home country, subject to supplier availability.

This policy applies to all users of the Platform worldwide. Where local law gives you additional rights, those rights apply in addition to this policy.

3. Information we collect

We collect the categories of information below. The exact information collected depends on which services you use; for example, we only collect identity-verification information if you purchase an eSIM in a country where that is required.

4. How we use your information

We use personal information to:

• create and manage your account and authenticate you;
• provide, fulfil, and confirm your purchases, including transmitting necessary details to suppliers and connectivity partners;
• verify your identity where required by law before issuing an eSIM (Section 5);
• process payments, issue receipts, and manage refunds, changes, and cancellations;
• provide customer support and respond to your requests;
• send service messages (booking confirmations, activation details, important notices);
• send marketing communications where permitted, which you can opt out of at any time;
• operate, secure, debug, and improve the Platform, including analytics and fraud prevention;
• comply with legal, tax, regulatory, and telecommunications obligations; and
• establish, exercise, or defend legal claims.

Where the EU/UK GDPR or a similar law applies, our legal bases are: performance of a contract with you; compliance with a legal obligation (including telecom identity-registration rules); your consent (for example, optional location and marketing); and our legitimate interests in operating, securing, and improving the Platform, balanced against your rights.

5. eSIM identity verification (KYC)

When you purchase an eSIM in a country that requires identity registration, we collect the identity information described in Section 3.1 and use it solely to: verify your identity, register the subscription as required by law, activate and support your eSIM, and meet our legal and regulatory obligations. We share the minimum necessary identity information with our connectivity partners and, where required, with relevant authorities.

We retain identity-verification information only for as long as required by applicable telecommunications and record-keeping laws, after which it is deleted or anonymized (see Section 9). If eSIM service is not available in your country, we do not collect this information.

6. How we share information

We do not sell your personal information. We share it only as described below:

• Suppliers and operators who fulfil your bookings (airlines, tour and activity operators, attraction and ticketing providers, rental and transfer providers), limited to what is needed to deliver the service.
• Connectivity partners that provision and support eSIM service, including identity information where required by law.
• Payment providers that process your transactions securely.
• Identity-verification providers that help us perform required KYC checks.
• Service providers that support our operations, such as cloud hosting, customer support tools, analytics, communications, and security.
• Authorities and legal recipients where required by law, legal process, or to protect rights, safety, and the integrity of the Platform.
• Corporate transactions: in connection with a merger, financing, acquisition, or sale of assets, subject to this policy.

We require our service providers to protect your information and to use it only to provide services to us.

7. Third-party services & links

The Platform may link to or integrate third-party websites, suppliers, and services that have their own privacy practices. When you book a service operated by a supplier, that supplier may process your information as an independent controller under its own policy. We are not responsible for third parties’ privacy practices, and we encourage you to review their policies.

8. International data transfers

We operate globally and may process and store your information in countries other than your own, including Vietnam, Singapore, and other countries where we or our service providers operate. These countries may have data-protection laws that differ from those in your country.

Where we transfer personal information out of the EEA, the UK, or another region with transfer restrictions, we use appropriate safeguards such as the European Commission’s Standard Contractual Clauses (and the UK Addendum) or another lawful transfer mechanism. You may contact us for more information about these safeguards.

9. Data retention

We keep personal information for as long as needed to provide the Platform and for the purposes set out in this policy, then delete or anonymize it. Retention periods depend on the type of data:

• Account data — for as long as your account is active, then for a limited period afterwards.
• Booking and transaction records — for the period required by tax, accounting, and consumer-protection laws.
• eSIM identity-verification data — only for the period required by applicable telecommunications and record-keeping laws.
• Support and communications — for as long as needed to handle your request and for our records.

10. Data security

We use technical and organizational measures designed to protect personal information, including encryption in transit, access controls, and secure, access-restricted infrastructure. No method of transmission or storage is completely secure, so we cannot guarantee absolute security. Please keep your account credentials confidential and notify us promptly of any suspected unauthorized use.

11. Your rights & choices

Depending on where you live, you may have the right to: access a copy of your personal information; correct inaccurate information; delete your information; restrict or object to certain processing; withdraw consent; and request portability of your information. You also have the right to lodge a complaint with your local data-protection authority.

To exercise these rights, contact legal@eddytrip.com or use the in-app controls described in Section 12. We will respond within the time required by applicable law. We may need to verify your identity before acting on your request.

12. Account & data deletion

(a) opening the Eddytrip app and going to Profile → Delete account (confirm with the 6-digit email code); or (b) emailing legal@eddytrip.com from your registered email address; or (c) reading the guide at eddytrip.com/delete-account.

When you delete your account, login is disabled immediately. Your profile and booking history are kept for 90 days so you can reactivate by signing in again and opening the reactivation link we email you. After 90 days without reactivation, remaining personal data is permanently removed or anonymised, except where we must retain records by law (for example, transaction records for tax purposes and eSIM identity records for the period mandated by telecommunications regulations).

13. Children’s privacy

The Platform is intended for adults and is not directed to children. We do not knowingly collect personal information from children under 16 (or the minimum age set by your local law). If you believe a child has provided us with personal information, contact legal@eddytrip.com and we will take appropriate steps to delete it.

14. Region-specific notices

15. Changes to this policy

We may update this policy from time to time. When we make material changes, we will update the “Last updated” date and, where appropriate, notify you in the app or by email. Your continued use of the Platform after an update means you accept the revised policy.

16. Contact us

For privacy questions or to exercise your rights:

EDDYTRIP TRADING SERVICE COMPANY LIMITED (CÔNG TY TNHH THƯƠNG MẠI DỊCH VỤ EDDYTRIP) (Eddy Trip)

Tổ khu phố Cửa Lấp, Phường Dương Tơ, Đặc khu Phú Quốc, Tỉnh An Giang, Việt Nam

Email: legal@eddytrip.com

Support: support@eddytrip.com