Privacy policy
How this handbook handles visitor data — what is collected, how it is processed and how it is protected. Short version: the site is built to collect as close to nothing as technically possible, and this page explains exactly what "close to nothing" means.
1. Who is responsible
Vietnam Entry Point ("the site") is an independent, non-commercial publishing project operated by a private individual (see Publisher details). For any question about personal data or this policy, write to the editorial contact listed there.
2. Quick summary
- no registration, no user accounts, no payments, no document uploads;
- we never ask for names, passport numbers, home addresses or card details;
- technical server logs exist — as on every website — and are used only for security and anonymous statistics;
- third-party advertising (Google AdSense) and anonymous analytics may set cookies; you can opt out at any time;
- we never sell or trade personal data.
3. Data we never touch
The handbook is built so that sensitive data cannot leak, because it is never requested:
- identity documents — names, passport numbers, birth dates;
- application files — photos, forms, itineraries;
- payment instruments — cards, accounts, transfers;
- contact details entered anywhere in the interface — there are no forms to fill.
4. Data that is technically processed
Like every web server, ours records technical metadata when a page is requested: IP address, browser and device type, operating system, referring page, date and time, requested URL.
Why: security and abuse prevention, error diagnosis, and aggregate traffic statistics (which topics interest readers). Legal basis: legitimate interest in operating a safe, functional website. Retention: raw logs stay in short server rotation (typically days to a few weeks) and are never merged into a personal profile.
5. When you email us
If you write to the editorial address, your email address and message are processed solely to answer you and keep the correspondence thread. Messages are kept only as long as the conversation and reasonable follow-ups require, then deleted.
6. Cookies and similar technologies
The site uses:
- Strictly necessary storage — tiny bits of interface state (for example, the state of the mobile menu). These are required for the site to work and cannot reasonably be switched off.
- Analytics cookies — if enabled, they produce aggregated, anonymised statistics about page views. They do not identify you personally.
- Advertising cookies — set by third-party ad partners (see below) to control ad frequency, measure performance and, where you consent, personalise ads.
You can block or delete all cookies in your browser settings — the content remains fully readable either way.
7. Google AdSense and other advertising partners
The site may display ads served by Google AdSense and other third-party ad networks. Industry practice — and Google's own requirements — mean that:
- third-party vendors, including Google, use cookies (such as Google's DoubleClick DART cookie) to serve ads based on your prior visits to this website and/or other websites on the Internet;
- Google's use of advertising cookies enables it and its partners to serve ads to you based on your visit to this site and/or other sites on the Internet;
- you can opt out of personalised advertising at any time: visit Google Ads Settings, the industry opt-out pages aboutads.info/choices (US) or youronlinechoices.eu (EU), or turn off personalised ads in your Google account;
- users in the EEA and the UK are asked for consent before non-essential advertising cookies are set;
- Google's own privacy information: policies.google.com/technologies/ads.
Ad partners process data under their own privacy policies. We do not receive, store or combine that data ourselves.
8. Legal bases under the GDPR
- Legitimate interest — technical logs, security and anonymous statistics.
- Consent — analytics and advertising cookies where the law requires it; you can withdraw it at any time through your browser or the opt-out links above.
- There is no contract processing and no automated decision-making or profiling about you.
9. Sharing and international transfers
Personal data is not sold, rented or traded — ever. Technical data may be processed by our hosting provider and, for advertising, by ad partners such as Google LLC (USA) under their own terms and, where required, standard contractual clauses approved by the European Commission.
10. Retention
Server logs: short rotation (days to weeks). Correspondence: for the duration of the matter plus a reasonable archive. There are no user accounts and no databases of personal profiles to retain.
11. Security
The site is served over TLS/HTTPS. Combined with data minimisation by design — no forms, no accounts, no payments — the practical risk of data exposure is close to zero. No internet system is 100% secure, so absolute guarantees are impossible.
12. Children's privacy
The handbook addresses adult travellers. It is not directed at children, and we do not knowingly collect data from anyone under 13 (COPPA) or under 16 where a higher age applies. If you believe a child has sent us personal data by email, contact us and we will delete it.
13. Your rights
Depending on your location (GDPR, UK GDPR, CCPA and similar laws), you may have the right to access, correct, delete or restrict the processing of your personal data, to object to processing, to receive a portable copy, to withdraw consent, and to lodge a complaint with your national data protection authority. To exercise any of these rights, write to the editorial contact in Publisher details; we answer within the statutory period.
Browser signals such as Global Privacy Control and Do Not Track are respected to the extent technically possible.
14. Updates and contact
This policy is revised as the project or the law evolves; the version published on this page is always the current one. Last updated: 2026. Contact details: Publisher details.