Personal data protection policy

This policy applies to personal data that Tu Do Travel Trading and Service Company Limited (Tu Do Travel) collects through the Visa to Vietnam website (English and Vietnamese versions) and while providing advice, guidance, help filling in forms and help using online systems for visa and residence procedures of foreigners in Vietnam and for inviting or sponsoring a foreigner.

This policy follows the Law on Personal Data Protection No. 91/2025/QH15 (in force from 1 January 2026) and its implementing regulations. It applies to every user of the website, including foreigners outside Vietnam.

The organisation that decides the purposes and means of processing your data:

Company

Tu Do Travel Trading and Service Company Limited

Vietnamese name

Công ty TNHH TM&DV Du Lịch Tự Do

Tax ID

0310457526

Enterprise registration

No. 0310457526, first issued on 17 November 2010

International travel licence

No. 79-1032/2019/TCDL-GP LHQT

Registered office

Lầu 4, 102D Lê Thị Riêng, Phường Bến Thành, TP. Hồ Chí Minh

Email for personal data requests: support@dulichtudo.vn.

When you submit a form on the website

• Your name, phone number, email and preferred contact channel (phone, email, WhatsApp, Zalo and so on).
• Your answers about your situation: where you are now, nationality, purpose and planned length of stay in Vietnam, documents you already hold (visa, temporary residence card), number of people, the procedure or service you are interested in and anything you add. If you are the inviting or sponsoring party: your relationship with the foreigner and details of their trip.
• The page and language you submitted from, the time of submission and the request reference (case number) the system issues.

When you send documents

Copies of your passport, portrait photo, current visa or temporary residence card, and the sponsor’s papers (enterprise registration, ID card, proof of relationship) that you upload after submitting a form or send to our staff. The website only accepts PDF, JPG and PNG files of up to 4.5 MB each.

When you use our services

• Information needed to complete the e-visa application or the sponsor’s forms and letters: identity, passport, address, occupation, itinerary, place of stay in Vietnam and port of entry.
• Tu Do Travel does not collect payment card data: you pay government fees yourself on the official portal. The website has no payment step. Tu Do Travel does not collect biometrics (fingerprints).

Technical data

Your IP address and browser type when you submit a form, used to limit the number of submissions and block automated submissions (bots). When you press Submit, our hosting provider’s bot protection checks browser signals to tell people from automated programs.

Data we do not receive

The visa checker by nationality runs in your browser; your answers are not sent to our servers. Your cookie choice and form drafts stay on your device only — see the cookie policy.

• To contact you, give advice or a quote and answer your request.
• To provide the services you sign up for: advice, guidance, help filling in forms and help using online systems, within the agreed scope.
• To email you a confirmation with your case number (from visa@dulichtudo.vn, in the language of the page you used) and to contact you about the work in progress.
• To prevent spam, automated submissions and misuse of the website.
• To count visits and improve the website — only if you accept analytics cookies.
• To meet accounting and tax obligations under the law.

Legal basis: your consent (the consent box at the end of each form), the service contract between you and Tu Do Travel, and legal obligations. You may withdraw your consent at any time (see how to exercise your rights); withdrawal does not affect processing already carried out, but without the necessary data we may be unable to continue the service.

Tu Do Travel does not sell, rent or trade your personal data and does not use your documents for advertising.

• Forms pass through the website server (Vercel) to an automation system (n8n) and are then stored in the company’s Google Workspace: one Google Drive folder per request, one row in a tracking sheet on Google Sheets, an internal notification email and your confirmation email via Gmail.
• Documents you upload go straight into the folder for that request; each upload needs a one-time code the system issues when you submit the form.
• All connections use HTTPS. The address that receives the data is protected by a secret key and never shown in the browser. The website server does not write form content to its logs.
• Inside the company, only the staff handling your request, the accounting team (limited to invoicing data) and managers reviewing service quality can access it, on a need-to-know basis.

We only share data as far as needed to do what you asked:

• Vietnamese authorities through the official portals (the e-visa portal and the National Public Service Portal): when you ask for help filling in a form or using a system, the information you provide is entered on the official portal at your request and after you or your sponsor confirm it. You or your sponsor submit the application and pay the fees; Tu Do Travel does not submit applications at the Immigration Department or its provincial offices. The authorities process the data under their own rules.
• Your sponsor (a company, organisation or relative in Vietnam) — only the information needed for the letters and forms the sponsor must prepare, and with your consent.
• Infrastructure providers processing data on our behalf: Vercel (website hosting, bot protection), n8n (workflow automation), Google (Drive, Sheets, Gmail; Google Analytics only if you accept analytics cookies).
• Competent authorities when there is a lawful request.

Many users of Visa to Vietnam are outside Vietnam; the data they send through the website is transferred to Vietnam so that Tu Do Travel can process it and, where needed, enter it on Vietnam’s official portals.

The servers of our infrastructure providers may be located outside Vietnam. We only transfer the data needed for the stated purposes and complete the formalities for transferring personal data abroad required by Vietnamese law.

• Documents and data used for a service (passport copies, photos, sponsor papers, uploaded files and so on): deleted within 180 days after the service ends, or earlier if the contract says so.
• Enquiries that do not become a service: form data and documents sent are deleted within 180 days after the last contact.
• Minimum data for accounting and tax (name, address, tax code, phone number on the invoice): kept for the periods required by the Law on Accounting and tax law.
• Data in your browser: kept until you delete it; form drafts expire after 7 days.

You can ask for earlier deletion (see how to exercise your rights), except for data the law requires us to keep.

Under the Law on Personal Data Protection No. 91/2025/QH15, you have the right to:

1. Be informed about the processing of your personal data.
2. Give or refuse consent, and withdraw consent to the processing of your personal data.
3. Access and correct your personal data, or ask for it to be corrected.
4. Ask for your personal data to be provided, deleted or restricted, and object to its processing.
5. Complain, denounce, sue and claim damages in accordance with the law.
6. Ask the competent authorities or the organisations and individuals concerned to take measures to protect your personal data in accordance with the law.

Email support@dulichtudo.vn in English or Vietnamese with your name, the phone number or email you used on the form, your case number (if any) and your request (access, correction, deletion, withdrawal of consent and so on). We may ask for more information to verify your identity first. For urgent matters, call 0938 388 099 or use the contact page. Tu Do Travel replies within the time limits set by law.

For children and minors, information is provided and consent to processing is given by a parent or legal guardian in accordance with the law. People under 18 should not submit a form without the consent of a parent or guardian.

Although we apply reasonable safeguards, some risks cannot be fully excluded (technical incidents at third parties, force majeure). If we discover an incident that affects your data, we will promptly notify you and the competent authorities as required by law.

When this policy changes, the date at the top of the page is updated; important changes are announced on the website. This policy has a Vietnamese and an English version; the Vietnamese version is the original.